Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
File: LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft (raw, json)
Hash identifier: K68ZQTwdJw5VE418H0kqgISE65ruRFjsgl6TlHGFMxA=
Subject key identifier: 22:D7:87:ED:B4:1B:30:5E:4B:CB:42:D9:4B:44:C9:CF:44:F8:24:27
Authority key identifier: 2D:50:36:35:7F:BC:3C:A3:08:66:AD:E0:63:26:2A:D0:D4:40:B6:60
Certificate issuer: /CN=2d5036357fbc3ca30866ade063262ad0d440b660
Certificate serial: 01A03A4C9875EF5372ADD4C37D87FCF98620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
Manifest number: 0131
Signing time: Tue 25 Aug 2026 19:01:33 +0000
Manifest this update: Tue 25 Aug 2026 19:01:33 +0000
Manifest next update: Wed 26 Aug 2026 19:01:33 +0000
Files and hashes: 1: LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl (hash: A56O95L60a02QjypMqde7hRlde4GP2WaPF0VFBXpz0M=)
2: Rpy7QWovYwdZQAvT1XL6SDhlWtw.roa (hash: Z7pDSRPHr8DmCaGGeQ16hWhefhTjEYXfJeW0Mr0f2Qs=)
3: wDbeUy5vMGU92nZCGMGGt4_gvPU.asa (hash: izW7X2u98Zh+LrJ8/PtYNnVCPiYS+v78ooSttWUx0mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:4c:98:75:ef:53:72:ad:d4:c3:7d:87:fc:f9:86:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5036357fbc3ca30866ade063262ad0d440b660
Validity
Not Before: Aug 25 19:01:33 2026 GMT
Not After : Aug 26 19:01:33 2026 GMT
Subject: CN=22d787edb41b305e4bcb42d94b44c9cf44f82427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:d5:14:84:54:bd:ef:f7:d9:f8:ed:68:ac:
b2:88:07:bc:c8:a3:20:f9:2f:06:10:0f:55:fb:6d:
fa:75:e9:c9:c3:d9:01:14:08:ac:61:75:52:a7:61:
ed:e5:9a:cb:3e:65:91:c6:e0:10:45:5d:6c:ef:75:
a8:c7:4f:a6:c0:6e:24:a1:09:d3:bc:e7:f8:6d:40:
bd:af:ca:41:30:78:7e:ee:93:d5:0f:d8:43:70:a2:
8c:ca:0f:0a:c1:69:5d:57:ff:df:ee:d3:ba:eb:06:
d4:60:0b:2f:29:c0:08:43:48:c2:f2:8d:66:10:bb:
de:ef:fa:35:09:43:e8:1d:a4:2c:37:0f:de:b3:3a:
57:36:83:77:2b:b9:55:71:53:e7:db:4d:07:bc:1b:
11:c0:73:ee:75:ab:67:cd:dd:04:ac:17:24:3a:db:
64:c2:34:4b:73:43:39:ce:ab:fa:91:f2:2d:f0:3a:
54:d4:f9:0b:26:e9:ed:e0:ab:10:3b:ae:32:96:cf:
bb:86:57:c6:b2:22:f1:3c:97:2e:38:48:ae:1a:5a:
db:c0:7b:82:6b:65:ab:74:0a:89:d9:0b:93:0a:bc:
48:e5:17:fc:b9:90:dc:00:f6:c7:94:ef:6a:f2:36:
3a:eb:f0:26:47:d2:47:76:d6:57:36:82:8c:f7:f0:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D7:87:ED:B4:1B:30:5E:4B:CB:42:D9:4B:44:C9:CF:44:F8:24:27
X509v3 Authority Key Identifier:
keyid:2D:50:36:35:7F:BC:3C:A3:08:66:AD:E0:63:26:2A:D0:D4:40:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:de:22:8d:5c:6a:d5:30:c5:d1:9c:5d:05:35:8e:14:60:68:
15:8f:1b:36:86:3c:00:5e:7d:27:0f:71:fe:d8:a7:05:bd:2d:
8d:68:39:f0:d4:33:52:e4:7a:42:02:e5:14:a2:35:c3:cd:81:
67:dc:3a:b4:e6:ca:73:f3:d1:0d:3a:a9:90:0a:95:01:80:d9:
0c:0c:33:82:74:45:72:0b:6e:bf:4a:d8:cb:1b:86:f6:f7:36:
3c:af:fd:db:5d:f6:96:93:d5:b2:b7:e2:ad:3b:69:e8:df:cd:
72:f2:49:81:32:1f:af:88:ce:c9:57:33:3e:7e:f8:23:5b:60:
e3:4f:05:7c:74:06:4d:74:b4:c2:62:b5:88:70:a2:3a:46:2d:
12:fb:e5:85:05:95:a7:20:2c:04:dc:5d:f8:d5:9a:8f:34:2c:
c5:15:62:81:56:3b:7a:62:6b:8d:7c:84:ea:b9:56:3e:26:16:
3f:58:fe:77:c3:0d:07:14:ed:00:d8:58:43:1c:65:62:ca:6e:
8c:68:67:a3:8d:90:74:32:d4:6b:8a:da:e8:61:c8:37:c8:db:
b0:5d:d5:7e:90:2c:8d:5a:ed:3a:b5:fe:53:28:8f:da:e4:e5:
f5:25:35:e5:9b:48:4a:da:ef:6a:73:fa:2c:7e:7a:77:98:f4:
d8:25:ec:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:42:45 2026 by rpki-client