Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
File: lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json)
Hash identifier: fyWttK/dpTVPLQYk6ALXZiL+jJzrxiNQonH3ambV2Z0=
Subject key identifier: 7E:DD:E0:5C:40:65:9F:89:E7:26:F0:6B:AF:A3:48:09:C1:10:A0:C8
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Certificate issuer: /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial: 019D39E5B9AD002376DF13A4D10A16A90944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
Manifest number: 0FDA
Signing time: Sun 29 Mar 2026 14:00:49 +0000
Manifest this update: Sun 29 Mar 2026 14:00:49 +0000
Manifest next update: Mon 30 Mar 2026 14:00:49 +0000
Files and hashes: 1: hpL47SCSZrlNealKIc7LnC9PZp0.roa (hash: aYpQwmMiUXEwJ5X39H8U0kkfHeCdBOKpUZxQ3nISq/k=)
2: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: cykZ6wT50ZWL4z4ttqLwfI4f5xliVkHKDPB2GiTiL+g=)
3: pw0RXXsD6LUrqOPEq8MgqL2qpD0.roa (hash: 917pV46CquJ4To8++B0OiVsGyf2fknUas8X+vyjzrnQ=)
4: uW3Eqs7Ri1lpnJVP-zAoNcXwTHM.roa (hash: /f9zR5HqJoOd5VfNKyewt9lLgfvwRHYV5D7mc7m8SfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:b9:ad:00:23:76:df:13:a4:d1:0a:16:a9:09:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Validity
Not Before: Mar 29 14:00:49 2026 GMT
Not After : Mar 30 14:00:49 2026 GMT
Subject: CN=7edde05c40659f89e726f06bafa34809c110a0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:6b:a8:7f:b0:44:bc:32:82:e4:f5:b3:49:
fa:da:e2:c3:0a:73:67:7e:3a:87:60:6c:d4:15:ac:
6a:e1:5e:47:cc:08:d0:3f:9c:dc:21:07:be:0f:d2:
fc:31:5a:f9:9d:cd:02:25:c2:bc:33:e6:d1:5b:0c:
6f:eb:a5:02:ba:8d:ce:45:b1:cd:ca:94:cb:c9:cb:
62:d0:5a:2c:6d:6a:75:98:de:18:9a:26:8b:f3:56:
05:0a:d3:a9:5b:1d:37:bb:a5:bb:59:ee:28:c8:6a:
73:9b:7a:2f:d5:ff:24:e0:35:02:fb:f6:5d:a9:3c:
06:4f:ba:78:3b:df:0c:25:5d:97:53:be:4e:d1:09:
e7:6d:1e:57:bf:96:8a:9d:b8:62:62:b2:28:9c:e3:
0c:d9:21:0c:bf:f3:a2:12:6b:5f:c4:50:45:41:aa:
ea:65:aa:bf:02:57:61:ba:a9:50:a9:0f:85:d0:d9:
cd:e1:fd:bc:8b:8c:9f:a8:98:47:92:0c:8f:cb:c5:
6b:b9:31:c2:81:33:34:0c:b6:9d:b0:b6:7a:46:36:
bc:c5:8b:45:dd:53:0b:c8:c3:ce:a9:b4:c0:93:0d:
2e:02:5a:91:d4:37:63:2f:82:00:c1:50:81:f3:b0:
3a:48:67:aa:9f:40:95:95:85:22:8e:4e:d3:32:da:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DD:E0:5C:40:65:9F:89:E7:26:F0:6B:AF:A3:48:09:C1:10:A0:C8
X509v3 Authority Key Identifier:
keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:be:db:5f:6f:d7:8a:9f:9c:c6:ff:17:85:c4:01:a4:ca:5d:
40:e8:bd:7f:b2:f4:32:27:fa:e8:ed:38:4d:fa:4d:59:66:8a:
07:f0:e7:79:97:27:c5:c4:22:27:f4:ad:d2:32:04:b0:38:04:
4b:c7:52:f9:3c:40:df:0c:ff:f8:94:af:45:6a:28:a6:e7:9e:
d8:f7:93:53:70:3b:f7:bb:c3:6a:ce:7b:2b:74:05:76:ca:31:
9a:80:5a:e5:85:26:d7:b6:7c:07:11:35:73:bd:e5:24:8e:b2:
a3:d6:22:14:be:97:d3:b6:c9:19:67:64:00:82:47:86:b4:4c:
a9:fc:b2:b9:d5:92:4b:d1:51:54:87:c8:b3:ae:92:2f:96:63:
32:06:ef:df:2d:19:d6:d8:53:ac:b5:a8:65:f6:f4:da:4f:7d:
b1:2c:b2:e3:3f:fb:be:94:50:ac:93:9d:6d:0e:33:3f:05:49:
a6:7d:ee:ed:eb:85:d3:ef:db:d7:ef:7a:1d:16:ed:38:1e:2c:
ed:53:33:65:2f:14:72:dd:1d:75:a8:3b:c6:48:52:5f:cb:c5:
26:76:e3:ba:d3:c0:c7:f9:e1:4a:02:70:1b:d2:25:04:97:d7:
70:c8:33:ed:36:04:16:dd:73:84:f9:78:cc:1e:ba:c2:18:f1:
8d:b7:e1:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055bmtACN23xOk0QoWqQlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZmY0NWU2ZGU0OGJmYzAzOTdkYWNhZDgzYTg0ODMxZGI3
OTUyZDEwHhcNMjYwMzI5MTQwMDQ5WhcNMjYwMzMwMTQwMDQ5WjAzMTEwLwYDVQQD
Eyg3ZWRkZTA1YzQwNjU5Zjg5ZTcyNmYwNmJhZmEzNDgwOWMxMTBhMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GRrqH+wRLwyguT1s0n62uLDCnNn
fjqHYGzUFaxq4V5HzAjQP5zcIQe+D9L8MVr5nc0CJcK8M+bRWwxv66UCuo3ORbHN
ypTLycti0FosbWp1mN4YmiaL81YFCtOpWx03u6W7We4oyGpzm3ov1f8k4DUC+/Zd
qTwGT7p4O98MJV2XU75O0QnnbR5Xv5aKnbhiYrIonOMM2SEMv/OiEmtfxFBFQarq
Zaq/AldhuqlQqQ+F0NnN4f28i4yfqJhHkgyPy8VruTHCgTM0DLadsLZ6Rja8xYtF
3VMLyMPOqbTAkw0uAlqR1DdjL4IAwVCB87A6SGeqn0CVlYUijk7TMtpHxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7d4FxAZZ+J5ybwa6+jSAnBEKDIMB8GA1UdIwQY
MBaAFJb/RebeSL/AOX2srYOoSDHbeVLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82YzdiMjgtZjJjZS00NDVmLThmOTAt
MGY1ZDM3OTdhMzI1LzEvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS82YzdiMjgtZjJjZS00NDVmLThmOTAtMGY1ZDM3OTdhMzI1
LzEvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJL7bX2/X
ip+cxv8XhcQBpMpdQOi9f7L0Mif66O04TfpNWWaKB/DneZcnxcQiJ/St0jIEsDgE
S8dS+TxA3wz/+JSvRWoopuee2PeTU3A797vDas57K3QFdsoxmoBa5YUm17Z8BxE1
c73lJI6yo9YiFL6X07bJGWdkAIJHhrRMqfyyudWSS9FRVIfIs66SL5ZjMgbv3y0Z
1thTrLWoZfb02k99sSyy4z/7vpRQrJOdbQ4zPwVJpn3u7euF0+/b1+96HRbtOB4s
7VMzZS8Uct0ddag7xkhSX8vFJnbjutPAx/nhSgJwG9IlBJfXcMgz7TYEFt1zhPl4
zB66whjxjbfhAQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:59:45 2026 by rpki-client