Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: XO44TT2db6qNPK7wOW7NWQEaHHFazrNDgmjPcVbViHE=
Subject key identifier: 15:56:87:E4:3A:C4:C7:26:F9:25:B9:F2:51:4F:86:F8:49:C8:B3:66
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 01A18299328097252277F66C0E9292B74BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 0921
Signing time: Wed 28 Oct 2026 13:00:40 +0000
Manifest this update: Wed 28 Oct 2026 13:00:40 +0000
Manifest next update: Thu 29 Oct 2026 13:00:40 +0000
Files and hashes: 1: 9lZ-yzBoTL2Q3tEfTGvAJ31AkaI.roa (hash: mZ5mTYqzMf+60QDXA/A80xWmGAZGWKbUo1eAsowQ3Ow=)
2: Yha1UjCg0bYTT2iIVJMZtFAgxEU.roa (hash: dVgYPXPBCxJJox+uQJ6Z0WgrgA/2WvOp6YXY7a/W6os=)
3: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: GH3JtUv8gm28ahZOmnXtM7y9a572es2BV2K/ov2+QMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:32:80:97:25:22:77:f6:6c:0e:92:92:b7:4b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Oct 28 13:00:40 2026 GMT
Not After : Oct 29 13:00:40 2026 GMT
Subject: CN=155687e43ac4c726f925b9f2514f86f849c8b366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e4:ac:f4:62:73:2e:80:f9:f1:e0:99:54:b1:
6e:6b:71:11:06:88:b3:00:8b:33:61:c9:b9:e9:72:
f9:1e:a5:7a:0e:1e:99:8d:df:bf:ba:36:64:5b:5b:
dc:28:f4:38:f2:ee:6a:ad:6f:41:67:34:60:7f:47:
e8:20:2e:99:58:9e:81:58:95:77:3e:75:b0:72:d5:
46:9c:0d:e8:ee:fe:72:fa:27:db:b6:35:41:29:28:
ca:31:01:48:3f:bf:31:67:9d:f8:7f:8c:86:5f:c3:
f4:8f:51:4e:1d:5f:a3:87:a9:0a:b0:97:c6:c4:70:
6d:be:e4:6a:f7:47:72:98:0b:74:f9:7a:2f:b3:cc:
df:8a:a7:bf:91:fe:e1:62:a3:c5:ff:dd:93:33:e1:
a2:54:81:dc:2d:1c:a5:3b:98:71:4b:ca:8a:14:15:
d5:02:cc:d3:46:3c:77:8d:97:f7:d3:79:a9:98:c7:
2f:ea:06:c8:12:24:1c:82:bc:a2:54:a5:71:5c:eb:
d6:bd:d4:3d:46:0d:36:d7:4b:6d:33:38:b8:d9:7f:
81:86:52:f9:5c:ca:f8:0e:e2:a2:de:39:ec:5d:d9:
22:00:8e:c1:d9:38:89:54:61:15:50:7b:f5:a9:62:
ce:cc:95:a7:72:d0:79:bc:41:dc:76:37:26:9a:ce:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:56:87:E4:3A:C4:C7:26:F9:25:B9:F2:51:4F:86:F8:49:C8:B3:66
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:13:1c:63:3e:2d:24:fe:a2:d1:a5:ad:2c:db:6d:e6:16:cf:
fd:20:29:e6:b6:f9:15:1f:d7:2f:2a:7c:4f:a8:55:b0:bc:4d:
79:a6:0b:cf:90:95:10:0a:d6:73:2c:42:6e:90:bd:63:32:7b:
39:dc:e2:0b:78:43:e8:8e:5d:3d:5a:c0:31:24:53:97:5b:6a:
08:5c:ec:79:42:8f:06:15:53:45:24:be:d4:b0:28:c7:80:11:
c3:50:8b:b2:f1:96:92:3a:ae:d3:46:5f:cc:c7:38:b8:a7:ff:
2e:51:51:18:f2:3c:bb:4f:99:35:1e:fd:ba:eb:4f:37:a0:33:
75:50:e8:a4:5c:32:ef:eb:65:b1:c6:56:d4:46:e5:e1:a2:28:
62:fa:39:46:79:7f:1b:b5:b1:9a:96:65:24:96:71:35:26:b8:
c0:5b:13:69:89:bd:f2:b6:aa:76:30:1b:94:e6:86:97:8d:0c:
b0:3e:9a:4c:eb:e9:79:1f:02:88:09:86:4b:e0:5c:29:2f:f8:
a2:3d:be:bd:07:fd:af:4d:1c:43:1e:b7:2e:36:62:78:6f:c1:
be:d4:a4:01:ef:a9:be:9d:bc:38:99:38:cb:49:a6:6d:e5:09:
79:3a:da:8b:2c:c4:e5:58:19:7a:25:97:4c:9b:45:4a:66:f7:
ce:10:9f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:33:28 2026 by rpki-client