Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier: BqxpSA9Fd7VVfLj/v4Mqev2MIHRXxeGEnboCiDkzcwQ=
Subject key identifier: 6C:71:44:3E:4C:BE:85:D5:05:37:03:72:32:48:E6:A0:AD:DE:84:E7
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial: 01A0268E6B1E08BDF2E5CFCF6B811E9537F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number: 1739
Signing time: Fri 21 Aug 2026 23:01:02 +0000
Manifest this update: Fri 21 Aug 2026 23:01:02 +0000
Manifest next update: Sat 22 Aug 2026 23:01:02 +0000
Files and hashes: 1: JJJqBn2vrMXP7kngEan0imFBrIE.roa (hash: KnDyBCr49BTGq3A5Ah9xTrAKORQ9HlD3KaBetAPGdn4=)
2: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: PObGMWZAGJ2lNTmgcixWAn/uMekQuDAASV7WPQZjoaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:8e:6b:1e:08:bd:f2:e5:cf:cf:6b:81:1e:95:37:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
Validity
Not Before: Aug 21 23:01:02 2026 GMT
Not After : Aug 22 23:01:02 2026 GMT
Subject: CN=6c71443e4cbe85d5053703723248e6a0adde84e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:a6:53:23:8c:7a:90:1a:1e:bc:4f:99:ce:
04:3c:74:76:d9:42:4e:05:50:52:5c:af:40:99:ba:
32:76:6d:87:38:5d:98:ec:3a:ec:62:73:c9:71:04:
5c:59:f1:52:56:65:89:f3:37:1c:52:b8:4d:4c:0f:
76:87:4f:fb:b3:c6:8e:dc:93:6e:3e:80:3a:6b:0f:
49:c3:50:47:c0:92:dc:d9:0d:36:13:69:63:ca:3b:
30:e0:b2:92:ab:27:c4:bd:3b:94:fc:f7:09:56:0a:
12:a1:f4:9c:ae:87:e4:8c:63:a5:bb:86:e5:b5:85:
95:a7:ea:05:92:b6:2e:37:b2:06:3c:50:2e:7a:77:
0f:37:ba:67:f8:23:a3:28:bb:05:21:04:91:4a:9c:
c1:07:70:de:be:1b:2e:80:bf:2a:97:da:0a:df:33:
7c:50:2c:00:13:fe:e2:0b:70:de:0e:94:5d:27:08:
31:e7:e6:98:e2:a6:bd:76:8e:af:d1:6d:2f:e8:25:
3d:af:3f:47:36:7f:98:96:f0:0a:43:e3:89:e1:47:
58:71:d1:aa:9d:ad:46:7a:c0:fe:95:31:91:52:55:
0d:2b:85:7a:97:61:bd:a0:dd:3a:55:7b:1b:b4:ec:
e3:20:8c:9d:8a:6d:6a:c8:e3:d4:f5:4d:e3:b8:7e:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:71:44:3E:4C:BE:85:D5:05:37:03:72:32:48:E6:A0:AD:DE:84:E7
X509v3 Authority Key Identifier:
keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:70:c0:61:54:36:37:a7:49:84:2d:4f:0a:d6:24:81:f9:70:
4d:95:48:8f:0e:b9:e6:69:e9:dc:f2:f1:4f:b9:2b:38:90:63:
2c:31:0b:4a:f6:da:57:81:65:d7:f1:20:4b:46:45:c4:72:87:
bf:4d:de:e3:a1:fa:ec:26:17:78:66:7a:a2:30:98:69:19:58:
ad:5d:d1:da:3f:09:d2:0b:92:09:99:a3:e1:e8:ca:e6:31:c6:
7c:d1:11:35:d9:2a:62:2c:2c:ce:0c:0e:57:98:64:65:95:ac:
79:6d:0b:ac:4a:31:12:2b:6c:2c:54:f9:6e:aa:3e:c7:45:6d:
db:06:1c:d0:6b:34:85:9b:5c:65:63:2f:4f:0f:80:c4:35:1b:
7d:6d:06:a8:37:cd:cd:cb:96:b4:a6:3c:4b:9e:20:af:01:84:
98:06:b7:c9:a7:43:4d:4b:56:0c:0e:41:3c:fb:28:e5:6e:51:
f4:ba:f3:7b:b4:65:68:ff:49:9b:7e:fc:8b:a5:8f:8d:60:ad:
ac:fa:2a:77:09:5e:44:80:82:12:1e:6f:a5:ee:1f:ef:98:ac:
fa:35:70:f8:ec:9e:fb:57:08:1e:e7:47:4a:24:2c:b6:61:1b:
c1:bd:fd:85:7f:c2:f8:24:09:7a:aa:20:b0:fc:0d:af:1e:e4:
30:e1:98:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:04:40 2026 by rpki-client