Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier: 6j09iBxGBlR+zvyoJDE2+RfmakQS2mqa8ejVeJIzNbw=
Subject key identifier: C7:96:56:D3:96:0B:E6:9A:5C:E7:1B:B1:2B:C2:2F:86:AA:8B:10:AE
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 019D371B556B1B027EBEF745587EF5FBC1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number: 13CA
Signing time: Sun 29 Mar 2026 01:00:31 +0000
Manifest this update: Sun 29 Mar 2026 01:00:31 +0000
Manifest next update: Mon 30 Mar 2026 01:00:31 +0000
Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: AJHc5/M6NOnLXFdUuadbpIQed+HCLh1wWf2mFI6isUU=)
2: mFiXzHrxbxRLCdJjqMjDV1qXsf0.roa (hash: xj8BfUXzJ6HgdFsCYVaF06L0rsBxHlnBN9flZ6X2gpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:55:6b:1b:02:7e:be:f7:45:58:7e:f5:fb:c1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Mar 29 01:00:31 2026 GMT
Not After : Mar 30 01:00:31 2026 GMT
Subject: CN=c79656d3960be69a5ce71bb12bc22f86aa8b10ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:27:b5:b9:77:6a:e3:db:0f:39:73:0c:b1:
c3:95:66:9f:0c:f5:fd:55:67:2e:c8:3e:f8:62:de:
9e:39:20:66:4b:07:5d:22:3a:41:90:59:63:b3:af:
96:47:0f:3d:75:87:4a:df:18:47:7d:5b:8b:be:3a:
c0:37:4d:80:b9:d8:6b:26:7c:e6:cc:db:e9:53:21:
e0:83:f0:cc:65:39:5a:c0:8a:b2:e0:cc:c9:b9:b4:
66:b8:50:0a:b1:09:b3:1c:04:a2:b2:67:9f:88:0c:
77:0d:ea:94:e2:a6:97:ac:57:fa:f5:64:87:f7:5d:
f8:2c:f8:a3:d5:56:08:19:78:55:0b:cd:27:61:75:
ea:59:84:d4:30:3f:4a:56:15:46:4a:a2:8c:64:4a:
a3:39:57:96:f0:82:18:0a:02:bc:27:b4:bc:c3:52:
59:fc:7c:57:6e:6f:e4:66:06:da:e0:23:e5:1f:b1:
ce:56:9e:af:bf:d5:37:9d:93:e4:70:28:2b:96:d3:
86:77:b0:5d:28:d2:84:81:82:73:6e:7b:13:79:af:
ce:0f:2f:54:9b:cb:2b:c0:ce:b3:92:d6:69:57:15:
a5:f8:54:2c:73:f3:83:bf:65:20:a0:33:90:d1:28:
8d:00:97:96:93:16:b9:93:43:41:17:b5:e5:ca:52:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:96:56:D3:96:0B:E6:9A:5C:E7:1B:B1:2B:C2:2F:86:AA:8B:10:AE
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c3:6c:40:87:ab:df:76:98:d4:9c:23:7c:8d:d0:78:ba:97:
50:56:77:d9:50:b9:5c:5d:96:5e:df:ae:0e:2f:38:8c:52:3b:
87:95:eb:75:24:06:c4:10:1a:70:51:da:61:d0:b0:fe:ac:6e:
f0:6a:d4:cd:a9:36:66:1a:db:18:a2:12:9c:fe:e1:d9:9a:0b:
70:00:63:bc:ab:c6:da:8a:24:fc:a2:eb:0e:2e:5c:c9:bb:bb:
4d:da:50:63:d6:bb:63:56:1e:88:da:45:1a:55:38:5c:c6:70:
bb:06:5f:2d:9d:4a:16:93:7a:9d:a7:02:d5:2a:d4:49:f5:f7:
0f:24:10:eb:62:55:0d:92:75:98:ec:9d:24:21:d4:4d:1c:00:
19:8d:e4:29:01:70:e3:43:e3:9f:c4:eb:3a:48:e5:a0:c2:b4:
d7:9e:f0:22:fb:e8:40:22:2b:29:dd:92:02:81:b6:8a:b6:56:
07:2f:f5:5c:11:97:c6:d0:6e:56:32:0f:3c:bd:1a:83:aa:28:
0b:24:4a:cf:d9:d7:82:e7:2d:10:01:eb:ff:e0:59:8a:ae:15:
da:dd:76:73:ac:03:a2:7d:f1:0a:fd:2b:ff:13:3e:40:87:61:
5c:07:bc:79:5f:5c:fd:fb:d9:fd:f6:e4:2f:51:9e:54:1b:92:
1c:1e:f7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:55 2026 by rpki-client