Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier: 4tSuCjrP2cXGDY5rJLfZ4IaiVnMjZpSPd1hDiGvxX10=
Subject key identifier: 3F:4D:DD:17:78:92:D8:B2:3C:8C:32:9F:2E:19:19:EE:0C:39:4C:7A
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial: 019D38657297930C545747E6507CB32EE68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number: 0B07
Signing time: Sun 29 Mar 2026 07:01:05 +0000
Manifest this update: Sun 29 Mar 2026 07:01:05 +0000
Manifest next update: Mon 30 Mar 2026 07:01:05 +0000
Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: UjUZK1fy2raBcLwFqGWctLOjc6y1sblrFWHqUzWeelo=)
2: w9C2YEP1w5Y_JbXVYJuueL5--a4.roa (hash: +XN99efnsnCoGzlf+tUbIokhlmEnZBGkv0fp+mcWEF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:72:97:93:0c:54:57:47:e6:50:7c:b3:2e:e6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Validity
Not Before: Mar 29 07:01:05 2026 GMT
Not After : Mar 30 07:01:05 2026 GMT
Subject: CN=3f4ddd177892d8b23c8c329f2e1919ee0c394c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:be:92:8c:80:a0:f7:63:82:38:f7:9b:b6:
5b:1f:92:5c:69:30:9a:9b:3e:d6:9c:0d:a1:b9:7f:
5f:ee:8d:58:bb:08:21:ba:40:69:2c:65:79:21:fd:
66:41:67:59:14:78:a8:1d:aa:a5:0f:47:60:67:ed:
c2:55:be:47:bb:c8:e0:dc:e1:cd:a8:38:7f:36:0a:
78:c3:e9:3e:23:f2:41:db:49:f7:02:81:3a:74:0a:
08:e4:d9:e4:61:8f:a4:a9:42:21:ba:22:de:53:d0:
55:fe:7b:74:8d:42:ec:b5:42:35:1b:4c:6d:17:2b:
12:80:2f:73:64:d1:d5:92:44:02:6f:10:1e:1d:2d:
d2:e7:61:4d:72:85:dc:2f:83:ce:57:e8:1a:d1:98:
de:29:f9:36:0f:fc:91:a4:c3:eb:25:35:61:e7:b9:
ea:ac:2b:f9:b6:10:46:06:74:fa:2b:f5:46:d5:9d:
71:c4:97:b6:a6:dc:79:be:f8:64:73:4b:20:89:81:
82:b8:8b:10:7b:55:5b:97:d8:99:36:9d:a4:d6:cb:
66:a5:67:5c:ef:49:59:0e:bf:d0:6b:b9:8b:dc:c0:
af:d6:3a:7f:4c:a7:e6:42:da:eb:f6:a9:d6:96:0c:
f5:e1:31:e5:ea:ee:5d:a2:46:4b:c3:98:fd:d7:04:
39:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4D:DD:17:78:92:D8:B2:3C:8C:32:9F:2E:19:19:EE:0C:39:4C:7A
X509v3 Authority Key Identifier:
keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:74:5f:57:41:df:7a:64:70:81:f9:cf:7a:42:79:bd:6a:d7:
91:54:95:ae:72:2e:d6:4d:19:5d:63:1c:e1:5f:75:d8:ac:79:
43:56:73:21:a4:62:76:33:e8:82:83:f0:58:e5:44:8f:b8:c8:
20:29:be:c9:e6:a1:3e:06:cc:35:be:b4:0d:02:fd:a2:4d:80:
47:68:de:2a:2e:3d:8a:5c:68:e6:45:d6:35:9e:56:3d:f2:bf:
34:d4:14:c7:f7:b3:16:7b:b6:bb:f8:fb:dc:f9:f8:f3:8e:16:
8b:bb:82:11:9e:19:8d:ed:be:2c:21:3d:6f:f3:ac:2d:2d:5b:
50:f0:a4:94:9b:da:a8:91:55:3e:cf:3a:aa:8c:27:61:2e:74:
99:54:23:5d:74:f6:d3:f0:9a:e4:f5:ea:37:9f:47:87:b4:7b:
84:29:70:c2:9b:5a:40:1e:19:09:1d:1c:66:94:3c:68:85:53:
62:7c:20:0b:3b:a6:17:b0:64:ae:b2:af:6d:33:71:6d:c4:aa:
71:06:ed:ef:7b:86:93:71:fc:f4:ee:9f:69:57:ed:9f:b6:f6:
db:7e:84:db:ed:88:1b:7e:f3:1e:94:44:c5:c1:b1:ef:a2:71:
81:a2:fb:63:c7:5a:cf:d5:19:2c:be:51:f7:f0:38:a1:c9:a7:
65:f6:37:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:08 2026 by rpki-client