Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: NjGVR7LYiWC3YwQULcEgDZ7LERvBxSGn5PPCSZyACVs=
Subject key identifier: C3:D4:FA:66:FA:4F:2B:41:E8:9C:0C:70:E3:B0:19:60:83:32:F1:A3
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 01A08B688498E01EA1FED3C32D0D8B4C6549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 12D1
Signing time: Thu 10 Sep 2026 13:01:17 +0000
Manifest this update: Thu 10 Sep 2026 13:01:17 +0000
Manifest next update: Fri 11 Sep 2026 13:01:17 +0000
Files and hashes: 1: KhWNkr5gAw1c6ddmTPeSiEEfFWg.roa (hash: BfC/J8Ikas8k6I01UNkrtdj0AZZqj/UTxvhIrki0FuQ=)
2: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: rCDiB52lRfxJa0HVIkPfDbCrhIn0RTmJWfJ7mXnFbfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:84:98:e0:1e:a1:fe:d3:c3:2d:0d:8b:4c:65:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Sep 10 13:01:17 2026 GMT
Not After : Sep 11 13:01:17 2026 GMT
Subject: CN=c3d4fa66fa4f2b41e89c0c70e3b019608332f1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:d4:8d:e8:be:c3:52:81:4b:db:bf:10:69:
84:a7:c9:75:4a:97:64:64:21:01:69:c5:3f:ae:00:
6d:13:0a:c6:41:e3:83:8c:97:1c:95:ed:27:3c:13:
b9:f8:51:c4:6a:be:0b:37:82:ad:8a:fa:89:78:c8:
83:fc:41:d9:38:b1:57:4f:14:1b:36:9b:2c:1e:ec:
81:c4:e2:1f:f9:59:74:ba:b7:9e:f7:fb:2c:8b:bf:
ce:a1:50:64:ce:e1:14:a0:36:8b:14:2a:bc:1f:92:
c0:eb:fe:2d:2f:00:3c:d7:ce:04:16:65:e4:0b:e9:
9d:74:7b:04:76:e3:9c:d3:12:40:8b:9f:ac:34:b9:
af:4a:32:23:32:b8:e6:4b:ca:3f:20:60:3a:fc:bd:
ef:1c:e3:06:30:ed:7a:57:67:15:b2:4d:96:1c:b6:
8b:14:d8:c4:38:49:a3:ec:11:d4:d0:42:ce:f0:aa:
02:02:14:67:ca:87:ae:58:8a:df:c5:87:14:68:92:
f3:34:96:d2:55:84:1c:8f:4d:a9:0e:60:69:c0:92:
78:5d:e6:df:59:c4:f0:c7:d9:c3:b0:3e:2f:86:c6:
b4:95:80:61:04:70:7e:c5:15:53:07:81:dd:fa:ce:
8f:95:3d:b9:3d:ac:8e:a0:ea:0c:44:4d:43:7b:20:
75:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D4:FA:66:FA:4F:2B:41:E8:9C:0C:70:E3:B0:19:60:83:32:F1:A3
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:69:39:83:29:0d:f9:b2:b9:d1:f1:db:f3:e1:09:c7:1c:70:
0e:68:aa:fd:9f:c4:75:b1:26:68:32:7c:60:18:2b:cc:9f:32:
37:99:04:d5:eb:5e:5e:9c:7f:63:f4:bc:e6:b1:2e:20:e6:44:
24:47:01:d0:7e:e2:64:b8:07:6f:a0:e8:0b:e6:17:e6:e8:45:
91:33:7b:ea:29:dd:f7:0f:f2:8d:d9:c4:c6:e6:29:55:cb:24:
98:fc:eb:6f:ee:e6:04:d1:b9:f4:e6:9b:30:44:0e:36:2d:4f:
b5:87:a1:17:c2:1e:44:1c:dd:e6:7e:41:e8:00:af:f3:24:28:
54:4b:73:93:23:e5:ab:e2:4c:e8:6a:c6:31:3e:c5:71:fb:bc:
5e:8f:08:86:36:8f:f9:22:ff:52:42:d3:18:65:de:e0:14:6d:
57:7e:07:0f:02:d4:01:dc:62:61:47:eb:d4:92:74:de:4a:81:
a0:4c:9f:a8:c3:11:2b:58:4e:5b:f7:62:bc:90:5d:20:5c:86:
84:c1:be:c8:91:8e:87:72:40:c4:1b:33:20:c8:14:68:c5:f4:
c7:34:20:15:d8:4c:08:23:66:fc:b4:3d:d6:dc:2f:d9:fd:af:
b9:2a:09:28:f5:f3:eb:79:8b:fd:90:01:24:ea:9c:98:5b:3c:
23:87:7f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:23:38 2026 by rpki-client