Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: 76XbtLTMbUkArSO1RMGwPtkcXMVq+rVbIWvkjeHj65M=
Subject key identifier: AA:D9:FC:1C:1B:15:50:83:12:F6:24:8E:B2:C9:82:FF:82:96:0A:47
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 01A08C0D245E84F339D4B658C0851BFE0B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 16:01:06 +0000
Manifest this update: Thu 10 Sep 2026 16:01:06 +0000
Manifest next update: Fri 11 Sep 2026 16:01:06 +0000
Files and hashes: 1: Osq7NSls-V_WRlR-W1mJHM_V258.roa (hash: HWPLwgiyrG1kWVohZBZUZ7KBJwPuiTXg/nt8CEnDueU=)
2: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: wfO4ftFiJu+s4p5ANpYU3oH/QJ1TIr2z7VqjUv3ogJo=)
3: mNxtgGXjngdFQsHjGvyBLr88vFA.roa (hash: WJI9HFPJItF3b8hNiZFDXBjcGbFTioYgXmE8KE+LjfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:24:5e:84:f3:39:d4:b6:58:c0:85:1b:fe:0b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Sep 10 16:01:06 2026 GMT
Not After : Sep 11 16:01:06 2026 GMT
Subject: CN=aad9fc1c1b15508312f6248eb2c982ff82960a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:c2:7c:4d:41:d1:ce:48:79:a6:e9:2a:40:
6d:c8:63:5e:c4:20:d5:ee:91:9b:71:65:93:26:20:
7d:e8:07:06:f9:d0:66:c4:7f:82:d7:91:30:30:12:
d8:de:57:54:ae:53:4b:74:48:e0:b2:20:e6:aa:49:
c3:d0:8c:23:1f:54:61:64:e3:d8:28:fb:9f:59:65:
28:aa:4e:f5:5b:60:59:d8:3a:0b:78:6a:ba:77:3e:
e9:27:c0:53:b1:3e:40:02:18:e7:ca:7d:b3:39:86:
91:36:19:5e:25:49:9d:be:37:1f:9f:0b:80:dc:31:
6c:0d:88:f9:ac:90:e2:bf:31:63:c1:4b:49:91:0d:
67:7a:28:82:81:64:d6:ba:cf:d3:0c:d7:a4:b9:f0:
0a:bd:19:6e:ef:bc:fb:75:b0:5f:2d:61:43:cf:84:
08:c9:14:51:73:85:c0:f4:f1:b5:c2:7a:36:8a:7d:
f5:dc:74:61:ea:14:47:9b:09:90:d7:29:08:da:ed:
f0:3b:c0:cd:22:19:1a:f2:6f:1f:03:71:bd:1c:d1:
08:80:e4:3f:9b:e2:89:fc:22:e7:fe:16:9f:38:30:
2f:79:b2:46:54:23:73:ff:b9:37:38:c9:c0:37:40:
f3:9c:dc:8c:cc:35:c6:70:38:08:2d:cf:b6:4d:25:
68:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D9:FC:1C:1B:15:50:83:12:F6:24:8E:B2:C9:82:FF:82:96:0A:47
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:1a:17:b1:38:17:7b:ea:5d:d8:69:b4:e2:73:8a:59:4e:9d:
0f:fb:98:79:67:b2:2c:0a:cf:00:b0:ea:bc:90:38:74:cf:19:
9b:07:f7:36:39:27:a1:7f:aa:44:18:15:8d:99:9b:3c:96:3a:
37:1e:cb:3d:3f:ff:1a:3b:0f:c4:70:81:1f:82:02:00:93:d5:
21:c2:89:ca:fe:03:72:3c:f5:9d:88:9b:41:4c:36:74:e4:6e:
21:76:2b:8a:4d:75:94:3e:92:f8:19:92:a9:9e:5f:46:e8:5f:
6b:63:98:55:a7:86:28:36:30:2e:ee:80:ff:ec:e2:2d:73:17:
cf:8e:62:a1:f7:8c:5a:d0:65:d0:0d:f2:7b:7e:d7:1a:a7:25:
0f:44:8e:29:f0:64:35:e9:ca:d0:c6:d3:b5:97:62:61:50:fb:
00:0a:88:57:d9:8c:78:71:a5:a7:90:d5:67:f5:10:87:ec:9b:
1d:93:b4:03:ad:92:68:6f:f5:49:0b:d7:dd:55:0e:26:c0:99:
7b:68:09:4d:42:67:76:46:33:96:be:4a:b0:88:57:e5:89:9f:
89:12:73:65:a4:21:5f:05:2f:61:4d:12:13:5c:00:d4:80:77:
16:d6:b1:3c:86:b2:6e:8b:a4:5f:7f:32:d5:8d:69:d8:b1:e2:
ab:d8:9c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:32:07 2026 by rpki-client