Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: m58S1sa2WA/YswDUehAHWZLEggBSWTPoQ5cvXcyNH8o=
Subject key identifier: 4A:F3:5E:D4:46:9E:97:2F:B0:54:51:46:D7:99:56:25:E3:85:96:14
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 019DCC74CED6EC6A8D6606751367D8260BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 1165
Signing time: Mon 27 Apr 2026 01:01:40 +0000
Manifest this update: Mon 27 Apr 2026 01:01:40 +0000
Manifest next update: Tue 28 Apr 2026 01:01:40 +0000
Files and hashes: 1: KhWNkr5gAw1c6ddmTPeSiEEfFWg.roa (hash: BfC/J8Ikas8k6I01UNkrtdj0AZZqj/UTxvhIrki0FuQ=)
2: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: sNSxiDAQEVIGwSET8n+FdNfQ/XqoNojhLdJLqyNKPb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:ce:d6:ec:6a:8d:66:06:75:13:67:d8:26:0b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Apr 27 01:01:40 2026 GMT
Not After : Apr 28 01:01:40 2026 GMT
Subject: CN=4af35ed4469e972fb0545146d7995625e3859614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0d:06:57:c7:2f:b8:21:03:5f:ed:e6:91:e5:
c1:cf:ff:ab:d2:4a:02:31:bf:c9:70:13:c9:51:a2:
73:a9:bd:87:4a:29:a3:4f:83:d2:25:10:bf:c9:3a:
c5:5b:6b:ac:60:46:e9:fc:f6:11:ad:61:39:01:20:
d5:a9:2a:5d:03:58:30:12:4e:9c:b4:4e:ef:1d:9c:
56:01:55:f6:aa:36:fc:21:cf:da:2c:a3:17:4c:a7:
d6:7a:3a:f9:ac:00:c0:ba:69:08:2d:6a:16:d4:56:
99:96:2d:db:21:f1:b2:63:fd:8f:07:fe:61:eb:45:
a8:96:a6:df:f5:59:db:b4:c0:fb:9b:8c:db:a4:39:
ae:8b:fc:9e:63:4f:f8:5a:7f:c8:12:65:06:56:be:
b9:b0:1b:02:63:64:d6:9b:de:d4:71:4f:a5:81:47:
f7:2d:e0:c6:2c:dd:32:2a:9c:6e:a1:bd:e2:53:ee:
f4:21:60:c4:56:a7:95:a6:e7:37:35:fe:2c:ec:ef:
07:ae:5c:58:4d:dd:46:ca:2e:bf:fe:a2:c6:7e:e1:
73:6b:2b:3d:bb:65:ba:fe:31:70:2f:79:9d:c5:9b:
da:cf:4d:14:30:9a:07:0a:62:0a:a4:86:00:dc:0c:
44:ce:69:be:f4:c6:a7:26:d2:fb:9f:6e:0e:61:99:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F3:5E:D4:46:9E:97:2F:B0:54:51:46:D7:99:56:25:E3:85:96:14
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bb:3a:7a:28:58:d6:ea:51:72:52:63:b1:ff:0c:5b:84:20:
02:aa:00:b3:b4:c3:ec:9c:d1:ff:f4:12:84:1c:6b:7b:5e:a1:
b1:f2:d6:f8:cc:be:b1:e7:cf:e5:35:7d:f6:93:7b:32:85:cb:
74:92:f6:6a:50:cd:53:a2:10:f3:8c:ac:90:ae:9d:07:a0:8e:
c1:d8:98:5f:10:ac:f2:bf:83:72:f7:61:f7:4d:f6:df:56:62:
8c:9b:84:dc:3c:98:e8:8f:d6:87:75:6b:1d:d3:a5:d5:b9:e7:
5e:89:de:ff:70:49:70:63:37:08:f8:b1:14:15:0b:57:98:bd:
28:96:a3:9c:46:08:68:6e:d0:9a:07:ff:78:92:51:fd:f2:20:
44:ac:a9:d1:91:f7:8f:99:4d:ff:e4:59:f4:db:15:df:70:9d:
3c:d3:1c:83:7c:8c:70:e6:0e:21:81:68:fb:42:20:e8:a4:3b:
73:d1:6a:06:70:ac:57:68:1a:73:dd:cb:ae:4c:86:1e:cd:18:
ee:59:b5:5a:89:9d:5d:78:9d:01:13:28:24:68:6a:86:c7:82:
ea:0d:a7:1a:c7:59:20:04:19:6b:b6:56:3b:ef:a4:41:10:ba:
a7:e8:5c:9b:96:ec:7b:8a:19:09:68:fc:a6:55:2c:40:31:9e:
37:3d:5e:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3MdM7W7GqNZgZ1E2fYJgvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjk4YmFmOWZmM2VlZWJlNjYyODQ4ODlmYmY2ODlkNGU2
ODNjODEwHhcNMjYwNDI3MDEwMTQwWhcNMjYwNDI4MDEwMTQwWjAzMTEwLwYDVQQD
Eyg0YWYzNWVkNDQ2OWU5NzJmYjA1NDUxNDZkNzk5NTYyNWUzODU5NjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw0GV8cvuCEDX+3mkeXBz/+r0koC
Mb/JcBPJUaJzqb2HSimjT4PSJRC/yTrFW2usYEbp/PYRrWE5ASDVqSpdA1gwEk6c
tE7vHZxWAVX2qjb8Ic/aLKMXTKfWejr5rADAumkILWoW1FaZli3bIfGyY/2PB/5h
60Wolqbf9VnbtMD7m4zbpDmui/yeY0/4Wn/IEmUGVr65sBsCY2TWm97UcU+lgUf3
LeDGLN0yKpxuob3iU+70IWDEVqeVpuc3Nf4s7O8HrlxYTd1Gyi6//qLGfuFzays9
u2W6/jFwL3mdxZvaz00UMJoHCmIKpIYA3AxEzmm+9ManJtL7n24OYZk4wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErzXtRGnpcvsFRRRteZViXjhZYUMB8GA1UdIwQY
MBaAFC1pi6+f8+7r5mKEiJ+/aJ1OaDyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzkt
ZGZmNWEwOWE4MmNiLzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzktZGZmNWEwOWE4MmNi
LzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrs6eihY
1upRclJjsf8MW4QgAqoAs7TD7JzR//QShBxre16hsfLW+My+sefP5TV99pN7MoXL
dJL2alDNU6IQ84yskK6dB6COwdiYXxCs8r+Dcvdh903231ZijJuE3DyY6I/Wh3Vr
HdOl1bnnXone/3BJcGM3CPixFBULV5i9KJajnEYIaG7Qmgf/eJJR/fIgRKyp0ZH3
j5lN/+RZ9NsV33CdPNMcg3yMcOYOIYFo+0Ig6KQ7c9FqBnCsV2gac93LrkyGHs0Y
7lm1WomdXXidARMoJGhqhseC6g2nGsdZIAQZa7ZWO++kQRC6p+hcm5bse4oZCWj8
plUsQDGeNz1emg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:54:12 2026 by rpki-client