Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
File: lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json)
Hash identifier: 5OTDQgmZvScctCZVwDcs5rFciA/25LDumV0xpJ7veDo=
Subject key identifier: 57:6D:43:85:B5:AA:82:59:65:FE:A8:BA:BA:27:8D:CA:A3:12:67:38
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 019DCC74BD349B410B3BD5E171A44F1D597D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
Manifest number: 18DC
Signing time: Mon 27 Apr 2026 01:01:35 +0000
Manifest this update: Mon 27 Apr 2026 01:01:35 +0000
Manifest next update: Tue 28 Apr 2026 01:01:35 +0000
Files and hashes: 1: axFCojXUhSkytCN0atEZfj9fkA8.roa (hash: I3PEkjutyOX2FwIEMplxrCsf4ez6AG70VNxYovdKhQs=)
2: dp2gXrpfvOMg65Z1sl0IeonKbxM.roa (hash: 8Vzr1PEVztWf+5QEVA47vH/IaL1dnxwbEHxKX7SEwVU=)
3: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: Xb89MKR4KQTIEAQNNK1TK/Cs5+/96Px5ydv1JmdlSlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:bd:34:9b:41:0b:3b:d5:e1:71:a4:4f:1d:59:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Apr 27 01:01:35 2026 GMT
Not After : Apr 28 01:01:35 2026 GMT
Subject: CN=576d4385b5aa825965fea8baba278dcaa3126738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:ff:00:0c:bd:a4:61:1c:34:42:24:c1:41:
d1:af:52:f9:da:b7:59:7f:0a:db:12:51:40:6c:1a:
1d:a0:3f:fe:3b:d0:24:07:58:2f:03:55:ab:36:e5:
df:07:1a:f2:6b:90:6b:3f:18:74:cf:fe:a7:db:c9:
e3:87:50:aa:19:ab:1d:5d:e4:35:2e:4c:bc:e3:a7:
07:54:0e:e6:d8:3c:25:33:80:ba:3e:f2:03:8a:e0:
cc:48:8d:56:72:f7:95:7b:53:45:21:a1:68:c0:36:
14:6c:93:f5:a1:c0:3f:30:ff:07:10:c6:08:d2:ef:
fd:5b:d9:de:03:98:ef:a0:0c:60:2d:b7:90:6a:0e:
b2:7f:49:fd:7f:be:48:f5:8e:dc:f1:71:58:7a:10:
cb:28:71:bd:0b:4e:2d:89:02:c4:70:ba:5d:b5:8f:
4d:a2:6e:5d:ac:1a:fc:33:96:d5:3d:fc:7e:f6:4b:
a2:42:12:b7:e2:3d:0a:44:08:aa:15:19:d6:14:d0:
5c:6f:c4:23:39:02:e2:bd:53:81:67:5e:bf:c5:14:
f8:78:18:80:6c:b2:8a:1f:0e:96:68:a1:79:b1:d4:
3e:e4:d6:08:18:b8:2b:a2:a1:cf:aa:18:1e:c5:38:
41:ee:be:d9:19:bc:1b:99:a6:9f:3c:67:d6:36:26:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6D:43:85:B5:AA:82:59:65:FE:A8:BA:BA:27:8D:CA:A3:12:67:38
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2a:19:f5:8d:39:4c:ad:cf:3f:94:7a:3e:40:e7:56:a4:3c:
ac:ff:aa:22:fc:94:4d:d5:69:05:c0:35:21:e6:b0:59:d1:4f:
75:19:f1:75:16:cd:49:bd:1f:05:0c:a4:ac:71:05:8b:1f:50:
75:07:57:b3:b0:21:a8:94:05:82:c4:b6:37:76:7e:60:3a:72:
47:e3:fd:42:81:b9:f6:07:f7:a5:69:3f:67:47:fb:e4:54:de:
e5:33:ec:84:47:d5:ac:28:92:78:44:9e:c4:3d:d5:81:0b:74:
a4:da:0c:69:65:4c:72:d1:55:05:d0:74:04:3c:51:da:f7:2a:
42:5c:fb:dc:3a:a4:71:26:ac:70:2f:fd:fe:1b:27:89:a6:63:
54:a8:c2:0e:17:d8:e9:57:f2:a3:ba:45:27:52:c0:d7:18:e8:
dd:e3:52:05:72:e9:56:03:66:62:52:b6:5f:e8:77:54:9b:5e:
9e:73:b6:9c:79:18:74:56:fa:60:33:27:2c:c2:b4:63:11:2b:
a3:1e:56:0a:8a:27:8c:b5:c8:c0:07:1f:aa:81:4c:db:f8:df:
75:80:b1:41:ba:00:c8:62:d0:ff:28:98:8b:df:72:e8:0f:91:
08:fc:ee:bd:51:a7:20:05:cc:90:0d:b7:e7:36:5e:6f:7a:e4:
23:82:79:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:59:35 2026 by rpki-client