Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
File: lwhyRZO0dTF1shSBLPaJGmRfhMU.mft (raw, json)
Hash identifier: 8ks1TjdFjBGw/ARfKl0fx5/+j7fr649POfqZGxk+r3Q=
Subject key identifier: B1:AB:E5:46:9A:84:6C:8E:F7:33:EF:0A:FE:DA:DD:2C:35:57:17:AE
Authority key identifier: 97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
Certificate issuer: /CN=9708724593b4753175b214812cf6891a645f84c5
Certificate serial: 019D37F76A9492C1DCC08B1786C0D12A5151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
Manifest number: 03B5
Signing time: Sun 29 Mar 2026 05:00:54 +0000
Manifest this update: Sun 29 Mar 2026 05:00:54 +0000
Manifest next update: Mon 30 Mar 2026 05:00:54 +0000
Files and hashes: 1: cGIbIuyd_-GcZFAPYp_iRhjY8Fs.roa (hash: 4l9uaitU/oM93/Oha9XHLDc9sPtfot6T5F/wqRyQOyk=)
2: lwhyRZO0dTF1shSBLPaJGmRfhMU.crl (hash: HHDcCjDlfNJBqr7HyTqYZs7gBKJ8uuJY2IAaV8jXB0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6a:94:92:c1:dc:c0:8b:17:86:c0:d1:2a:51:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9708724593b4753175b214812cf6891a645f84c5
Validity
Not Before: Mar 29 05:00:54 2026 GMT
Not After : Mar 30 05:00:54 2026 GMT
Subject: CN=b1abe5469a846c8ef733ef0afedadd2c355717ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:e4:40:bc:c4:41:74:80:05:4d:89:25:05:
65:35:a7:1d:90:3e:ee:38:70:f6:5e:ae:f2:ee:f4:
93:47:d9:a9:b5:f7:fd:3d:fa:84:15:40:94:b5:5b:
89:6c:09:e6:36:bf:5e:6a:b7:33:ac:8d:16:7b:52:
c0:1c:43:d2:55:9f:71:69:00:c3:38:86:9d:14:47:
1b:76:7b:bc:a3:f1:77:5f:46:f8:1e:9b:3c:25:86:
b2:d6:3e:63:d0:0a:47:7e:1c:5d:38:a3:ed:6b:19:
84:e6:ad:cb:79:86:c5:75:d8:2e:d3:c2:63:2d:54:
32:c0:02:22:95:c0:86:30:38:0c:a4:e6:60:83:e7:
e2:29:b6:c2:6d:14:fb:e2:33:2d:1c:0d:68:bf:cd:
c4:3e:4e:ae:cb:b6:c5:6c:c1:bb:e0:32:f3:6e:d4:
0b:d0:c1:ba:53:bf:3c:0d:7f:db:32:60:64:90:0d:
a6:30:69:88:49:e6:3d:75:d7:5e:1b:2a:90:17:9e:
f1:04:be:d3:0f:ef:46:bf:8c:ea:f0:68:1e:bd:a1:
c0:63:17:66:f3:6b:fe:e7:6c:8e:5d:2f:94:c5:6f:
77:87:a8:cc:bb:8c:91:75:af:d8:fc:db:28:f4:dd:
ad:f7:46:ce:30:cc:73:a5:be:fd:e2:b8:a9:10:6f:
b0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AB:E5:46:9A:84:6C:8E:F7:33:EF:0A:FE:DA:DD:2C:35:57:17:AE
X509v3 Authority Key Identifier:
keyid:97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1f:54:56:28:da:5d:b3:c4:02:db:41:4c:07:c0:e1:f4:f2:
