Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
File: LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft (raw, json)
Hash identifier: 9NYTOlN6WpJB4t1npAuFaLeSTFlWclCjh6Dtx/vqHLM=
Subject key identifier: 54:6E:2F:B9:04:CF:13:FC:82:7E:DD:9F:C7:AF:75:3A:BC:5F:9D:40
Authority key identifier: 2D:50:36:35:7F:BC:3C:A3:08:66:AD:E0:63:26:2A:D0:D4:40:B6:60
Certificate issuer: /CN=2d5036357fbc3ca30866ade063262ad0d440b660
Certificate serial: 019F10E528638933E485EC5B66F975682498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
Manifest number: 97
Signing time: Mon 29 Jun 2026 01:01:21 +0000
Manifest this update: Mon 29 Jun 2026 01:01:21 +0000
Manifest next update: Tue 30 Jun 2026 01:01:21 +0000
Files and hashes: 1: LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl (hash: PDXLkdSj0uO3+zgA4GQ0/NHiIsfzBgGDy2fswbShtug=)
2: Rpy7QWovYwdZQAvT1XL6SDhlWtw.roa (hash: Z7pDSRPHr8DmCaGGeQ16hWhefhTjEYXfJeW0Mr0f2Qs=)
3: wDbeUy5vMGU92nZCGMGGt4_gvPU.asa (hash: izW7X2u98Zh+LrJ8/PtYNnVCPiYS+v78ooSttWUx0mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:28:63:89:33:e4:85:ec:5b:66:f9:75:68:24:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5036357fbc3ca30866ade063262ad0d440b660
Validity
Not Before: Jun 29 01:01:21 2026 GMT
Not After : Jun 30 01:01:21 2026 GMT
Subject: CN=546e2fb904cf13fc827edd9fc7af753abc5f9d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:17:5c:e3:45:6c:c0:2d:4d:18:e0:f8:67:
71:72:8f:86:8d:f1:94:ba:d8:db:d7:6d:b5:64:41:
97:cd:40:15:09:a5:7b:e9:5c:ec:c5:90:45:5d:e8:
01:6c:f1:34:a7:5a:d0:46:a2:9b:d2:27:9e:2a:cc:
45:f7:82:dc:a0:06:00:aa:ba:d2:a4:78:83:51:51:
bf:88:0a:06:fd:94:09:39:f7:39:26:5d:e6:ca:ca:
8c:b7:56:fa:d8:d0:73:33:f1:84:e9:0c:ed:3c:8d:
43:a0:e9:b7:06:7c:f9:32:70:41:f2:60:62:d7:3d:
7e:66:57:71:eb:d2:a1:0b:61:67:c3:ff:4b:7e:18:
2a:82:ff:71:c4:c8:dc:14:ae:29:bd:be:4d:17:a2:
b6:d1:1d:12:48:59:f7:24:86:ed:4c:b0:a6:96:6b:
40:fe:9d:98:57:47:e6:38:c2:85:00:b6:4f:e9:a0:
ce:27:c8:b4:e6:9b:3f:d9:d6:85:20:5a:ba:ac:1b:
34:d8:52:1c:2b:2a:b4:e8:39:44:b7:c8:76:b0:64:
00:6e:0f:8a:76:29:c8:e0:68:1e:cb:9e:f7:dc:82:
6c:dd:ba:13:eb:6f:f5:b3:8a:d9:78:7d:06:be:e6:
a7:0a:1f:1e:ac:14:41:40:7a:4a:d1:28:70:6c:24:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6E:2F:B9:04:CF:13:FC:82:7E:DD:9F:C7:AF:75:3A:BC:5F:9D:40
X509v3 Authority Key Identifier:
keyid:2D:50:36:35:7F:BC:3C:A3:08:66:AD:E0:63:26:2A:D0:D4:40:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dd:f7:dd:f9:d9:d2:3c:a9:cb:9b:3d:74:91:18:99:e4:81:
3c:e0:ea:af:0e:bc:8d:24:f0:7b:c3:2c:49:5c:f3:fa:c1:07:
99:27:9d:81:dd:b5:89:25:d7:c7:57:f7:8a:02:c9:13:4b:67:
91:e4:b9:1e:ab:14:f3:54:70:87:8f:0c:49:d8:9f:b8:a2:b1:
ba:f2:c0:f8:db:3d:27:91:00:60:77:7e:9c:a3:d8:87:1e:4b:
da:1e:e9:00:15:24:3e:f8:f2:01:17:65:c4:ec:f0:48:89:29:
b1:c5:09:ed:8e:4b:6f:4f:03:29:e3:d3:74:35:22:11:d8:05:
72:da:37:d1:93:4b:24:7c:5f:a8:80:27:bd:98:ff:34:5b:ec:
66:00:91:41:74:9e:ca:c8:37:49:fe:81:c3:b6:73:bf:d2:38:
7d:89:f2:94:b0:ca:2d:b8:02:a6:55:22:aa:bc:15:ca:d6:fd:
ed:26:fe:30:a0:bb:e4:2c:8b:11:ce:94:92:ac:ec:6c:26:31:
dc:04:e0:3d:c7:42:58:d0:aa:a0:27:c2:5f:43:a3:ec:18:fe:
31:73:c6:6d:d2:e6:18:b6:2b:d6:7c:15:90:bd:1a:e4:b7:d7:
ae:97:09:e4:35:cf:6c:d1:3f:73:5a:5f:be:f2:19:bc:91:35:
15:96:24:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:40:14 2026 by rpki-client