Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
File: LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft (raw, json)
Hash identifier: +LpF7PZiu33OEGkeE+QilyBHmu4qnNQXAvE0G1USBnE=
Subject key identifier: 73:1D:85:64:8C:87:D1:60:96:FB:74:8E:3A:AC:53:8E:7B:20:C2:19
Authority key identifier: 2D:50:36:35:7F:BC:3C:A3:08:66:AD:E0:63:26:2A:D0:D4:40:B6:60
Certificate issuer: /CN=2d5036357fbc3ca30866ade063262ad0d440b660
Certificate serial: 019E2926F934AB3797C2F9B3307C277ED487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
Manifest number: 1F
Signing time: Fri 15 May 2026 01:01:20 +0000
Manifest this update: Fri 15 May 2026 01:01:20 +0000
Manifest next update: Sat 16 May 2026 01:01:20 +0000
Files and hashes: 1: LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl (hash: PQ+NYiM4iMaY3qhSS3Ru8MXllufdlHCMNM9S21ZVLWY=)
2: Rpy7QWovYwdZQAvT1XL6SDhlWtw.roa (hash: Z7pDSRPHr8DmCaGGeQ16hWhefhTjEYXfJeW0Mr0f2Qs=)
3: wDbeUy5vMGU92nZCGMGGt4_gvPU.asa (hash: izW7X2u98Zh+LrJ8/PtYNnVCPiYS+v78ooSttWUx0mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:f9:34:ab:37:97:c2:f9:b3:30:7c:27:7e:d4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5036357fbc3ca30866ade063262ad0d440b660
Validity
Not Before: May 15 01:01:20 2026 GMT
Not After : May 16 01:01:20 2026 GMT
Subject: CN=731d85648c87d16096fb748e3aac538e7b20c219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:fd:59:5b:11:59:dd:ad:75:06:43:37:2c:b2:
a4:4f:a2:2e:b9:16:1b:bc:ed:b8:2f:80:0b:88:6d:
c4:7a:fc:72:4a:7c:da:1c:00:9e:87:c2:db:2c:35:
64:df:01:2c:e6:a0:73:6b:4b:85:43:97:61:92:2e:
f8:d4:55:d6:35:f2:0f:60:db:8c:93:cb:5e:b5:a4:
2d:66:17:f7:58:c3:17:dd:97:32:b9:0e:52:f9:83:
3a:76:4a:a7:a3:66:bc:b1:04:1b:99:be:a1:31:36:
00:af:8a:52:11:32:93:7d:cf:71:4a:01:d3:6f:51:
70:bc:8d:3e:31:61:65:91:4c:73:a0:1f:49:f3:99:
e1:41:ce:c2:4b:7c:0c:39:1a:d2:3f:9f:d4:b6:c3:
0d:b3:d5:f0:7c:29:82:00:d9:88:c6:7a:41:61:ee:
3d:f4:83:2f:d1:c1:70:c4:b0:f6:7d:78:a8:9d:a7:
5e:93:61:7b:36:01:05:55:93:b9:03:33:92:56:86:
32:81:57:b1:f9:6c:ed:ee:4d:f7:b7:85:4f:9f:dd:
f1:02:96:96:86:92:cd:45:fd:e8:e5:68:8f:26:a0:
15:81:f6:e1:79:c3:1f:7a:8f:5c:03:1b:fc:ad:26:
09:a4:fa:6a:73:6c:af:6a:e6:b0:a9:cf:d2:c7:48:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1D:85:64:8C:87:D1:60:96:FB:74:8E:3A:AC:53:8E:7B:20:C2:19
X509v3 Authority Key Identifier:
keyid:2D:50:36:35:7F:BC:3C:A3:08:66:AD:E0:63:26:2A:D0:D4:40:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:90:63:58:05:40:a1:bf:7b:c2:bf:bf:54:7e:e6:73:af:a0:
12:f5:0a:47:fc:09:6b:fe:16:8b:ac:41:3a:11:71:92:d7:62:
60:47:8a:89:96:f0:fc:13:75:59:f5:d6:14:55:99:5b:f5:20:
56:16:ec:bd:65:3c:b3:0b:62:c2:43:b6:2d:44:d9:19:72:6c:
36:eb:c0:ce:ab:0c:54:7d:8c:e0:ed:44:07:dc:b5:ad:6c:0a:
d8:09:b0:d0:0d:08:bf:6b:41:37:56:98:2e:4f:f7:95:e6:37:
e8:a8:08:db:d5:cc:16:36:b3:50:7d:27:8f:34:dc:1d:c8:62:
19:55:93:d8:fb:db:84:65:9e:17:28:3b:2b:20:2e:fc:d9:a8:
03:3c:69:f7:a0:c7:96:ca:cc:10:74:bd:f3:9e:25:e0:75:a3:
e6:c6:4e:e7:76:09:b9:af:b5:81:0e:9b:f5:d8:94:ca:43:81:
91:f8:ad:78:62:76:7a:22:c1:81:eb:7c:6d:dc:e4:a4:45:8b:
39:90:70:ef:53:2b:17:d7:09:83:50:6d:c0:06:43:83:9a:7b:
14:1f:c0:7b:50:21:40:dc:ad:3d:36:44:b1:a8:26:2c:ce:51:
1e:07:78:d6:6d:f0:d4:c8:80:49:16:a1:76:c3:fb:8d:c3:02:
86:d9:a0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:15:10 2026 by rpki-client