Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier: ZEcXIsS6yCxti2tlmZhcjJMdSRmwpRE4wM8e0o3WPws=
Subject key identifier: 6C:94:2E:CF:BB:64:E6:9E:18:9F:54:2A:AF:55:14:B6:37:21:70:65
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial: 019D37523DB96713D15253EADB0C23B14FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number: 15B4
Signing time: Sun 29 Mar 2026 02:00:29 +0000
Manifest this update: Sun 29 Mar 2026 02:00:29 +0000
Manifest next update: Mon 30 Mar 2026 02:00:29 +0000
Files and hashes: 1: JJJqBn2vrMXP7kngEan0imFBrIE.roa (hash: KnDyBCr49BTGq3A5Ah9xTrAKORQ9HlD3KaBetAPGdn4=)
2: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: z/6AjzkyB0WGbvpNfCmR+AdfLbTSpJyRSia+K/w92E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:3d:b9:67:13:d1:52:53:ea:db:0c:23:b1:4f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
Validity
Not Before: Mar 29 02:00:29 2026 GMT
Not After : Mar 30 02:00:29 2026 GMT
Subject: CN=6c942ecfbb64e69e189f542aaf5514b637217065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:13:8b:93:52:c2:99:a1:7a:98:e5:bf:bd:
b4:44:db:09:85:57:82:ce:8b:18:a4:80:56:74:89:
03:94:c7:d9:c1:2e:17:0b:51:45:f4:90:1f:85:de:
91:8b:0c:b0:d8:b6:0b:04:78:d8:36:89:ff:e0:c0:
08:28:30:d4:d1:6f:cc:7f:32:ab:da:c8:cc:c3:51:
57:e9:d4:42:4b:33:df:a7:41:09:83:49:78:f3:cb:
4c:9f:4c:f1:2d:c8:32:09:6c:47:81:e7:36:c1:71:
d4:13:a0:4b:29:e0:c2:59:1c:ff:f8:d6:da:ec:17:
64:e9:6f:c4:0a:bf:13:4d:66:e9:13:94:a3:56:6b:
25:bc:fe:d2:5b:9b:38:90:47:29:13:2e:cb:51:be:
99:ff:57:ce:3c:f8:49:ca:88:48:07:93:c7:1b:30:
41:ac:21:33:14:c7:83:35:08:cb:e1:44:73:0b:1a:
cf:6d:14:f8:53:c7:96:86:63:84:f9:ca:8f:92:4f:
57:4c:71:30:3b:b5:b6:8c:a6:ea:6b:c6:71:a6:0f:
d2:58:68:0b:bd:d9:ed:28:ac:e7:9c:1d:40:df:b6:
b2:ac:d5:d4:1e:17:11:e4:ef:18:1d:ec:67:14:e6:
14:96:91:8a:4d:42:e2:f6:07:0e:1c:11:fc:38:b7:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:94:2E:CF:BB:64:E6:9E:18:9F:54:2A:AF:55:14:B6:37:21:70:65
X509v3 Authority Key Identifier:
keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f1:26:7a:70:76:f1:b8:4f:50:e8:30:88:60:db:de:da:3e:
7c:5e:67:06:05:0e:c7:b3:3f:16:cf:af:4a:3c:07:85:29:86:
b3:85:25:ea:c6:bc:54:bf:9f:30:bb:61:91:5e:a2:ac:79:cc:
0d:00:e0:b3:d4:17:d8:c4:c7:0f:0b:6e:4d:23:6f:20:52:42:
a7:92:71:3f:35:4c:5b:d5:38:64:66:d1:16:68:67:38:de:02:
97:49:13:65:24:56:06:07:79:e3:84:25:54:3c:df:61:32:54:
71:7c:bd:f2:57:df:b4:c0:f5:a8:21:68:47:b0:cf:78:b2:08:
2a:b0:13:6e:b0:84:15:fc:d7:40:45:62:b3:51:7d:b2:ec:af:
1d:58:31:ba:5f:44:7a:68:21:db:84:95:83:dc:e2:56:c5:cd:
72:d2:6f:13:17:43:0b:af:2b:62:aa:da:ce:ef:7d:0a:10:9a:
18:1e:88:5e:e2:b4:89:0f:e8:6f:e2:80:ed:27:9c:cc:69:ec:
19:7e:42:dc:f5:b8:b6:d2:9b:01:e9:a0:21:ac:16:e8:a3:aa:
8b:f6:0f:29:f2:6c:1b:41:b4:92:38:04:fc:0b:f9:67:d1:f9:
d4:29:4b:09:c5:4f:1a:d9:21:7d:4f:83:2a:15:a1:dc:6c:e6:
f7:93:1d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:02 2026 by rpki-client