Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: QxG/2uwdgfw/elG1OYdxOwn1aez9v49XFxEDTPkX1tY=
Subject key identifier: 25:C0:1A:A2:5E:3C:D7:8E:57:6B:77:1B:2B:BC:8A:30:AA:86:CD:FD
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 019FA1BB4763C08506BF06679188C4EEA77E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 0828
Signing time: Mon 27 Jul 2026 04:00:32 +0000
Manifest this update: Mon 27 Jul 2026 04:00:32 +0000
Manifest next update: Tue 28 Jul 2026 04:00:32 +0000
Files and hashes: 1: 9lZ-yzBoTL2Q3tEfTGvAJ31AkaI.roa (hash: mZ5mTYqzMf+60QDXA/A80xWmGAZGWKbUo1eAsowQ3Ow=)
2: Yha1UjCg0bYTT2iIVJMZtFAgxEU.roa (hash: dVgYPXPBCxJJox+uQJ6Z0WgrgA/2WvOp6YXY7a/W6os=)
3: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: HT2SoLENXl3CxMF1uJnFcY9fUQnw+mu6x0BVbLwLqQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:47:63:c0:85:06:bf:06:67:91:88:c4:ee:a7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Jul 27 04:00:32 2026 GMT
Not After : Jul 28 04:00:32 2026 GMT
Subject: CN=25c01aa25e3cd78e576b771b2bbc8a30aa86cdfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a0:30:73:1c:f5:34:2d:ff:24:70:2b:3b:10:
6d:ad:64:8c:c0:28:2f:7d:41:49:72:8d:1f:81:62:
f0:d7:03:a5:f4:54:ba:4c:24:1e:1c:35:40:1c:2d:
44:9e:53:69:0f:b4:a4:48:2b:9b:93:a1:5b:a4:8d:
00:6e:c4:32:dc:5e:72:2a:7e:22:ae:fa:20:ba:21:
02:5a:9b:8b:1a:e4:77:5e:55:2b:7f:19:2e:48:80:
85:c5:a5:1f:46:42:92:ef:7f:21:4b:46:17:3d:98:
5b:02:d5:3b:a5:ca:80:2a:9c:db:c5:72:25:fa:d1:
f4:aa:f6:54:97:68:d9:0d:1c:65:8f:4d:28:fd:15:
f7:9b:50:5d:f1:6e:68:0c:fe:17:10:18:01:6c:05:
6b:91:a3:34:d1:96:f8:21:ca:49:33:23:40:80:cf:
18:eb:97:85:11:46:6b:a4:ce:0d:4a:f5:9d:b7:d5:
d9:70:63:32:ea:0b:bb:5b:b4:85:23:87:4a:9a:04:
fb:dd:75:4d:32:73:ce:15:1d:f9:ac:43:8a:3c:ba:
7d:8f:12:8b:e6:bd:f5:63:84:27:61:c0:39:17:6e:
ce:b3:3f:f1:53:70:fb:94:0a:e2:4b:0f:df:83:87:
97:36:64:66:b1:bb:a0:0c:75:80:d5:6d:aa:33:52:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C0:1A:A2:5E:3C:D7:8E:57:6B:77:1B:2B:BC:8A:30:AA:86:CD:FD
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:09:35:ae:c9:5f:a1:0f:e4:0d:d3:a7:61:11:db:83:7e:43:
2e:54:4a:04:7d:c0:de:c3:67:78:fc:cf:9a:9f:f9:58:02:75:
1a:0c:1f:90:24:21:1b:44:2f:b7:bc:b3:cd:38:07:3d:a6:1b:
5b:b4:2b:5e:c5:13:7c:f7:22:21:71:db:78:88:37:42:76:4c:
d6:6c:a2:fd:7a:e0:f7:07:9e:bc:a3:5b:76:34:f1:af:dd:f8:
e2:7f:98:07:64:62:98:90:ae:11:19:e6:42:0d:85:85:9e:f7:
b2:1b:9f:57:73:59:74:d6:18:3f:d3:34:b7:a0:c1:fc:9c:0a:
e3:74:b3:c5:85:10:89:19:3a:07:ec:aa:d1:5b:42:42:05:f4:
ab:02:67:3b:6d:a2:45:66:cc:7c:9e:c3:2c:b1:6d:88:a9:73:
5d:f9:d8:78:37:5e:f4:e2:65:a8:47:25:74:45:a8:41:c7:91:
11:d6:dd:be:64:e9:14:30:8a:04:cb:f9:a1:97:2f:de:f0:11:
8c:90:6d:71:25:32:d7:55:1f:4f:62:f6:c2:73:bd:b4:e8:fc:
c9:58:82:b7:4b:30:77:73:57:29:df:7e:f1:5c:82:fc:6f:c3:
f6:b3:0d:77:57:78:8b:1c:09:3f:5c:a5:21:f2:ba:cd:ef:4f:
b4:95:4a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:41:43 2026 by rpki-client