Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier: 4Abq6BHwFByCs05ZnNRutxHk08wqjBaAlV3sHtXATGE=
Subject key identifier: 1B:F3:73:82:B2:85:08:44:F5:F3:4F:63:69:B8:B6:46:EB:EA:B3:61
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial: 01A08A1E4200607956D3531725BEFC08568E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number: 0CBF
Signing time: Thu 10 Sep 2026 07:00:33 +0000
Manifest this update: Thu 10 Sep 2026 07:00:33 +0000
Manifest next update: Fri 11 Sep 2026 07:00:33 +0000
Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: z+x+OvtvA52BaBwC0tpURW2NcyqpNEO6VbvKh7toi6w=)
2: w9C2YEP1w5Y_JbXVYJuueL5--a4.roa (hash: +XN99efnsnCoGzlf+tUbIokhlmEnZBGkv0fp+mcWEF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:42:00:60:79:56:d3:53:17:25:be:fc:08:56:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Validity
Not Before: Sep 10 07:00:33 2026 GMT
Not After : Sep 11 07:00:33 2026 GMT
Subject: CN=1bf37382b2850844f5f34f6369b8b646ebeab361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:18:cb:01:eb:9f:2d:ea:92:0c:77:f2:d5:5b:
a4:35:98:10:80:ba:05:48:70:bd:59:55:76:57:9b:
6a:40:35:8e:f6:0c:8b:21:91:c2:66:0d:32:f2:ab:
fe:fc:4d:f4:9e:1e:0e:f8:aa:3d:8e:91:d1:75:18:
cd:c7:2c:89:fd:72:b9:32:a9:75:0f:50:77:ac:48:
08:83:7c:f3:58:ec:82:37:bd:09:3e:5a:26:e9:a7:
50:f7:56:bd:64:63:31:2b:b8:f0:17:6f:d1:5f:ba:
d2:c1:36:0a:07:6d:a1:c2:53:b8:70:0d:79:d4:37:
3e:75:15:bf:8b:4d:a5:41:f7:d0:f2:0d:be:e1:17:
98:65:58:f7:71:0e:56:90:5d:0e:b2:4f:2d:93:7d:
96:90:ea:d3:84:44:ef:34:f3:66:b7:ea:79:49:d3:
d7:84:42:17:53:7b:cb:b9:e4:d8:a0:ed:59:0a:57:
c7:a0:4b:a0:6d:e5:83:79:d7:0c:c7:a9:f0:77:71:
49:ba:a4:a5:bc:e1:ba:5b:20:a5:90:ec:a9:0d:2e:
e1:2a:98:5b:10:3b:ec:c3:11:16:e9:49:18:73:69:
81:86:46:6f:ad:b4:83:79:0b:2b:78:51:10:a2:45:
2c:b9:f5:8d:ff:14:9a:e8:47:ab:81:fd:69:ff:52:
a6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F3:73:82:B2:85:08:44:F5:F3:4F:63:69:B8:B6:46:EB:EA:B3:61
X509v3 Authority Key Identifier:
keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ee:03:f4:54:ca:53:ec:93:fe:ba:85:f6:b8:51:61:70:7c:
e3:be:54:43:81:24:7b:4f:ed:5e:6d:98:bd:e9:06:4e:76:c2:
8e:af:a9:e3:8d:35:01:00:c3:9b:09:0c:d0:6c:19:dc:09:86:
2b:cc:29:f8:79:c7:db:4a:d7:56:55:03:e3:84:8d:4c:b8:0b:
ad:82:79:0d:84:79:0e:00:90:35:06:dd:3d:b5:43:61:c9:68:
65:e9:04:91:40:14:40:5d:b7:3a:cd:88:06:72:31:96:d5:ef:
56:92:50:98:48:af:ce:70:c3:7f:c3:79:59:ea:ba:2d:c7:19:
a4:3e:87:ab:3e:2d:97:ea:90:18:f0:33:9c:8d:b2:72:26:d7:
84:23:96:81:18:d4:de:f3:fc:70:75:13:91:76:75:9c:67:c2:
0b:e4:eb:78:1f:01:90:ec:56:78:75:2d:46:b6:8b:5a:0f:77:
6b:42:f5:57:30:3b:26:c4:9d:41:b3:c6:33:91:47:ec:0a:00:
a2:26:2d:03:4a:b7:b2:7e:34:2d:df:60:0a:12:4d:3f:73:d0:
7b:b3:2a:dc:97:93:67:bd:6c:12:94:68:93:f9:16:93:a3:90:
cb:d1:83:ed:67:df:0b:c2:d1:52:d8:1f:95:dd:bb:77:90:f7:
01:e6:64:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:43:24 2026 by rpki-client