Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
File: LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft (raw, json)
Hash identifier: W2JuiIWxBis8vqG4etPWWvlwxk/ofOJ8wkZMX9q55Es=
Subject key identifier: AF:40:15:90:B5:84:4B:80:AF:93:25:0D:BC:F5:13:B6:F9:E7:E7:D3
Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
Certificate issuer: /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Certificate serial: 019D39AEF575FC1EE227F3956F0957ABEDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
Manifest number: 0662
Signing time: Sun 29 Mar 2026 13:01:00 +0000
Manifest this update: Sun 29 Mar 2026 13:01:00 +0000
Manifest next update: Mon 30 Mar 2026 13:01:00 +0000
Files and hashes: 1: 6WiXlh5QhCuw_MVwaut0x2jiEEs.roa (hash: qUA6n5/TXrCPUvcsaToKEYv6wtNRYISXJDQml29JrEs=)
2: 94_6VQI2I2lo1u38qt6hn9A7wgw.roa (hash: NobqK3i7W7bFpKNzurxj01gS8em3bf9sK5Lxekb+0hU=)
3: LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl (hash: kfq3rpbnyYfE6Yv7awChOI0aa+O6R3nHMY4CNIRE/9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:f5:75:fc:1e:e2:27:f3:95:6f:09:57:ab:ed:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Validity
Not Before: Mar 29 13:01:00 2026 GMT
Not After : Mar 30 13:01:00 2026 GMT
Subject: CN=af401590b5844b80af93250dbcf513b6f9e7e7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:05:90:99:84:f9:c4:fc:f3:31:4f:43:69:
ac:f9:84:6a:53:c2:f9:04:79:64:63:5b:7b:cb:f3:
48:e8:81:61:4e:fd:02:68:79:a7:91:61:99:c4:58:
f9:6a:6c:a8:4f:d5:c2:01:5f:97:60:9c:01:d9:f1:
55:9b:69:9d:1a:70:df:fa:14:9b:bd:f3:ff:3e:1f:
24:80:09:15:8b:6b:e7:10:22:99:f6:28:a3:bc:b5:
a2:e8:56:cc:89:b1:84:6d:db:93:c0:e2:e5:7a:1e:
f9:97:e6:78:44:0f:51:5d:32:88:39:d0:92:c9:75:
9c:57:b7:38:01:45:ed:5d:ec:2c:07:53:f8:91:b9:
78:57:a6:9e:7f:48:f1:57:dc:a8:1d:e8:4b:20:91:
5a:ea:7f:b1:9a:b1:20:b9:c0:8d:4d:8e:be:bd:92:
85:c1:be:24:2c:7f:bc:73:c8:86:62:02:06:92:a1:
4f:d9:1e:ee:16:b8:2a:32:8f:34:bf:74:91:c5:95:
82:5a:d7:15:48:d4:7f:f0:c7:84:12:d8:64:9c:67:
bc:9d:07:33:d3:5c:e1:2e:75:b7:a4:71:57:a5:25:
fa:b7:e3:6b:05:37:c6:b8:db:9c:e0:bb:86:b0:5a:
78:55:8f:a5:31:64:93:13:9c:0e:51:6e:1a:fb:ef:
64:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:40:15:90:B5:84:4B:80:AF:93:25:0D:BC:F5:13:B6:F9:E7:E7:D3
X509v3 Authority Key Identifier:
keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:32:df:ea:d7:b7:ad:18:18:5e:42:20:b9:17:a7:68:e4:0b:
fa:de:c2:38:75:6b:94:bb:ae:43:66:25:38:89:53:f1:50:20:
78:ae:60:10:48:f1:2b:70:f8:4f:ff:35:d2:05:52:f3:5f:9f:
6e:b1:32:a9:a4:8a:a3:b7:2a:bf:04:1c:fc:08:50:a0:e5:41:
f4:df:34:93:06:3f:a5:7b:dd:bb:69:fc:1b:9e:2f:5f:64:9e:
2e:1d:29:ce:df:09:71:fc:d6:d7:f6:d9:0b:37:8e:13:aa:bb:
ac:43:8d:c6:83:95:b1:e6:1b:cf:1c:ef:82:a6:ee:5d:36:06:
b2:c9:35:5f:06:62:9e:a7:31:d4:3b:8c:9c:9e:0f:7d:52:56:
57:2b:e3:7a:43:9b:d1:e3:f5:9f:43:81:72:9b:4e:45:8a:22:
e1:5a:b7:53:4a:3c:3f:d2:93:39:b1:ad:8d:9a:49:01:8f:2a:
fb:32:40:34:16:74:00:2d:80:81:f3:0e:bc:e2:f6:4e:96:4b:
b0:8f:f1:b0:44:b3:9c:f1:18:98:30:41:8c:39:a3:c8:31:e1:
cb:47:28:38:c8:81:a2:b6:38:ad:68:f7:55:36:3d:cf:ef:ff:
66:32:27:6d:ea:4d:6f:0d:03:b5:b0:61:e8:32:24:50:c6:a2:
9a:22:14:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:57 2026 by rpki-client