da:b7:a1:14:41:da:ef:9b:36:cf:5b:93:bf:12:f2:38:c2:61:
f2:e8:e6:32:a8:1c:e8:9e:f3:b7:9e:b2:03:fb:10:33:d5:96:
f7:d8:a1:8d:1f:65:b4:df:16:26:e7:93:bb:af:a2:3d:e8:f4:
e1:bf:79:b7:1f:3e:95:82:76:cf:78:89:1e:6a:a4:67:55:1c:
df:74:3e:16:1b:21:29:0b:14:29:5f:56:8d:fd:92:9c:d5:de:
80:99:7f:3f:b9:c8:60:4d:60:6a:cf:7d:66:7f:f2:db:90:2d:
b7:ab:09:53:be:a0:95:d9:37:29:6c:41:ab:dc:f5:12:3f:3f:
b3:58:e7:96:cf:66:e1:2d:a5:4f:f1:7d:c2:3b:5a:06:4f:f3:
fb:2f:2a:6c:26:0c:f4:13:82:93:dd:1d:ab:81:68:ee:da:6e:
27:99:b2:dd:ea:95:d6:41:4c:d6:0f:d8:a2:d4:92:0a:df:ab:
3a:dd:c7:cf:b3:fe:b4:60:1e:41:f3:11:81:da:82:ae:b5:ab:
4e:e4:6d:6b:3b:31:91:e1:6f:04:76:5a:a6:85:6d:6c:59:be:
14:42:9f:78:cc:a7:f7:b7:02:01:b5:ff:be:1f:44:97:77:15:
1c:51:b2:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0392qUksHcwIsXhsDRKlFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MDg3MjQ1OTNiNDc1MzE3NWIyMTQ4MTJjZjY4OTFhNjQ1
Zjg0YzUwHhcNMjYwMzI5MDUwMDU0WhcNMjYwMzMwMDUwMDU0WjAzMTEwLwYDVQQD
EyhiMWFiZTU0NjlhODQ2YzhlZjczM2VmMGFmZWRhZGQyYzM1NTcxN2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzrkQLzEQXSABU2JJQVlNacdkD7u
OHD2Xq7y7vSTR9mptff9PfqEFUCUtVuJbAnmNr9earczrI0We1LAHEPSVZ9xaQDD
OIadFEcbdnu8o/F3X0b4Hps8JYay1j5j0ApHfhxdOKPtaxmE5q3LeYbFddgu08Jj
LVQywAIilcCGMDgMpOZgg+fiKbbCbRT74jMtHA1ov83EPk6uy7bFbMG74DLzbtQL
0MG6U788DX/bMmBkkA2mMGmISeY9dddeGyqQF57xBL7TD+9Gv4zq8GgevaHAYxdm
82v+52yOXS+UxW93h6jMu4yRda/Y/Nso9N2t90bOMMxzpb794ripEG+wTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGr5UaahGyO9zPvCv7a3Sw1VxeuMB8GA1UdIwQY
MBaAFJcIckWTtHUxdbIUgSz2iRpkX4TFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hZThjMzUtZjlkNy00MzdiLTg5OTYt
MzJhNDI3OGU1YmM1LzEvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9hZThjMzUtZjlkNy00MzdiLTg5OTYtMzJhNDI3OGU1YmM1
LzEvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnB9UVija
XbPEAttBTAfA4fTy2rehFEHa75s2z1uTvxLyOMJh8ujmMqgc6J7zt56yA/sQM9WW
99ihjR9ltN8WJueTu6+iPej04b95tx8+lYJ2z3iJHmqkZ1Uc33Q+FhshKQsUKV9W
jf2SnNXegJl/P7nIYE1gas99Zn/y25Att6sJU76gldk3KWxBq9z1Ej8/s1jnls9m
4S2lT/F9wjtaBk/z+y8qbCYM9BOCk90dq4Fo7tpuJ5my3eqV1kFM1g/YotSSCt+r
Ot3Hz7P+tGAeQfMRgdqCrrWrTuRtazsxkeFvBHZapoVtbFm+FEKfeMyn97cCAbX/
vh9El3cVHFGyMw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:05:32 2026 by rpki-client