Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
File: LvuebXVm3--dXLmNkpy3AyPTifI.mft (raw, json)
Hash identifier: ehT3JCuQ/RLj5FZ7ZtSfiKRgxHxsWdQeYGmt2nzkZOs=
Subject key identifier: CB:CD:14:23:4D:AA:17:B7:A8:08:01:2F:D5:21:9C:05:26:F0:58:57
Authority key identifier: 2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2
Certificate issuer: /CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
Certificate serial: 019D37C0587CB9EADD143070943DB56B0D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:45 +0000
Manifest this update: Sun 29 Mar 2026 04:00:45 +0000
Manifest next update: Mon 30 Mar 2026 04:00:45 +0000
Files and hashes: 1: 34wMdXaJWXbm1abhGPa8jrp6PhI.roa (hash: S1oGzVckDcSBz0QSTCJM8A+w1TpNDNfG3AFSsSOoiFk=)
2: LvuebXVm3--dXLmNkpy3AyPTifI.crl (hash: x5nCFCL7yyN/RVAvdTbLHne0yiggca9mDHujvw8HlbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:58:7c:b9:ea:dd:14:30:70:94:3d:b5:6b:0d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
Validity
Not Before: Mar 29 04:00:45 2026 GMT
Not After : Mar 30 04:00:45 2026 GMT
Subject: CN=cbcd14234daa17b7a808012fd5219c0526f05857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:67:e2:04:bd:ec:bc:71:03:56:80:97:73:
1f:b1:4c:82:f1:d5:02:1d:92:44:ca:fd:30:19:38:
c2:c6:9e:11:97:f7:3d:95:7f:77:65:40:dc:f5:8c:
33:0c:32:6d:c3:b7:2c:5a:7c:60:f2:cf:b2:a9:97:
a9:b8:29:a1:50:96:dc:5c:27:1f:e8:82:4d:f9:ab:
56:c9:8f:a6:1a:fd:81:91:19:0d:16:01:da:90:7b:
37:40:3d:22:2b:0b:a1:e8:31:29:e8:3f:47:3e:ae:
99:d2:a1:a0:ce:41:bf:2f:94:58:cb:da:14:3d:9b:
b1:8e:66:4d:ea:4d:f6:c9:01:1d:bd:d8:47:a0:07:
16:7a:d7:90:2b:8b:66:0b:41:13:78:03:f6:e6:7a:
11:aa:d4:6b:9a:dc:59:97:5a:82:a6:c3:b3:62:8d:
5f:03:f5:e5:fa:20:18:c9:70:53:61:86:71:6b:a7:
d9:1c:66:97:01:d7:04:ed:d4:99:f9:95:9a:bb:c1:
85:a5:41:f0:dd:1a:a2:a3:fc:20:d2:21:8a:f3:04:
ea:fb:5c:43:80:1f:e0:8f:a9:24:b2:cf:8b:63:3f:
6a:9d:30:67:aa:cb:53:9b:61:58:8a:e5:fc:0a:5e:
d2:e4:07:42:c2:78:0e:72:c8:ba:8b:1e:d3:69:0f:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CD:14:23:4D:AA:17:B7:A8:08:01:2F:D5:21:9C:05:26:F0:58:57
X509v3 Authority Key Identifier:
keyid:2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fc:a4:9b:43:40:c1:31:d2:13:7b:21:68:12:17:60:59:bf:
06:d6:96:0f:4a:3f:c8:ff:5e:7d:2a:2e:40:c4:93:f1:dc:dc:
1e:95:c6:37:b4:ed:38:85:6a:3f:d6:ed:6c:df:97:05:8b:8b:
4a:64:a6:0e:6f:80:bd:4b:c8:50:4e:36:c8:fe:c3:7d:83:f5:
67:ba:44:31:9c:d6:ef:f7:ab:a4:62:14:76:34:50:90:22:a5:
2d:b8:13:3d:9b:a6:d2:41:ce:b8:e9:1e:41:72:26:62:af:57:
eb:32:c5:f1:9d:11:4e:40:a0:7d:19:83:e5:48:2c:fc:11:7c:
cd:37:4e:a8:5e:27:6a:5b:fb:5c:ce:99:8e:f6:fa:cf:99:fc:
0b:78:00:84:9a:d7:34:f4:42:a6:03:ad:2c:67:8e:1d:0e:03:
fe:db:cb:83:8d:61:78:16:43:2e:c2:d4:ea:05:66:52:a7:35:
29:fe:57:28:8b:c9:06:33:fe:16:05:1d:3c:ec:92:b9:21:b6:
2d:82:62:6a:f1:15:0d:f3:0d:9f:00:1b:bc:e2:8b:3e:88:c3:
22:1d:65:9c:5e:a8:e1:f8:d4:1b:c5:10:1d:87:36:2a:15:7c:
a2:5c:b2:eb:7a:87:63:bc:8b:11:d3:79:52:9c:8e:c8:75:5a:
cd:b9:6b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:58 2026 by rpki-client