Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: h4NU6UbCqcc16CDP3suKgZTfmDa1Psyn96ucoL5LULI=
Subject key identifier: AA:9D:47:F0:FB:11:29:C3:57:CD:DC:55:DF:1D:31:9B:FB:B3:71:81
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 01A178F101CEC01DB1F95BA795CAEB54C280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 134C
Signing time: Mon 26 Oct 2026 16:00:22 +0000
Manifest this update: Mon 26 Oct 2026 16:00:22 +0000
Manifest next update: Tue 27 Oct 2026 16:00:22 +0000
Files and hashes: 1: KhWNkr5gAw1c6ddmTPeSiEEfFWg.roa (hash: BfC/J8Ikas8k6I01UNkrtdj0AZZqj/UTxvhIrki0FuQ=)
2: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: s/XKmAdp8uZYP613xlpRexJXWOHC0kmI2NTvBtvTP+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:01:ce:c0:1d:b1:f9:5b:a7:95:ca:eb:54:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Oct 26 16:00:22 2026 GMT
Not After : Oct 27 16:00:22 2026 GMT
Subject: CN=aa9d47f0fb1129c357cddc55df1d319bfbb37181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5b:03:91:6d:98:95:6d:78:af:95:a4:7b:1b:
6a:24:a1:8c:1f:7d:70:3c:c1:91:c7:c6:64:31:55:
ac:f8:93:cd:3f:19:54:00:2a:1d:a0:e7:7d:d0:eb:
51:63:16:aa:77:f0:c9:d0:ed:9d:e4:5d:63:4c:5a:
e1:67:e7:68:58:7c:09:13:3f:35:db:2b:e9:86:ec:
45:39:36:00:8b:1d:c7:4d:41:2f:b4:16:96:33:7f:
1b:4b:61:d9:f7:f8:d1:78:f3:37:9c:82:0d:b9:e1:
f2:fd:9f:85:f1:7e:8f:b4:96:22:75:70:fe:5b:e4:
90:9f:0d:2a:06:d8:66:41:1a:6d:f3:7b:d3:43:f6:
7a:28:31:80:1a:a5:00:0c:5a:56:c0:9b:8c:74:fa:
3b:66:17:87:79:05:4d:3a:76:43:db:b7:f1:f3:7b:
46:4f:5d:13:1b:23:f4:a9:4f:bb:4b:f5:18:55:82:
a0:2c:f5:25:bf:93:c4:01:9d:db:28:43:93:e7:f2:
97:88:99:96:33:5e:f4:f3:72:70:e1:15:83:51:e7:
81:cc:9d:55:7e:cf:1b:5d:a4:e7:e2:f2:76:4f:14:
ff:e3:22:44:bd:35:09:4e:94:5d:71:65:30:f6:23:
2b:dc:92:9d:4d:0e:ac:8b:04:d7:ab:df:59:c6:4f:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9D:47:F0:FB:11:29:C3:57:CD:DC:55:DF:1D:31:9B:FB:B3:71:81
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4b:14:8a:ef:c8:57:63:cd:1e:15:e4:18:33:f5:18:d9:b6:
b8:ca:9d:98:df:2e:fe:75:88:e8:29:a3:c5:b8:f1:7c:29:76:
80:ee:d6:df:ae:88:6c:04:4c:af:e0:5f:ed:3a:64:82:26:2b:
04:b5:11:b9:f4:64:b6:4c:b5:b0:da:19:ee:bd:2a:1c:95:f4:
95:82:ef:62:61:00:e3:46:18:6c:e1:a6:76:47:60:7e:dd:f2:
49:0b:58:47:d4:55:ca:9f:fa:2d:6e:4a:2d:2a:3d:b0:18:6f:
10:67:66:1c:79:95:6e:ed:26:1c:a1:fe:a1:de:7c:9f:f0:c5:
bd:e2:8a:19:1e:67:34:e3:17:28:a8:a0:6c:d5:01:f0:91:d9:
6e:84:c0:ea:b2:7d:e3:f5:58:d5:9f:69:7a:6e:df:04:a4:9c:
de:b8:7b:af:7c:73:21:f5:c3:1e:0a:f1:9f:a2:a5:7d:ac:06:
b3:10:84:0b:2a:f7:bf:12:0e:de:08:06:40:2e:51:21:c2:9e:
0e:aa:cf:9b:ba:4f:62:00:33:46:f4:f7:d9:d9:11:97:75:b8:
6a:4c:84:ec:d4:6f:7d:77:2a:2d:a3:d4:54:9b:1b:fc:17:d4:
ec:48:92:2a:63:61:a9:68:41:4f:ff:a8:f0:e5:18:17:92:99:
3f:b7:a7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:01:54 2026 by rpki-client