Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
File: LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json)
Hash identifier: WAW8GBdIYtbkrsuF/K4QMCygiL2j07dDCiWzlVQWkFk=
Subject key identifier: F0:1F:5C:2A:84:DE:10:E5:0A:71:69:0E:2D:4D:89:36:26:95:C8:BA
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial: 019D375307CE12ACC25B8DEB37C9262C8147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
Manifest number: 12E7
Signing time: Sun 29 Mar 2026 02:01:21 +0000
Manifest this update: Sun 29 Mar 2026 02:01:21 +0000
Manifest next update: Mon 30 Mar 2026 02:01:21 +0000
Files and hashes: 1: C38xz0J3nKWG69p6aEh_3L1eROo.roa (hash: hgv2Dm3n9xuUIJlnQhstdXeK7/AZFfz5gfOa9h0Ol2A=)
2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: fRHFb1ZSiIIpu9BEZUCKduA2iqPAx+9vRVKI06Wa0rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:07:ce:12:ac:c2:5b:8d:eb:37:c9:26:2c:81:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Validity
Not Before: Mar 29 02:01:21 2026 GMT
Not After : Mar 30 02:01:21 2026 GMT
Subject: CN=f01f5c2a84de10e50a71690e2d4d89362695c8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:63:3a:15:80:e2:13:9d:3c:2b:22:84:18:
8b:d8:6d:ed:74:4d:5d:77:4d:1f:24:28:8b:33:8a:
12:2d:a1:97:fa:a4:72:7e:4b:3e:ff:54:a7:eb:46:
84:3a:f7:a6:c1:73:0d:3f:d7:d7:e2:0e:64:9e:c0:
55:60:c0:df:5f:95:3e:62:5a:34:80:91:8b:4c:d9:
cf:80:dd:33:c0:51:71:ea:c5:d8:db:52:9e:61:2d:
1f:d4:87:c3:71:46:9e:ae:57:f9:3d:69:fc:56:f9:
5c:05:48:b6:04:78:9a:e1:d1:77:85:fb:cc:bd:a5:
88:cf:f1:03:5a:bd:0d:81:ac:5e:4d:26:35:7e:55:
69:38:39:8a:14:ca:61:e4:b5:67:7f:66:94:dc:12:
49:5e:8f:2f:8b:02:ea:1c:3f:03:82:a7:fb:c9:ff:
5a:77:26:15:81:ab:99:92:22:db:75:68:ce:4d:4a:
69:76:d4:6b:aa:00:d9:46:21:c8:22:0d:29:e3:72:
a9:9a:d0:f8:45:5b:0b:4a:fc:fb:e9:80:5c:21:d0:
88:28:c1:2a:d9:3d:31:61:7e:b9:a5:dd:9c:df:6a:
5e:2a:7d:04:d1:4c:2f:53:ae:cb:ea:37:55:37:3b:
74:b6:be:d3:6a:23:29:3f:12:66:ac:fb:e1:c8:24:
40:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1F:5C:2A:84:DE:10:E5:0A:71:69:0E:2D:4D:89:36:26:95:C8:BA
X509v3 Authority Key Identifier:
keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c3:c1:ad:54:2e:69:fb:31:68:6d:20:6d:50:dd:39:f8:b0:
6f:8e:28:d4:3b:0e:a2:15:69:99:04:0f:47:b9:f3:09:b1:79:
f0:bb:15:c2:02:1b:0c:63:95:d2:39:ab:f6:d7:de:e4:25:90:
37:03:9b:42:4c:39:48:dc:e8:d2:4e:94:4e:c0:27:21:f8:2e:
2f:4a:2e:54:8c:ab:a3:cf:10:5d:23:07:64:26:cd:56:c9:fc:
90:28:dd:60:49:33:c9:47:85:32:53:93:6d:6d:95:46:79:fc:
3e:68:f8:48:76:69:f6:51:e5:7b:d3:c5:8c:6f:4e:6a:80:1b:
63:f6:2f:be:d0:9d:c9:d5:4d:68:8c:be:8a:a5:78:f0:5d:20:
67:d3:b5:a8:cb:82:4d:8c:54:19:c2:3e:8d:c3:c0:74:ee:c8:
b1:f3:75:d7:d9:0a:d2:36:fe:10:db:24:ef:f0:dd:7e:d3:57:
5b:bd:9f:25:8f:fa:ee:80:b2:24:02:35:e6:c9:07:0b:7c:51:
43:1e:2a:0d:b1:83:c6:43:f5:55:57:c0:28:1e:6d:d0:82:7e:
6a:47:e4:e0:a0:8a:0e:8c:0d:fb:41:a2:ca:1a:e4:02:ea:22:
8f:f9:4c:45:8d:cf:c4:92:df:3a:ec:ed:2b:d0:b5:d0:0e:2d:
52:d8:08:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:35 2026 by rpki-client