Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
File: lvLaL6G8jtLyvGtwOovxU0D5fPo.mft (raw, json)
Hash identifier: AgNWaVTpU00BJYqQPWzvkPX6+pPv6YXU486m/JFzPDc=
Subject key identifier: F8:22:A4:5A:FA:C1:62:62:B2:80:F5:D3:C2:09:7B:B4:99:71:BC:17
Authority key identifier: 96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
Certificate issuer: /CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Certificate serial: 019D37891C6E8C00B3F9E429C8C1026841A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
Manifest number: 0C6C
Signing time: Sun 29 Mar 2026 03:00:25 +0000
Manifest this update: Sun 29 Mar 2026 03:00:25 +0000
Manifest next update: Mon 30 Mar 2026 03:00:25 +0000
Files and hashes: 1: hDVYn_Cqke4-sU20IyVPJrrTGIs.roa (hash: aIes+pqXbeivjOHzkJRTZPV5B1wddYada+DAKnLqkQU=)
2: lvLaL6G8jtLyvGtwOovxU0D5fPo.crl (hash: MjcJqu/tM13fwkjK10/ZxLnJyoJGyhsd0DwwzE31Tz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:1c:6e:8c:00:b3:f9:e4:29:c8:c1:02:68:41:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Validity
Not Before: Mar 29 03:00:25 2026 GMT
Not After : Mar 30 03:00:25 2026 GMT
Subject: CN=f822a45afac16262b280f5d3c2097bb49971bc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:a8:5a:75:45:fb:8c:23:08:da:8e:58:af:
39:ff:40:41:f6:2f:97:11:ad:3b:bc:1d:f6:79:c0:
03:92:db:1c:03:5b:b0:42:f8:c5:95:90:b5:85:31:
cf:20:f2:f8:e2:d8:f4:d9:e0:6d:05:6b:50:33:1c:
0c:45:0b:5d:c6:a9:5c:59:c2:c4:bb:65:7a:e0:28:
d5:5e:7e:3e:6a:b4:38:c6:3f:f4:c7:1b:b4:a7:14:
c4:e6:50:1b:f5:a1:9a:2a:4a:6c:5b:5f:96:6a:46:
eb:93:9a:68:c9:72:45:62:15:85:40:99:8f:82:25:
f5:f1:12:1d:5f:a3:f2:07:b1:c7:13:15:28:c4:ad:
da:f8:72:6b:39:58:f2:ac:5c:d4:fb:3b:c8:2b:33:
c8:e6:78:79:32:9e:97:30:1a:0f:86:66:2a:61:3a:
91:56:fb:ff:c5:02:40:8f:20:73:d4:81:b2:9e:65:
dc:84:b9:2b:b8:fa:e3:d4:27:b4:cf:d5:61:35:65:
d5:f3:26:90:de:a9:c5:51:4a:34:8e:db:88:fa:2b:
ea:1b:84:cb:21:28:d0:8e:f0:97:fe:a5:72:44:ba:
28:ac:da:96:f0:3e:7e:06:25:88:14:e8:d6:0f:b2:
26:9d:00:ce:32:29:4f:08:48:8b:76:ce:b5:2f:78:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:22:A4:5A:FA:C1:62:62:B2:80:F5:D3:C2:09:7B:B4:99:71:BC:17
X509v3 Authority Key Identifier:
keyid:96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e6:aa:88:38:9a:5c:99:22:ff:12:55:9c:c4:77:86:6a:41:
08:53:29:2f:fc:7e:27:6d:c9:05:4a:e6:f6:5d:86:84:35:64:
1f:76:da:8e:cb:76:ee:d3:b5:d9:2b:4c:93:92:c1:00:3c:86:
35:e4:7c:de:29:ed:c0:d8:55:45:0a:08:49:67:cc:d2:fe:14:
eb:83:d0:16:f3:2c:73:da:82:15:b8:d2:f5:93:e0:fb:69:11:
7a:ba:8f:86:c9:a8:47:b5:05:bd:a3:74:d5:5b:d2:50:5a:f7:
46:00:4b:b4:ab:d5:50:a9:42:cc:4e:2f:ca:1e:5c:34:47:b9:
1b:4f:2f:d5:f8:33:5b:e3:25:c7:af:e8:30:79:91:f4:40:a4:
21:44:83:8d:ca:fe:b7:ec:28:78:bc:18:94:5e:4b:5f:c0:38:
71:11:cb:45:20:83:a5:06:e7:98:e1:b7:a3:47:1c:be:fe:77:
a2:fe:51:75:13:1f:a1:17:e0:9b:93:a2:e0:4c:2b:68:1e:0c:
6a:bf:88:92:fb:8d:ca:03:93:44:a9:56:a8:4c:1f:62:8a:b8:
83:ed:5f:0f:82:cd:43:a4:b7:22:bb:11:20:02:c2:e8:0e:4c:
0e:0d:15:70:ef:cb:f9:b6:58:f1:40:0e:bd:06:fe:8a:9d:3f:
da:e1:06:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:45 2026 by rpki-client