Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier: L1/zOcQeGBIkBV3qZA3qUKiiCzzn0dD7ER9Kl2XbHac=
Subject key identifier: A7:2D:6C:A3:28:19:EC:04:90:CC:00:8C:2A:44:E2:47:9E:BB:7D:4C
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 01A12CFBF857150A4982F3C0A5CA9153EE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number: 15D7
Signing time: Sun 11 Oct 2026 22:01:12 +0000
Manifest this update: Sun 11 Oct 2026 22:01:12 +0000
Manifest next update: Mon 12 Oct 2026 22:01:12 +0000
Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: LZSSt+JeSb24PLHx4c/TZDRRiyD/VM8jH6gNVhYYvnQ=)
2: mFiXzHrxbxRLCdJjqMjDV1qXsf0.roa (hash: xj8BfUXzJ6HgdFsCYVaF06L0rsBxHlnBN9flZ6X2gpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:fb:f8:57:15:0a:49:82:f3:c0:a5:ca:91:53:ee:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Oct 11 22:01:12 2026 GMT
Not After : Oct 12 22:01:12 2026 GMT
Subject: CN=a72d6ca32819ec0490cc008c2a44e2479ebb7d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:09:46:39:2c:c3:71:23:ab:14:52:e9:60:
52:27:dc:7d:7c:73:44:c8:5e:92:23:dc:ef:d0:5b:
1d:88:15:36:49:25:da:02:ba:45:07:ea:56:7d:92:
d9:7b:7c:9c:d7:3f:ce:55:d5:33:8b:6d:a4:c3:ad:
b7:18:55:fd:9d:d2:1b:e7:b9:f0:27:7b:ac:5f:f6:
8c:cf:82:bf:1b:4a:7e:4f:cb:c7:f0:55:c0:e5:3e:
d6:fc:b6:cf:ca:7e:6b:e9:90:01:20:02:ca:e5:46:
e2:c5:0d:7c:dc:1c:a9:f9:a8:db:41:36:0b:56:25:
cf:43:4f:f2:a1:32:55:d3:15:99:69:c8:56:fa:f5:
39:d4:d8:bb:d7:b2:0f:80:f8:43:6b:4e:00:c2:5d:
78:52:8a:52:07:c8:a0:6b:49:8f:5c:71:39:96:dd:
4d:b6:53:17:9f:58:37:1e:84:25:48:1a:da:07:83:
e5:71:81:93:df:d6:46:78:08:08:c6:f8:75:17:53:
4c:0b:58:5d:b7:c0:a9:ad:36:e7:5a:22:84:5e:a4:
20:8c:5d:54:4c:a0:6f:6a:49:d1:9e:17:f1:72:42:
4c:64:09:e4:30:1f:09:be:33:9f:e6:6f:35:cd:69:
6e:b3:73:c2:f4:16:fe:93:27:0d:18:e1:6d:83:5e:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2D:6C:A3:28:19:EC:04:90:CC:00:8C:2A:44:E2:47:9E:BB:7D:4C
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f8:12:30:41:c1:e8:56:c6:22:42:bb:50:3b:44:e1:e0:ce:
13:c6:3a:d8:1f:75:1a:26:1d:f3:45:8f:1d:ee:53:ea:e7:b9:
12:0b:70:a7:be:b2:04:e8:c7:f1:1d:95:3a:10:92:54:4d:8f:
67:3e:cf:bd:83:c9:96:5c:1b:98:e7:0a:da:e2:bb:a4:be:ae:
75:1d:0f:ff:0c:0f:48:17:bd:a3:be:b6:69:40:73:0c:ea:90:
6b:8e:ce:44:57:76:ad:8b:c7:1a:86:2c:49:48:e4:4c:21:8f:
10:d1:d1:3e:bd:49:5e:75:ca:a4:a6:10:c0:78:9b:81:c3:92:
34:ee:00:b1:b6:d1:dc:f8:88:bf:db:ef:e8:e9:89:9d:2e:8f:
89:b6:8a:40:88:80:28:3a:0a:ae:6d:4f:19:28:a1:ae:da:93:
42:26:cf:f8:7b:a2:6f:f9:cb:df:20:b3:99:14:33:07:f0:e0:
a1:f6:06:2a:52:a5:16:db:1d:42:bd:51:0f:a5:76:60:ba:6d:
ba:5b:1f:b4:61:15:08:c0:d5:ee:3a:8a:17:7a:a9:34:e6:73:
d4:7b:38:0c:48:e0:59:74:ef:10:c1:cc:4e:be:a6:d7:eb:3b:
34:6d:3c:d3:c8:5b:49:ba:ac:1c:90:b0:80:e2:0f:97:cf:4c:
09:30:89:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:38:12 2026 by rpki-client