Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: SqciG52vygkCNlDifMZ2CsdIPoKEtoJWjDKiz3zAIVw=
Subject key identifier: 4C:36:50:E9:32:9B:DB:EC:CD:93:21:FD:F2:88:37:F3:86:44:12:CB
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 019F9FCD2186D8A2A60FA803CB183F49BFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 1257
Signing time: Sun 26 Jul 2026 19:00:48 +0000
Manifest this update: Sun 26 Jul 2026 19:00:48 +0000
Manifest next update: Mon 27 Jul 2026 19:00:48 +0000
Files and hashes: 1: KhWNkr5gAw1c6ddmTPeSiEEfFWg.roa (hash: BfC/J8Ikas8k6I01UNkrtdj0AZZqj/UTxvhIrki0FuQ=)
2: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: NBRTBma5TRpshvWOFvVJOhQOz+CiGpqj7XG9vaTYwGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:21:86:d8:a2:a6:0f:a8:03:cb:18:3f:49:bf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Jul 26 19:00:48 2026 GMT
Not After : Jul 27 19:00:48 2026 GMT
Subject: CN=4c3650e9329bdbeccd9321fdf28837f3864412cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:76:33:28:99:c1:d3:a2:a6:53:91:74:ed:
aa:39:ea:88:06:88:f2:7b:09:8d:2a:87:22:9b:5c:
87:11:b7:8b:ce:18:1e:99:af:14:cb:37:e2:f1:39:
21:eb:6f:c1:d7:7f:5c:64:2c:4b:74:05:49:bb:13:
f2:c2:11:f3:06:4f:ab:04:7e:73:a3:0d:6c:68:85:
0c:01:f7:27:a5:da:1f:e2:49:9c:13:ae:d4:ff:82:
f5:db:dc:9a:cc:ac:cb:f1:3e:af:20:6f:c6:00:b4:
76:b7:c1:48:02:e0:e6:0c:c5:01:dc:3d:dd:0b:5a:
52:c8:c8:95:61:38:cd:61:10:0f:75:e9:ec:93:82:
ce:7a:88:b6:ef:b4:59:93:b4:0c:4b:98:9b:e4:21:
73:33:38:29:73:20:a5:e2:fb:4d:37:06:7a:f2:f5:
95:39:bb:8b:54:79:de:1d:4d:c0:d4:9a:44:13:9a:
9c:5a:61:d2:45:cb:1f:65:d9:08:b1:e0:93:24:c6:
0a:69:44:c7:29:b9:0c:a1:0c:d0:90:82:2a:4d:17:
af:0b:5b:8f:67:3c:7c:58:f4:e7:d5:e7:a3:03:93:
b9:58:f8:05:eb:c4:75:26:2b:e1:9c:58:02:76:ee:
2c:46:16:be:f1:2e:f5:15:5a:df:bd:b3:e4:a9:c0:
10:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:36:50:E9:32:9B:DB:EC:CD:93:21:FD:F2:88:37:F3:86:44:12:CB
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:aa:43:8f:8f:f1:a7:74:3d:81:cd:10:51:35:ff:39:d3:84:
9d:c1:7d:9c:77:d6:e0:aa:2a:40:ee:08:f0:6d:3a:78:db:b5:
f5:23:61:4f:48:6d:39:ed:a7:a3:13:38:13:c6:e4:61:9c:bc:
6a:82:a1:70:ab:80:45:12:0a:05:06:b7:55:36:a2:28:f8:71:
2f:3c:4e:89:08:80:cb:01:4b:a9:fb:1f:43:67:fb:63:9e:6f:
38:0f:5e:67:5b:65:44:4b:66:ad:19:65:9d:42:24:d2:1b:2a:
df:f8:cb:6b:9d:92:ca:3c:e7:1c:9e:c7:18:f4:7a:bc:47:ce:
e2:bd:1f:fa:2b:19:5a:15:a9:59:fe:91:e2:84:1d:5b:7f:2e:
29:fe:1a:f3:d7:65:8a:d4:04:f0:ea:36:98:8f:82:89:14:fe:
d2:cc:88:59:85:5c:04:5b:64:73:43:d8:92:1b:33:db:38:57:
a6:ea:22:c8:55:4f:1e:ac:35:1f:a4:2d:5c:df:10:06:ed:68:
43:4f:cc:90:e8:33:8c:b0:20:b3:fb:4b:a8:90:18:98:7b:ef:
81:cf:af:c8:16:7f:1c:49:b4:a1:cf:92:61:a7:0a:a8:e4:f2:
77:d1:78:65:66:f3:39:31:8f:5c:42:2b:c3:a8:2d:d1:8f:0c:
67:de:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:41:23 2026 by rpki-client