Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: oUo9/wyJ4l96rYlRcb0InzOm8hgfDtIemXSoz58rlqY=
Subject key identifier: CF:97:7E:1E:DE:8B:66:1B:B3:9F:8A:40:A8:CA:48:BC:1F:52:22:96
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 019EB80EAA45AEDD2D854E8D34B32E00A3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 11DF
Signing time: Thu 11 Jun 2026 19:00:29 +0000
Manifest this update: Thu 11 Jun 2026 19:00:29 +0000
Manifest next update: Fri 12 Jun 2026 19:00:29 +0000
Files and hashes: 1: KhWNkr5gAw1c6ddmTPeSiEEfFWg.roa (hash: BfC/J8Ikas8k6I01UNkrtdj0AZZqj/UTxvhIrki0FuQ=)
2: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: yVp8XTi9piN2gYrfP/nBM26OrSdxmTW8lLzYxTpEAXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:aa:45:ae:dd:2d:85:4e:8d:34:b3:2e:00:a3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Jun 11 19:00:29 2026 GMT
Not After : Jun 12 19:00:29 2026 GMT
Subject: CN=cf977e1ede8b661bb39f8a40a8ca48bc1f522296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:0a:f8:15:de:73:d5:c4:e3:7a:ff:3d:8b:59:
5f:e4:b1:e4:a6:0b:9a:cd:40:08:94:2b:4e:99:fb:
34:11:54:ac:a4:15:91:e0:1c:a8:a9:10:7f:3b:c7:
d6:79:0b:b4:ce:7e:19:9d:35:07:ff:31:a0:7b:48:
92:4d:62:46:a3:b3:20:b9:fc:39:85:b3:82:d5:a6:
18:17:3a:0d:59:b4:fe:9e:40:a4:c9:09:9a:29:a8:
35:21:cd:31:17:a7:dd:21:08:0a:75:dc:c7:1e:fb:
db:f0:5e:95:04:fc:37:d9:61:ea:52:85:1c:fa:0a:
0c:5d:00:ca:0d:a4:e3:60:52:7c:10:19:f6:b8:37:
8f:00:4b:c0:4a:8c:44:50:e1:be:dd:50:ff:a9:06:
de:66:6e:97:6c:14:0b:9d:31:4f:b1:27:ec:40:5c:
4d:bb:c8:a5:31:b0:b6:fb:57:27:06:a2:1d:b3:b4:
ce:de:ad:76:91:ec:28:ce:69:a2:48:de:5a:59:b5:
b3:f5:62:3a:fb:2a:f7:e5:9b:fd:31:97:ff:e9:93:
12:19:f3:b6:dc:4c:ff:2e:d3:68:77:89:69:8d:98:
e3:5f:37:78:60:0f:62:d8:fb:2a:75:07:f3:a9:94:
e4:85:82:cc:27:e6:95:5c:d4:a1:74:1d:27:ad:49:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:97:7E:1E:DE:8B:66:1B:B3:9F:8A:40:A8:CA:48:BC:1F:52:22:96
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:51:fc:05:9d:8c:4e:44:50:a5:90:94:b6:33:df:72:af:db:
f4:39:35:b0:ca:a2:d0:84:69:ca:89:8d:07:a2:b3:a8:be:2e:
f3:db:b4:45:49:66:54:be:9b:87:92:ab:ed:7f:ad:38:95:32:
51:8e:26:a2:62:d2:cf:cd:3b:ea:3b:de:2b:e8:0c:a5:36:13:
29:94:32:ee:49:40:cd:74:6b:12:d1:d2:54:eb:bf:e0:ec:71:
bc:92:09:29:75:2d:a3:1b:4f:17:8e:bc:7c:6b:f2:24:40:46:
96:52:3c:07:65:21:a0:cc:af:21:11:33:93:29:0c:ca:51:ca:
41:e3:44:94:04:37:9d:33:b2:49:23:e8:42:21:2f:35:bd:4f:
c4:63:00:e4:a9:cb:9d:60:94:6d:24:c6:3b:18:27:54:66:ee:
4b:25:5c:57:7f:8b:4b:db:3a:74:44:c4:47:f2:dc:d8:19:a9:
4b:93:1f:c7:ac:4a:60:9f:5c:86:81:d4:0e:73:fe:6d:71:cc:
ba:09:0e:83:09:a9:b2:d5:93:72:9f:43:ef:fb:b9:46:b4:03:
08:26:2e:5b:91:39:7b:e0:0b:16:f5:d9:59:82:1d:9f:97:11:
e1:08:18:d2:8e:2c:9c:9b:7c:2f:3e:e7:fb:4d:9d:2a:7e:ac:
cc:eb:7f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:22:23 2026 by rpki-client