Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier: QC0ysJILcWB5zx8RI2F1leNHGR7I7W5tiy/X1lbtXuE=
Subject key identifier: A4:8E:A5:D8:C9:AA:29:33:51:C6:9E:F6:FD:EF:AE:60:C8:FA:3C:FA
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial: 019FA071EFA8AC56B2590070F135C31C1F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number: 0C46
Signing time: Sun 26 Jul 2026 22:00:49 +0000
Manifest this update: Sun 26 Jul 2026 22:00:49 +0000
Manifest next update: Mon 27 Jul 2026 22:00:49 +0000
Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: 9Fo4cD8+/aIHBzw/682mmQUbjsuP1tSW8SP9TCNF+jk=)
2: w9C2YEP1w5Y_JbXVYJuueL5--a4.roa (hash: +XN99efnsnCoGzlf+tUbIokhlmEnZBGkv0fp+mcWEF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:ef:a8:ac:56:b2:59:00:70:f1:35:c3:1c:1f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Validity
Not Before: Jul 26 22:00:49 2026 GMT
Not After : Jul 27 22:00:49 2026 GMT
Subject: CN=a48ea5d8c9aa293351c69ef6fdefae60c8fa3cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:6f:30:e4:ca:8a:1b:8d:bf:8b:91:a4:ad:
5c:61:68:4a:7a:8d:a4:61:4e:09:33:f0:f2:02:89:
07:d2:e3:6a:b7:39:0e:fb:d0:dc:f2:54:42:7c:16:
05:ca:f4:aa:d0:4d:d2:1e:fd:63:a8:12:09:89:78:
be:52:1e:95:9a:af:53:05:00:8b:37:97:03:26:87:
c4:e2:d5:32:98:e8:37:11:54:f3:ad:e0:39:7c:c6:
6c:7f:71:1b:a3:6a:ca:78:b3:e5:21:3d:86:b0:0f:
79:14:70:d3:30:72:88:0d:57:06:90:72:78:32:a2:
af:4a:ee:dc:b1:c9:01:d2:12:02:bc:a5:a1:fe:c8:
76:f2:27:7e:87:1a:ce:39:7a:bd:f0:20:c1:ce:35:
4f:9a:10:d5:8b:66:d6:2e:5c:46:03:46:e6:d2:37:
ac:d7:a9:3a:fc:72:28:db:e2:55:6d:88:3a:d5:e6:
a3:fa:83:98:44:59:63:50:4f:2b:7b:df:45:78:fe:
a8:30:1b:53:90:f8:bc:1e:fd:f5:dc:0e:f4:60:8c:
e1:a1:ce:3c:c4:5c:66:87:a1:30:67:92:93:70:ac:
fc:88:55:8d:b3:b3:9b:d4:9a:6f:3f:be:30:2a:e3:
4c:71:01:07:9d:4a:05:3d:04:f0:64:8f:71:80:a3:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8E:A5:D8:C9:AA:29:33:51:C6:9E:F6:FD:EF:AE:60:C8:FA:3C:FA
X509v3 Authority Key Identifier:
keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:70:65:50:a9:8c:24:13:f9:e6:67:44:cd:4d:85:e6:e7:27:
63:47:2b:49:b6:d7:20:f3:3d:67:97:c1:5e:92:7d:0b:f8:53:
61:7f:33:f2:a3:c8:f7:b9:e8:2d:0d:92:b6:0f:e5:f0:2d:15:
d2:70:3b:61:4a:2c:40:b9:75:11:15:f9:d1:4f:4f:62:76:72:
72:9d:51:11:e6:fc:48:bc:1d:b2:e9:b8:9f:4b:44:fa:70:cc:
62:6f:22:7e:11:34:2d:bf:fb:d7:fc:24:3b:b4:80:e9:d7:9f:
13:4e:0f:f5:84:ff:de:36:cb:65:51:f3:c1:50:de:9e:33:77:
6f:73:6b:0c:b6:6b:2e:96:ad:44:74:d7:c1:be:c2:46:cc:fd:
ec:61:aa:a3:cc:15:d2:ad:e9:9b:aa:f9:f8:c0:ad:95:ed:11:
0f:ae:b7:a5:b8:43:f3:33:26:e6:a0:41:db:f8:ee:b6:19:3d:
f0:85:00:3b:6f:1a:2b:13:f4:d3:61:65:2b:90:56:a0:01:dc:
db:fa:d9:7f:c5:64:5b:95:f6:f1:4e:0d:c7:84:bb:e2:cd:84:
ee:b8:07:af:b7:c5:47:57:fe:29:5a:95:7a:84:c6:15:6f:15:
9e:6a:61:8d:f5:2a:94:d5:09:4f:f8:df:e1:82:72:63:24:c8:
59:54:89:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:59:17 2026 by rpki-client