Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier: qA52YgBQELTFbAm7RpciKZTAuBmGlwueCHlxNd3Mp8w=
Subject key identifier: F2:54:8E:A7:C3:98:10:F7:E6:08:E9:06:1D:71:0C:A3:69:BC:CF:2E
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial: 01A0859D5C973F5046F47F51A03AAC68397F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number: 1477
Signing time: Wed 09 Sep 2026 10:01:17 +0000
Manifest this update: Wed 09 Sep 2026 10:01:17 +0000
Manifest next update: Thu 10 Sep 2026 10:01:17 +0000
Files and hashes: 1: MxY3wYjJf-HzpELgQOqWr-CuO5k.roa (hash: esg/AqYi4A1ugA5X6Pi57Y+6AvgsMKQZF7yVPFwOVOY=)
2: ha3A5YiON6pwuQbKycX4Nu-iCJU.roa (hash: /mkj5tkVuu0LcdOKt7MFz4DExlQhsM54fwEEAhXdQGE=)
3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: 9urTqr0m+wMYoogZX1r8Ka8qrvI/rX/XGSdgfbSBVwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:9d:5c:97:3f:50:46:f4:7f:51:a0:3a:ac:68:39:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Validity
Not Before: Sep 9 10:01:17 2026 GMT
Not After : Sep 10 10:01:17 2026 GMT
Subject: CN=f2548ea7c39810f7e608e9061d710ca369bccf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2f:47:c2:64:05:99:b6:8c:6d:b1:4f:c7:14:
c5:ad:a1:82:db:4b:fb:7c:1e:e4:b6:bd:55:c2:ee:
15:8d:d7:20:20:fb:d1:5a:88:6d:fa:57:44:08:35:
ae:d8:ba:39:90:d9:f4:0c:a5:ed:da:6d:cc:e8:07:
33:d3:79:c4:4f:fc:7b:cb:0e:92:ef:0b:5c:a4:24:
7c:59:46:a5:27:28:29:e9:c3:ec:e0:aa:a3:6a:cd:
c2:e4:1a:f0:5b:1c:ed:7a:c9:03:c2:57:3d:4c:b4:
b2:55:e8:65:65:76:0f:76:98:0c:f1:05:dc:7f:33:
41:cf:8f:82:4d:76:83:ad:db:bc:33:35:43:2c:05:
b4:20:64:04:40:fc:8c:d1:9c:4f:fb:b3:b2:be:2a:
6e:4a:21:1d:ad:87:6e:6a:49:ce:61:58:d0:28:32:
7d:84:07:01:a1:19:d0:8f:0a:49:d5:84:45:f9:bd:
c1:3e:17:db:2f:a8:d4:06:b8:62:35:67:20:f3:ea:
34:6c:dd:ad:ee:fd:f5:88:5c:52:d4:0f:b5:e2:ef:
54:2e:3c:a3:7f:ad:3d:07:ee:61:94:8f:aa:44:96:
3b:11:65:2e:07:f3:b8:bd:98:8d:5e:bb:21:8f:db:
e8:3d:c0:24:0b:23:bc:d5:34:d1:05:78:b7:a6:c4:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:54:8E:A7:C3:98:10:F7:E6:08:E9:06:1D:71:0C:A3:69:BC:CF:2E
X509v3 Authority Key Identifier:
keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cb:ef:6c:5d:e9:d6:4d:29:6d:55:c6:78:13:3e:a9:44:22:
ff:e2:29:82:96:5d:0b:94:03:16:cb:9b:b6:1c:7a:83:f7:09:
21:19:32:00:1d:01:0d:9a:cf:22:bf:54:56:52:e5:6d:99:19:
a2:9d:3f:70:8f:75:9a:ab:e1:98:74:b3:2d:76:9b:e7:0f:33:
2f:10:85:44:df:9d:84:9a:34:46:3f:a9:82:2b:72:cd:4d:98:
cf:92:e1:e5:22:93:52:f4:d8:7e:e1:f9:95:12:eb:c9:7e:ae:
26:13:c8:2c:1a:7c:0d:11:d2:be:99:95:70:58:fc:fa:c6:c7:
7a:64:4e:21:23:3b:bd:5f:40:ff:0e:9d:78:8d:b1:f3:49:e8:
6c:d9:a8:db:ee:63:39:dd:d5:c6:b7:44:48:88:cb:3d:58:ee:
41:2d:67:b2:1d:70:ff:83:bd:66:8d:ca:91:bf:8a:9a:a0:0a:
54:93:95:47:e9:3b:fa:40:6e:46:97:f8:2b:ee:7d:bd:f8:34:
47:1b:48:d4:1f:12:01:ff:93:45:2d:52:f3:ec:c2:08:ae:e9:
e4:14:08:20:9c:fb:de:d2:91:24:de:bf:08:b5:eb:ad:fa:22:
45:ff:9f:74:09:25:5c:a9:5c:be:c1:ed:98:00:e4:54:14:83:
1a:d7:15:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 21:29:50 2026 by rpki-client