Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
File: lwhyRZO0dTF1shSBLPaJGmRfhMU.mft (raw, json)
Hash identifier: fCSnzPU6mSdu5K0esG/DdvGUAvIm/xQGn1uchQHKJUE=
Subject key identifier: 48:95:F8:E7:77:FC:AD:48:5A:0D:7F:C2:7E:79:88:5E:34:BA:55:AE
Authority key identifier: 97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
Certificate issuer: /CN=9708724593b4753175b214812cf6891a645f84c5
Certificate serial: 01A186AD6B6A2BD0BC9359DD939CB5542F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
Manifest number: 05F0
Signing time: Thu 29 Oct 2026 08:01:14 +0000
Manifest this update: Thu 29 Oct 2026 08:01:14 +0000
Manifest next update: Fri 30 Oct 2026 08:01:14 +0000
Files and hashes: 1: cGIbIuyd_-GcZFAPYp_iRhjY8Fs.roa (hash: 4l9uaitU/oM93/Oha9XHLDc9sPtfot6T5F/wqRyQOyk=)
2: lwhyRZO0dTF1shSBLPaJGmRfhMU.crl (hash: t1C1AClvriJl6QBhQlHZ+E7ogUMFTnL9WsEogd6aSVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ad:6b:6a:2b:d0:bc:93:59:dd:93:9c:b5:54:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9708724593b4753175b214812cf6891a645f84c5
Validity
Not Before: Oct 29 08:01:14 2026 GMT
Not After : Oct 30 08:01:14 2026 GMT
Subject: CN=4895f8e777fcad485a0d7fc27e79885e34ba55ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:f2:05:90:2d:75:67:2a:f7:26:e8:57:b6:
87:18:96:ab:d8:ee:e4:63:d2:15:0b:12:9b:92:4c:
84:ba:29:fb:01:86:1e:0e:9e:c9:26:c1:78:db:3f:
ee:1d:36:db:07:6e:26:2a:4d:78:4c:a9:f5:89:7c:
4e:88:93:5f:2d:02:be:74:52:b0:51:72:65:13:8e:
23:84:3d:e4:81:82:e3:87:01:c1:cf:10:32:ab:7b:
ec:90:be:e9:6a:14:79:ec:f9:7d:e3:6d:30:b5:a9:
55:9d:60:d2:8f:22:60:ae:6e:bd:1b:c5:df:9c:fc:
7b:22:e0:3c:c3:53:f0:5f:41:ef:5e:75:33:60:3c:
b5:f1:3c:94:94:65:63:e3:bc:21:9b:31:25:65:b3:
ae:cb:06:fc:a5:96:79:55:54:ae:a7:92:60:a7:62:
ef:0c:3f:42:49:53:cd:a2:8b:6f:10:db:53:9b:7f:
31:f2:ee:71:96:ca:e4:3e:6e:1e:a4:a6:d6:69:ed:
0a:cc:87:86:6d:1b:fb:7e:5f:c1:12:7d:e5:fe:58:
bc:94:b4:6c:35:02:a8:77:2a:53:ce:09:35:41:23:
8d:1a:dd:b6:8b:bd:79:41:1b:31:b2:21:72:09:af:
9f:2b:8e:19:7e:fa:ce:4e:af:b1:af:e9:6a:c1:f3:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:95:F8:E7:77:FC:AD:48:5A:0D:7F:C2:7E:79:88:5E:34:BA:55:AE
X509v3 Authority Key Identifier:
keyid:97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:50:7d:09:7c:0f:ad:35:d1:e3:88:ff:ea:88:25:e5:c6:36:
23:d0:e2:b3:21:8b:74:b3:05:5f:b6:1c:13:99:4b:5d:ef:3d:
af:11:d1:e4:7b:05:2c:04:d5:5f:09:c1:92:06:75:f7:7f:c4:
8f:00:b0:a7:ed:e3:b4:93:06:f4:7b:fe:b4:1a:cf:21:56:47:
1e:28:72:34:3f:4e:93:be:b8:cd:20:16:d5:53:8f:ea:9b:5d:
b7:28:0b:c3:af:9f:a0:d6:62:40:df:48:59:d6:73:c9:47:33:
cb:59:c3:18:77:ee:fc:80:61:a3:21:f4:77:46:bc:fe:78:f1:
38:e6:cb:b4:cd:90:55:ce:71:e8:3c:91:8f:fc:8d:b1:f5:b6:
b4:4f:90:38:af:40:f9:97:eb:41:da:f0:63:10:59:25:99:46:
cc:26:de:30:48:03:54:ee:76:2d:48:2a:52:20:fb:31:26:b2:
e9:ce:1e:65:e5:91:2f:6f:3c:f0:3e:05:17:88:1a:b9:06:49:
8c:cf:3c:c6:5b:d7:48:7e:c0:4e:0f:de:c2:45:80:cb:76:23:
e7:8e:60:45:9c:11:17:3d:1d:9c:35:a4:dc:70:8e:9f:72:70:
61:96:63:87:66:6b:fd:98:13:48:f2:24:0b:5c:53:38:88:02:
a8:aa:bd:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGGrWtqK9C8k1ndk5y1VC8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MDg3MjQ1OTNiNDc1MzE3NWIyMTQ4MTJjZjY4OTFhNjQ1
Zjg0YzUwHhcNMjYxMDI5MDgwMTE0WhcNMjYxMDMwMDgwMTE0WjAzMTEwLwYDVQQD
Eyg0ODk1ZjhlNzc3ZmNhZDQ4NWEwZDdmYzI3ZTc5ODg1ZTM0YmE1NWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmbyBZAtdWcq9yboV7aHGJar2O7k
Y9IVCxKbkkyEuin7AYYeDp7JJsF42z/uHTbbB24mKk14TKn1iXxOiJNfLQK+dFKw
UXJlE44jhD3kgYLjhwHBzxAyq3vskL7pahR57Pl9420wtalVnWDSjyJgrm69G8Xf
nPx7IuA8w1PwX0HvXnUzYDy18TyUlGVj47whmzElZbOuywb8pZZ5VVSup5Jgp2Lv
DD9CSVPNootvENtTm38x8u5xlsrkPm4epKbWae0KzIeGbRv7fl/BEn3l/li8lLRs
NQKodypTzgk1QSONGt22i715QRsxsiFyCa+fK44ZfvrOTq+xr+lqwfP7dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiV+Od3/K1IWg1/wn55iF40ulWuMB8GA1UdIwQY
MBaAFJcIckWTtHUxdbIUgSz2iRpkX4TFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hZThjMzUtZjlkNy00MzdiLTg5OTYt
MzJhNDI3OGU1YmM1LzEvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9hZThjMzUtZjlkNy00MzdiLTg5OTYtMzJhNDI3OGU1YmM1
LzEvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlB9CXwP
rTXR44j/6ogl5cY2I9DisyGLdLMFX7YcE5lLXe89rxHR5HsFLATVXwnBkgZ193/E
jwCwp+3jtJMG9Hv+tBrPIVZHHihyND9Ok764zSAW1VOP6ptdtygLw6+foNZiQN9I
WdZzyUczy1nDGHfu/IBhoyH0d0a8/njxOObLtM2QVc5x6DyRj/yNsfW2tE+QOK9A
+ZfrQdrwYxBZJZlGzCbeMEgDVO52LUgqUiD7MSay6c4eZeWRL2888D4FF4gauQZJ
jM88xlvXSH7ATg/ewkWAy3Yj545gRZwRFz0dnDWk3HCOn3JwYZZjh2Zr/ZgTSPIk
C1xTOIgCqKq9oQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 17:26:30 2026 by rpki-client