Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: HC40mFgWN/gw6Dj6Av8PbtIk7TnTzqjl9GcHZ0/sclk=
Subject key identifier: 12:37:A0:44:A7:B1:F2:CB:29:94:D3:35:97:23:B9:4D:49:72:51:0C
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 019DCF0722F7FB7B8C17394F949FDC8799AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 13:00:44 +0000
Manifest this update: Mon 27 Apr 2026 13:00:44 +0000
Manifest next update: Tue 28 Apr 2026 13:00:44 +0000
Files and hashes: 1: Osq7NSls-V_WRlR-W1mJHM_V258.roa (hash: HWPLwgiyrG1kWVohZBZUZ7KBJwPuiTXg/nt8CEnDueU=)
2: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: GbyjTBwsuW33JX/7S5RuEqGmv7xEoIb6F+k064ViO/8=)
3: mNxtgGXjngdFQsHjGvyBLr88vFA.roa (hash: WJI9HFPJItF3b8hNiZFDXBjcGbFTioYgXmE8KE+LjfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:22:f7:fb:7b:8c:17:39:4f:94:9f:dc:87:99:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Apr 27 13:00:44 2026 GMT
Not After : Apr 28 13:00:44 2026 GMT
Subject: CN=1237a044a7b1f2cb2994d3359723b94d4972510c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:8b:e3:65:6a:42:b2:a7:d1:4d:76:07:23:
ff:c4:60:a7:5d:d0:3e:6f:f4:44:40:51:e1:73:76:
29:30:d9:bb:50:b5:ce:1d:a6:6c:be:9f:58:97:11:
c7:52:b5:ea:a1:c0:13:36:e1:09:76:c0:6b:16:33:
d7:ac:40:e7:5f:8f:0d:63:94:50:7e:56:ba:a7:9b:
d7:68:35:c6:34:15:9d:a3:0d:47:39:e7:0b:2a:86:
e9:9f:be:a7:25:e4:7f:79:69:18:9c:64:d2:3a:a8:
86:92:bb:9b:71:3e:b3:5e:9f:00:2d:5a:80:11:1b:
51:94:6b:b3:92:18:55:2e:b0:e7:37:d1:d8:e8:b3:
76:c5:f9:94:fa:e4:e7:6f:00:1f:fc:b8:73:ca:c9:
5b:bd:9f:3a:b5:07:d5:67:07:e0:15:cf:1c:b1:0a:
2a:34:6d:4c:c8:05:67:ba:22:f8:21:50:15:d5:73:
eb:5b:20:64:53:5f:05:b1:3c:ed:94:3a:9c:fa:16:
45:d3:a8:90:7e:9c:a8:a8:16:a2:81:97:b9:39:fa:
29:bb:a8:72:ae:bb:d2:0c:f4:59:e1:62:f1:18:80:
55:33:ce:80:a4:2d:18:bd:c6:66:92:06:dd:05:57:
76:98:53:73:25:5d:b4:5a:6c:0c:14:c9:08:f1:8b:
06:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:37:A0:44:A7:B1:F2:CB:29:94:D3:35:97:23:B9:4D:49:72:51:0C
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:27:6f:32:f6:12:d0:a2:dc:93:71:4a:28:c0:cf:88:da:d5:
03:a9:be:eb:74:5f:00:1a:fa:12:ea:ff:e2:1b:8c:13:02:1d:
14:c0:dd:7a:e7:f6:cb:b8:7a:88:7b:7b:9d:a3:4d:a7:58:9f:
07:38:9b:e5:1f:03:a1:99:f0:0b:95:80:7a:45:c3:91:4e:2c:
b0:58:3d:af:57:b5:a6:f1:f8:9b:09:54:9b:b4:22:e5:1a:40:
ba:ee:5f:b8:0c:8e:f7:02:71:c0:85:b9:59:eb:5c:72:0e:45:
df:ba:1d:dc:4d:5c:82:dd:d8:60:be:e0:68:ff:eb:04:a1:ae:
17:4d:9a:b4:35:1d:9a:bc:46:b3:7d:74:4e:d8:e8:ca:44:bd:
ab:65:bb:5f:f5:ca:7c:e3:a4:04:84:1a:19:0f:39:3c:1f:bc:
d3:14:b9:23:8b:f5:16:34:98:6b:c9:b3:31:14:6e:05:e2:8a:
d5:d7:dc:07:6a:16:35:f5:08:4c:26:c7:ff:a2:ab:47:c0:31:
26:3d:b8:69:ef:fd:3b:17:b7:66:10:c0:77:90:79:d3:a8:9e:
48:c8:ac:a3:0a:bd:3f:48:fb:3f:62:60:45:04:ae:b9:6b:81:
13:20:5e:f8:4c:db:4c:d5:b5:3f:5e:fe:61:14:21:f5:a4:e5:
2f:ce:9d:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PByL3+3uMFzlPlJ/ch5mqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MGViZDA0NjlhNWM2OWMxMDk4OTcxY2FhYjM2ZmUwMzJl
Y2UzMTEwHhcNMjYwNDI3MTMwMDQ0WhcNMjYwNDI4MTMwMDQ0WjAzMTEwLwYDVQQD
EygxMjM3YTA0NGE3YjFmMmNiMjk5NGQzMzU5NzIzYjk0ZDQ5NzI1MTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA2L42VqQrKn0U12ByP/xGCnXdA+
b/REQFHhc3YpMNm7ULXOHaZsvp9YlxHHUrXqocATNuEJdsBrFjPXrEDnX48NY5RQ
fla6p5vXaDXGNBWdow1HOecLKobpn76nJeR/eWkYnGTSOqiGkrubcT6zXp8ALVqA
ERtRlGuzkhhVLrDnN9HY6LN2xfmU+uTnbwAf/LhzyslbvZ86tQfVZwfgFc8csQoq
NG1MyAVnuiL4IVAV1XPrWyBkU18FsTztlDqc+hZF06iQfpyoqBaigZe5Ofopu6hy
rrvSDPRZ4WLxGIBVM86ApC0YvcZmkgbdBVd2mFNzJV20WmwMFMkI8YsGeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBI3oESnsfLLKZTTNZcjuU1JclEMMB8GA1UdIwQY
MBaAFJcOvQRppcacEJiXHKqzb+Ay7OMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82MjAwMWEtYTMxMy00ZTMzLWJiMDQt
OTE0YjRiMzRmOTgxLzEvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS82MjAwMWEtYTMxMy00ZTMzLWJiMDQtOTE0YjRiMzRmOTgx
LzEvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCdvMvYS
0KLck3FKKMDPiNrVA6m+63RfABr6Eur/4huMEwIdFMDdeuf2y7h6iHt7naNNp1if
Bzib5R8DoZnwC5WAekXDkU4ssFg9r1e1pvH4mwlUm7Qi5RpAuu5fuAyO9wJxwIW5
Wetccg5F37od3E1cgt3YYL7gaP/rBKGuF02atDUdmrxGs310TtjoykS9q2W7X/XK
fOOkBIQaGQ85PB+80xS5I4v1FjSYa8mzMRRuBeKK1dfcB2oWNfUITCbH/6KrR8Ax
Jj24ae/9Oxe3ZhDAd5B506ieSMisowq9P0j7P2JgRQSuuWuBEyBe+EzbTNW1P17+
YRQh9aTlL86d5A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:04:18 2026 by rpki-client