Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
File: lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft (raw, json)
Hash identifier: PbnkHc4FmJJ9nf0mpMflEL3K7radxWri4NsBOZ6bh7o=
Subject key identifier: 4D:36:19:90:3D:5D:21:AD:EC:87:C8:87:90:26:E2:24:CA:40:9D:5B
Authority key identifier: 96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
Certificate issuer: /CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Certificate serial: 019D38D39CDBB363FFC0B11A722A9464251D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
Manifest number: 0759
Signing time: Sun 29 Mar 2026 09:01:25 +0000
Manifest this update: Sun 29 Mar 2026 09:01:25 +0000
Manifest next update: Mon 30 Mar 2026 09:01:25 +0000
Files and hashes: 1: lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl (hash: ElmtpFyb6OgyPVU5XcpMVHWK/lZdDJLsQyCD7eQK348=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9c:db:b3:63:ff:c0:b1:1a:72:2a:94:64:25:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Validity
Not Before: Mar 29 09:01:25 2026 GMT
Not After : Mar 30 09:01:25 2026 GMT
Subject: CN=4d3619903d5d21adec87c8879026e224ca409d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:d9:28:ae:be:30:01:17:64:52:99:66:b8:
b4:7b:49:ad:6b:e9:12:ec:5a:29:24:e9:63:0c:ce:
45:0d:40:8d:fc:cb:51:b3:b5:83:ed:83:7f:3f:2b:
33:c6:62:81:90:89:20:98:36:4f:33:ab:27:75:da:
61:00:5f:97:76:33:44:89:91:ac:ee:3c:e7:d3:42:
06:ef:38:3c:f7:15:a2:4a:fe:03:37:b2:9a:6a:bd:
d2:6d:b0:b7:4a:b1:52:b1:c3:24:44:92:7b:79:1a:
39:f0:83:fa:95:b5:25:18:be:fb:2f:05:98:d6:81:
0d:3f:60:51:a2:dd:99:de:57:66:de:22:90:0e:ac:
40:c5:e6:14:25:75:a3:ab:e7:57:62:1d:5d:f6:d0:
85:5c:cf:a2:4f:b5:3a:78:34:ac:09:f2:83:a2:78:
8e:1e:40:c5:5f:d7:4c:33:35:70:4c:bc:0b:20:cb:
53:32:aa:7d:5b:9f:0b:03:e4:65:0e:b3:f0:0d:97:
7b:a3:04:94:7b:ae:2f:d1:21:6b:8d:ec:df:53:59:
fa:68:e4:90:1a:99:01:27:23:69:d2:2d:f6:b5:57:
72:85:df:70:27:e9:17:7b:4b:19:04:d1:22:5d:90:
b9:fb:ce:d8:b1:ad:42:8c:88:71:e1:59:e3:ab:b5:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:36:19:90:3D:5D:21:AD:EC:87:C8:87:90:26:E2:24:CA:40:9D:5B
X509v3 Authority Key Identifier:
keyid:96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:81:3d:7c:ec:05:c9:67:4f:d8:8f:13:06:3f:e2:48:d0:2d:
af:9c:5f:ce:87:95:b5:3f:19:79:31:01:fd:c0:17:bd:1d:c9:
df:23:fb:aa:d3:73:8f:08:68:ae:77:1d:9c:1d:63:38:1a:7f:
66:49:6c:73:87:6b:d2:9c:31:da:e7:47:37:ac:93:7e:69:e3:
7e:9a:78:b4:13:1b:a1:48:ec:0b:03:c6:e8:b9:12:d1:35:30:
8b:06:6f:04:06:4e:de:28:b0:5e:3c:96:43:9e:5b:c4:38:3b:
14:73:d9:e2:19:4a:78:bf:d9:39:da:24:f2:f1:7a:d0:b4:9e:
c7:db:b7:45:7b:27:39:9f:60:ce:86:dd:25:54:96:61:b3:2e:
4a:77:93:74:e4:54:08:45:c4:04:20:c8:28:60:72:e7:a5:59:
c3:1f:7d:5f:3f:6a:3e:1b:b3:61:0d:2d:c7:37:06:4e:33:fb:
62:93:b2:af:ad:21:f9:f5:80:93:80:5a:6b:08:aa:4b:ad:19:
97:ff:92:69:63:c3:aa:3f:ed:a8:4a:5d:4b:74:0b:c0:f4:07:
91:4e:e7:af:81:2e:3e:23:d0:96:d9:b8:fd:92:e6:34:d7:2e:
9a:3e:ce:a0:84:fd:4c:3a:c7:8a:97:a6:a8:41:93:26:bd:d6:
2e:83:78:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:45 2026 by rpki-client