Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier: eC5xMEN6AXHMmu65XyfEnbhd2UK8/oSuOVWpNLQbF44=
Subject key identifier: 53:C9:5A:10:DC:29:0A:C8:5D:F2:5F:1D:85:F9:FA:C3:CF:13:29:69
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial: 019EB6C5AFC263DBE89A33D66485A6B845C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number: 0BCD
Signing time: Thu 11 Jun 2026 13:01:09 +0000
Manifest this update: Thu 11 Jun 2026 13:01:09 +0000
Manifest next update: Fri 12 Jun 2026 13:01:09 +0000
Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: jNiNcD9brIIxrobDwhUPqiCoBAgPwQptojBEEJkCxxQ=)
2: w9C2YEP1w5Y_JbXVYJuueL5--a4.roa (hash: +XN99efnsnCoGzlf+tUbIokhlmEnZBGkv0fp+mcWEF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:af:c2:63:db:e8:9a:33:d6:64:85:a6:b8:45:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Validity
Not Before: Jun 11 13:01:09 2026 GMT
Not After : Jun 12 13:01:09 2026 GMT
Subject: CN=53c95a10dc290ac85df25f1d85f9fac3cf132969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:9b:4d:32:89:e1:1f:ec:fd:e5:5a:2c:22:
0d:c6:1e:e9:f1:e4:89:9e:13:89:cb:e5:dc:c5:ba:
4b:86:4f:e3:fd:bf:ea:73:76:30:5e:71:46:d4:e7:
8d:bb:fb:ee:9e:6f:3a:a4:b2:c3:6b:a8:06:84:23:
d4:a3:6a:c2:76:b7:38:fe:2d:ae:e5:a7:d9:8a:40:
50:79:35:df:08:11:25:95:45:68:99:7a:eb:3f:e4:
2e:40:0a:c3:d5:1d:b3:a3:fd:4c:76:b9:a8:90:53:
f8:03:32:9a:1d:9b:13:bd:1d:81:d3:a8:f8:7a:c1:
4b:18:1e:10:a7:52:19:db:ba:9c:bd:ae:e3:a1:ed:
61:7a:95:29:9e:75:44:66:78:4e:48:8c:f3:4a:cb:
77:20:6c:96:62:1d:05:2e:48:99:d7:e7:43:b3:c7:
96:ab:00:d0:0a:7b:5d:66:58:4d:60:49:42:44:ba:
ea:82:4f:d0:bf:17:7d:42:d4:40:34:ce:99:a6:08:
f1:97:e2:9c:c7:29:de:62:13:c9:ee:2d:b2:1e:91:
b2:84:34:5d:57:46:e3:9e:65:6b:39:c7:c2:1c:c0:
64:ff:d2:7a:39:1c:84:7c:a2:36:e9:57:9b:03:d8:
72:c2:78:9e:6c:01:48:3e:47:78:7b:2f:ed:17:ec:
fe:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C9:5A:10:DC:29:0A:C8:5D:F2:5F:1D:85:F9:FA:C3:CF:13:29:69
X509v3 Authority Key Identifier:
keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:58:bc:59:cc:24:fc:c4:ad:a3:ca:fc:0a:f5:d6:11:69:5e:
a5:a7:e6:db:3c:a7:e4:69:67:09:3f:fa:eb:65:54:73:80:b8:
3b:4d:74:41:62:81:fd:4e:f1:86:0a:7f:ed:3f:b1:e8:1c:9d:
8e:cd:38:8c:10:97:6b:6f:b5:bc:49:98:77:96:d7:0b:f7:4e:
f2:d5:e5:be:cc:f4:27:db:3e:96:7b:c8:87:b9:05:a7:cd:83:
26:bd:52:63:21:23:11:7e:65:27:89:79:85:7d:e1:a1:85:51:
43:01:b8:8b:9a:a7:f4:aa:ac:af:93:7a:ef:4b:d6:9b:52:2d:
2a:fb:27:43:01:58:04:bb:9e:d8:56:26:4e:10:20:f8:1d:a7:
c6:36:cd:d1:32:e5:9c:2d:ce:a2:95:60:00:a9:2f:f6:c3:08:
c0:96:d9:32:f0:02:9c:bf:2e:3c:09:d6:96:75:dc:c7:4a:be:
50:9e:b3:eb:04:2c:1d:63:90:8b:a1:29:2a:7b:96:e6:bb:6a:
80:8b:aa:eb:15:3f:f9:42:c7:b8:c6:dc:01:54:ea:f8:66:ce:
83:7b:24:6c:28:d3:4c:ff:29:a3:fc:90:31:35:4f:00:bb:b8:
51:45:a4:bd:41:48:d2:f4:ae:5d:e5:e6:15:1d:fa:e2:2f:0a:
8a:3d:e0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:40:03 2026 by rpki-client