Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: RyI94TfE+uett/yEsG0WX15ph5hgt3fjlVhCRWFSyoI=
Subject key identifier: 27:77:A2:B3:C5:D2:3C:AD:CE:34:6F:20:49:44:94:D3:83:04:60:B7
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 019CE55B0FA838F029B82E2C7330F4D1C2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 1868
Signing time: Fri 13 Mar 2026 04:01:16 +0000
Manifest this update: Fri 13 Mar 2026 04:01:16 +0000
Manifest next update: Sat 14 Mar 2026 04:01:16 +0000
Files and hashes: 1: Osq7NSls-V_WRlR-W1mJHM_V258.roa (hash: HWPLwgiyrG1kWVohZBZUZ7KBJwPuiTXg/nt8CEnDueU=)
2: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: xRLnmhp7Ua+9S4Fl3pKvZLxuYmZ+r4Y8Q34y7HMs0A8=)
3: mNxtgGXjngdFQsHjGvyBLr88vFA.roa (hash: WJI9HFPJItF3b8hNiZFDXBjcGbFTioYgXmE8KE+LjfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5b:0f:a8:38:f0:29:b8:2e:2c:73:30:f4:d1:c2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Mar 13 04:01:16 2026 GMT
Not After : Mar 14 04:01:16 2026 GMT
Subject: CN=2777a2b3c5d23cadce346f20494494d3830460b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:79:66:ff:0a:8e:e4:b5:00:61:45:56:a4:
77:82:41:33:ed:e1:40:44:53:13:6f:cf:e8:69:01:
01:5d:52:6a:e8:45:fb:51:59:31:5a:24:44:2d:c7:
d2:b2:e8:32:b4:18:9a:82:a4:a2:c0:5e:51:2d:f7:
ab:07:80:7e:16:5c:03:d7:72:cc:0b:dd:97:d2:d4:
60:2a:92:61:24:3f:79:ae:93:2f:48:1d:c7:34:d3:
75:56:c0:5b:78:15:bb:3f:8b:1d:46:90:c2:3c:c4:
9d:23:15:af:54:f5:ce:f2:8c:d4:c6:ba:36:ea:d1:
99:2a:83:90:01:05:70:f8:c3:58:b2:40:16:0f:55:
2d:59:78:77:3b:68:f7:ff:cc:82:f0:2b:bf:c5:4e:
7b:2f:8a:ca:bc:e1:81:62:41:2a:80:3e:20:3d:40:
f8:36:cc:2a:f9:7f:70:1a:08:43:bc:00:ca:00:53:
56:cd:d1:a2:0a:14:04:2f:dd:99:4e:ad:76:49:57:
03:26:18:66:a6:06:0a:b8:c1:d4:3c:44:44:af:8e:
97:d0:70:c0:9d:bc:d2:f5:8a:30:7b:c7:2c:ab:c4:
ce:2e:f3:f7:0b:3d:fd:22:95:9a:57:43:b6:0a:b2:
80:f8:f4:fa:26:15:08:b9:d6:b5:7c:f7:07:18:62:
3e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:77:A2:B3:C5:D2:3C:AD:CE:34:6F:20:49:44:94:D3:83:04:60:B7
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:25:f2:86:25:27:27:73:3e:da:50:58:ee:d7:41:eb:46:6e:
12:dd:a0:f9:96:84:3b:d4:2d:64:85:bd:65:09:9f:90:00:08:
c3:5f:31:9b:88:c3:fc:5a:d1:3b:b2:e8:ed:bc:14:1c:e7:5f:
0c:26:6f:e4:81:f3:0b:82:0b:42:b3:cd:7d:d7:54:f0:57:08:
a5:d6:71:9a:0d:de:50:55:c4:fd:08:bd:b3:bf:25:bc:40:07:
79:3b:32:6c:c8:a5:e6:74:24:97:fe:53:92:60:88:79:df:71:
a1:3e:ba:33:aa:ab:d2:da:a7:33:05:00:e7:18:62:df:bd:fc:
f4:05:f7:f0:aa:77:89:61:2f:7c:9f:66:e0:11:9b:87:c6:19:
17:81:4c:0d:f1:dd:22:96:71:22:b7:bd:8d:5e:68:04:80:e7:
3c:67:e7:b6:16:3a:ee:61:05:f2:5a:ca:01:ff:f5:d1:6a:02:
8b:c7:2a:23:27:22:75:c4:fc:7b:7d:d1:3a:4c:ce:3b:cd:15:
07:4f:a5:d9:b4:5f:73:6b:00:39:dc:f8:5a:10:0f:21:85:b0:
25:0a:92:3b:c2:26:33:61:63:d5:7a:86:74:0a:9c:89:f7:94:
37:8c:f5:46:8e:0a:71:b6:08:62:4a:7a:b0:6d:01:5f:65:9d:
d4:81:ac:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:55:51 2026 by rpki-client