Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.mft
File: lwj2W3tYEEJW4NM8xGwunXYou3g.mft (raw, json)
Hash identifier: A4v6Vyw909/WTlNQIw/puG/gaLXkYaSOve6Bqs7mu6E=
Subject key identifier: 6A:6B:64:F7:6A:E3:0C:72:C2:CC:62:D6:BC:C9:D4:15:EB:8C:3C:5B
Authority key identifier: 97:08:F6:5B:7B:58:10:42:56:E0:D3:3C:C4:6C:2E:9D:76:28:BB:78
Certificate issuer: /CN=9708f65b7b58104256e0d33cc46c2e9d7628bb78
Certificate serial: 01A1551C49F20903FA21239213FC3A7DBBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwj2W3tYEEJW4NM8xGwunXYou3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.mft
Manifest number: DB
Signing time: Mon 19 Oct 2026 17:01:19 +0000
Manifest this update: Mon 19 Oct 2026 17:01:19 +0000
Manifest next update: Tue 20 Oct 2026 17:01:19 +0000
Files and hashes: 1: Cpm35s9Ka4hhJWZn8CGNJk4Go5w.roa (hash: QYqaTylwZdrWR4V7QHicMTlDarm+SapwyzyHuoF8w3Y=)
2: lwj2W3tYEEJW4NM8xGwunXYou3g.crl (hash: xu/G0PWoveECAeYsFxYkEVtRYE4okkIahhe1H49Y3XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwj2W3tYEEJW4NM8xGwunXYou3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:1c:49:f2:09:03:fa:21:23:92:13:fc:3a:7d:bb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9708f65b7b58104256e0d33cc46c2e9d7628bb78
Validity
Not Before: Oct 19 17:01:19 2026 GMT
Not After : Oct 20 17:01:19 2026 GMT
Subject: CN=6a6b64f76ae30c72c2cc62d6bcc9d415eb8c3c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:e5:3c:87:0e:28:49:75:5d:76:78:2e:ec:
cd:cb:f0:15:6e:36:00:7a:f2:60:c4:ac:15:33:27:
19:d7:28:b0:30:05:50:49:a5:86:bd:cb:9b:87:39:
8e:fc:30:0e:c2:57:a8:0f:8b:39:32:3f:b6:5b:7a:
b8:21:a3:76:fd:16:1a:27:5a:5b:c5:f8:4d:e2:fe:
14:6f:88:e5:26:77:1c:3d:17:4f:ed:48:cd:94:34:
80:89:6a:94:ee:99:d5:59:92:a2:83:9e:a3:a5:6a:
64:03:7d:62:ba:d7:bc:00:c0:3b:c8:6b:3a:3a:bc:
b9:b9:f3:41:0c:65:7f:3c:a7:1f:f1:d1:6f:97:d8:
69:70:78:28:b5:ad:24:fd:d3:29:03:01:c5:bf:4c:
14:8a:de:bb:ad:71:ae:92:22:66:a2:77:fa:13:2b:
4f:9f:b8:45:aa:7c:7b:33:67:19:4c:3e:5d:dc:da:
f7:20:2a:d7:ef:a5:ec:35:d7:22:78:c7:7d:45:08:
56:3f:55:f3:e5:c7:42:e3:88:83:4d:a0:06:3d:84:
16:86:3b:58:02:61:ed:7a:f4:d3:24:19:ba:ea:c3:
7d:e8:ef:43:8b:1e:92:90:7d:d0:04:b5:da:8e:2b:
13:44:9f:13:b3:6d:5f:f0:53:3d:8d:51:0b:72:6c:
a2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6B:64:F7:6A:E3:0C:72:C2:CC:62:D6:BC:C9:D4:15:EB:8C:3C:5B
X509v3 Authority Key Identifier:
keyid:97:08:F6:5B:7B:58:10:42:56:E0:D3:3C:C4:6C:2E:9D:76:28:BB:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwj2W3tYEEJW4NM8xGwunXYou3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49eaa1-443d-40e3-ac5c-4b5e9e8fa50e/1/lwj2W3tYEEJW4NM8xGwunXYou3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9f:96:bc:48:3d:7b:a5:37:4f:22:57:a9:a8:d4:c1:da:45:
e7:0d:95:36:c8:b0:f4:4a:27:8f:61:cf:80:1e:c6:ba:02:df:
58:72:0d:b9:a2:c4:1b:db:0f:20:93:d7:85:55:68:3e:e7:80:
10:a8:14:83:85:83:f7:a7:d7:70:e2:51:01:30:94:57:f2:5b:
2b:a5:8e:93:c2:59:71:bf:ae:d6:85:8d:4d:9b:ba:ea:c7:f6:
4a:cd:2d:eb:6b:7e:a4:3d:0d:23:3f:4a:53:b1:83:2e:47:d0:
58:7e:5e:14:73:c9:66:fa:bc:78:1b:99:e7:f1:e0:1c:76:c0:
52:ad:cf:e5:55:04:de:78:1e:9d:bc:21:ae:66:6c:c2:90:11:
86:a2:60:5e:a3:b6:be:4c:c2:56:17:12:21:e8:73:85:a3:ca:
99:ed:2e:25:35:d7:b1:cd:9a:f1:c2:f2:24:46:bd:3f:5f:73:
21:1f:78:03:41:34:6b:86:93:8c:a0:13:23:7d:22:01:83:20:
75:a8:e6:3c:39:0d:c1:a7:c9:b8:44:82:7f:f1:70:c3:c0:59:
be:ca:14:04:a9:6b:ad:b1:53:d3:3a:1f:80:e8:06:6d:c2:6d:
50:37:43:e5:df:a6:fd:18:26:c2:cf:11:0f:a5:06:38:64:d2:
49:5c:da:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:35:17 2026 by rpki-client