Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
File: LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft (raw, json)
Hash identifier: FHWfK6lUxJr25bxXcvsPzcFk7LhClP31Pyq/XTJdDSc=
Subject key identifier: 7A:C9:DB:A5:21:FB:01:D0:65:3A:A5:64:89:3C:17:DC:0C:E4:D4:2B
Authority key identifier: 2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2
Certificate issuer: /CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2
Certificate serial: 019D39AEF31AAA44F26EFEE20CA81F5F67FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
Manifest number: 024B
Signing time: Sun 29 Mar 2026 13:00:59 +0000
Manifest this update: Sun 29 Mar 2026 13:00:59 +0000
Manifest next update: Mon 30 Mar 2026 13:00:59 +0000
Files and hashes: 1: GxprRy6go3u5_DAdndXbJ5nUbwg.roa (hash: 2ASCUCuWedqY/SvOcJo00rP++cWKEIODdp7vE3Sk8Vs=)
2: LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl (hash: dcsD1iD55jVXCBmNztV0NJR3f3TROI3gxSANWeONSz8=)
3: esQ4LQtwMGAVPfo5Iqwd6J1wFFg.roa (hash: Zp5wls9Z57v3c+rmph9lPmQEqF9p8BKAcLAfNlb+aO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:f3:1a:aa:44:f2:6e:fe:e2:0c:a8:1f:5f:67:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2
Validity
Not Before: Mar 29 13:00:59 2026 GMT
Not After : Mar 30 13:00:59 2026 GMT
Subject: CN=7ac9dba521fb01d0653aa564893c17dc0ce4d42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:4c:48:9f:ff:be:68:c0:f3:1c:75:b6:b0:
32:3d:70:a4:39:1f:fc:20:ca:b4:85:a6:92:b6:4b:
9d:b8:01:d5:d4:5a:9d:f0:38:31:49:4b:ce:e3:98:
97:b8:7d:9e:ba:0c:a1:19:33:5c:51:86:8a:3f:84:
e2:03:f2:fc:01:55:bc:d4:5e:78:71:87:13:42:8b:
5f:c3:e2:94:23:f5:24:35:4e:3c:22:bd:02:91:6b:
8f:53:2a:cc:cc:1e:27:58:30:86:d9:64:06:45:9f:
3c:b3:61:a6:17:5f:4e:2c:2d:2e:15:08:3f:79:f5:
5e:f5:e0:19:be:9b:29:4f:c1:4f:f9:50:62:6c:86:
1c:6f:0f:e3:a6:f7:6b:b5:12:9c:cb:59:b9:c1:75:
75:b7:f4:e1:95:ee:7d:69:ab:2c:60:c5:cd:90:fa:
7f:5c:05:47:c0:03:07:90:71:6b:5d:9b:9a:62:78:
3f:a8:8c:65:cb:67:25:67:51:45:40:b3:21:d8:f9:
2b:55:e3:83:9c:e7:83:e1:e3:cb:7d:4a:9f:0e:20:
ef:12:10:b9:09:a1:08:7c:84:39:0f:1f:be:b4:be:
f2:fc:0e:d0:d9:a2:88:c3:d9:1d:ee:6c:ef:be:9c:
cb:d8:d0:09:08:0c:24:c1:fe:35:7e:fe:9b:d0:3e:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C9:DB:A5:21:FB:01:D0:65:3A:A5:64:89:3C:17:DC:0C:E4:D4:2B
X509v3 Authority Key Identifier:
keyid:2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:60:cc:a6:be:29:f4:8f:96:bd:62:49:bc:08:ed:67:65:44:
d8:8b:e7:60:f7:eb:c1:0b:93:bb:d3:2f:dc:70:5d:31:a0:fe:
ef:85:3c:a2:d2:13:b8:18:2e:4f:3b:20:6b:61:e1:1a:49:95:
ac:c2:87:5e:23:f3:32:65:12:f1:40:8b:74:80:63:fc:6e:3d:
91:64:07:91:da:f1:46:2c:eb:b5:bb:c3:05:44:d6:38:bc:7a:
b7:34:35:b8:1f:94:3b:89:0e:01:cf:39:32:be:fe:c7:5a:a9:
10:ec:a7:36:4b:aa:9c:bc:11:ce:3c:7d:3f:2a:4f:80:b8:0c:
42:8b:44:08:c7:a4:f1:bb:90:7f:2f:7c:c8:5e:26:03:91:a9:
bd:c5:43:08:a6:bf:db:65:96:31:03:fd:0a:3d:56:8e:43:6e:
07:75:8b:a1:0f:df:3b:06:82:af:35:11:8d:f8:57:f3:d3:98:
37:8c:7a:c5:b3:36:9f:c3:4b:a5:c5:83:67:cc:85:01:7f:0f:
33:12:94:a0:2b:00:f2:a9:82:7f:88:54:54:ea:48:2f:45:29:
7d:d5:97:d6:c9:bc:a1:83:58:6a:2c:28:40:ec:10:94:2c:4f:
bc:c6:71:32:ee:ee:a7:92:d3:ff:da:32:c9:cb:b8:e4:4a:7a:
d0:b4:7c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:51 2026 by rpki-client