Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: GXA5N2M37S8fQFShpVLdjeptcjSJFCE5AH60l8u3fVY=
Subject key identifier: 64:F9:CD:28:12:72:30:54:9A:17:96:A8:83:96:5F:79:6B:92:E3:13
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 019D37C0DDE78509ACF59A3C7700633D0674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 06E8
Signing time: Sun 29 Mar 2026 04:01:19 +0000
Manifest this update: Sun 29 Mar 2026 04:01:19 +0000
Manifest next update: Mon 30 Mar 2026 04:01:19 +0000
Files and hashes: 1: 9lZ-yzBoTL2Q3tEfTGvAJ31AkaI.roa (hash: mZ5mTYqzMf+60QDXA/A80xWmGAZGWKbUo1eAsowQ3Ow=)
2: Yha1UjCg0bYTT2iIVJMZtFAgxEU.roa (hash: dVgYPXPBCxJJox+uQJ6Z0WgrgA/2WvOp6YXY7a/W6os=)
3: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: ZuE5WCRwwPUT8Y1MIaUgOkLApnr2FEWQzkFKVXvQpLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:dd:e7:85:09:ac:f5:9a:3c:77:00:63:3d:06:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Mar 29 04:01:19 2026 GMT
Not After : Mar 30 04:01:19 2026 GMT
Subject: CN=64f9cd28127230549a1796a883965f796b92e313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:43:bb:e3:eb:14:28:29:7f:df:15:af:9c:
38:62:eb:1b:8c:36:cf:57:db:9e:06:cd:ff:7a:cb:
04:0a:da:e2:ab:d2:88:d8:1a:d3:85:23:61:a7:51:
a2:7d:28:e9:be:f5:56:75:8d:2f:dc:d7:06:ef:59:
e1:48:73:f1:5d:d5:56:87:b1:59:b7:5a:3b:40:6c:
91:54:61:39:6f:10:ac:b5:e4:2d:b2:fe:e0:6c:d1:
cb:2e:88:6a:d6:e4:19:bc:48:7e:d5:79:31:67:eb:
3f:32:7d:75:19:35:c4:01:a5:c0:32:22:62:97:ff:
6b:b2:e1:04:2b:3b:73:0e:ce:ca:c6:6a:8a:e0:2b:
b6:1b:b7:0e:6f:ee:58:9f:06:c1:4a:4e:c6:dd:ba:
6e:66:11:83:23:85:98:38:78:f3:89:c2:47:93:b4:
3d:40:31:fa:0d:fa:e8:71:22:34:18:a3:2f:99:a9:
b8:b5:47:93:9d:10:b3:f8:fe:07:4a:c9:b9:43:39:
46:84:a8:e9:56:46:79:9a:cd:d6:57:ba:08:33:c4:
90:e6:f9:85:62:79:67:ba:63:94:d2:31:fd:9c:1c:
c8:04:3e:ad:3d:ca:41:fa:23:dc:97:32:23:f7:fe:
b2:a8:50:c8:b1:fa:11:55:9a:ff:4f:25:9d:81:b0:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F9:CD:28:12:72:30:54:9A:17:96:A8:83:96:5F:79:6B:92:E3:13
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8d:28:d0:10:31:c9:28:73:a0:e7:1b:43:e0:9a:17:0f:47:
27:ff:39:82:24:68:8a:c5:c3:68:1c:bf:ce:77:fa:3c:04:3d:
ff:12:33:23:b2:d7:7a:ec:14:b3:f3:9e:c3:3d:2c:41:c1:86:
b0:d7:8b:53:9b:18:60:5b:0f:77:5f:cb:60:5c:2b:c0:cb:77:
a5:43:72:59:9b:00:28:a8:77:fe:bf:b1:60:4c:16:98:59:f4:
9b:32:68:de:14:1b:2c:df:f1:25:cd:6c:18:69:33:c3:02:dc:
71:52:25:af:d1:9f:f2:e0:03:77:cb:ab:64:87:ea:1b:23:ba:
61:fd:07:da:40:ee:f2:8d:dc:ba:aa:ae:da:37:3e:37:af:8c:
d0:96:47:5b:16:b0:8c:22:16:85:7a:85:1e:58:7a:2d:4b:97:
c9:37:9c:f7:0c:45:a8:8b:3f:2a:fd:33:98:9f:22:71:8e:e8:
f4:6f:84:81:8c:ff:95:8c:14:9b:99:ea:04:ad:56:ea:fc:27:
2d:57:be:9c:aa:a2:dc:60:02:07:3c:56:99:60:fe:7a:63:8e:
55:fa:6f:e0:5b:8b:49:c6:fe:92:84:72:cd:13:e6:b5:f5:5f:
d0:7b:98:0c:12:12:a2:ec:88:40:8d:3d:82:0f:16:86:ec:6b:
06:05:88:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:48 2026 by rpki-client