Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier: HnA1q40uz9qqevFCuFItSn/F47wYD/76JFx9lfZ+Hd0=
Subject key identifier: 3D:91:E6:1F:69:DD:75:01:9B:C3:87:34:0F:8B:9C:39:5A:4A:2B:16
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 019E31854299EA6662DF8B75ADE7CF48D1AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number: 14A9
Signing time: Sat 16 May 2026 16:01:17 +0000
Manifest this update: Sat 16 May 2026 16:01:17 +0000
Manifest next update: Sun 17 May 2026 16:01:17 +0000
Files and hashes: 1: VYI9qa8JCE6VkIqD0V54pQu3Jdo.roa (hash: pJTrpDe7OIckvsF3AmZnqqPmgPvtyMz/7jk3tJQykek=)
2: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: j1Lwqm/kfDQ4mwCZYcAiTxox3HgpiRcOOoTcQ6QhXQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:42:99:ea:66:62:df:8b:75:ad:e7:cf:48:d1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: May 16 16:01:17 2026 GMT
Not After : May 17 16:01:17 2026 GMT
Subject: CN=3d91e61f69dd75019bc387340f8b9c395a4a2b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:93:6a:67:e9:86:16:f9:a9:83:a3:37:27:f9:
f1:43:4a:ce:fa:14:6f:55:66:b2:1b:bd:ad:dd:7c:
9f:0d:97:84:fd:ac:fd:c8:72:b9:67:63:a6:87:44:
51:4f:2d:f5:ff:d6:35:56:8f:9d:bb:27:41:8f:48:
b2:d6:03:db:d8:d2:15:e9:52:66:11:c6:69:04:10:
d2:34:31:95:6f:7c:ff:cb:16:06:88:e1:bc:ec:7e:
da:f4:12:3d:36:de:b8:45:c3:0a:34:0e:71:63:4e:
b5:cd:e6:36:1c:bb:54:09:dc:41:fb:18:29:48:50:
eb:d6:32:29:98:a3:f8:89:be:24:24:a9:fc:eb:77:
85:a6:90:a4:ff:7a:48:1f:4f:43:d0:88:ac:94:43:
52:17:4c:e1:7a:a8:0c:25:be:a1:ea:a3:22:42:ca:
80:08:3e:08:57:59:a2:ed:6f:d6:fb:8b:30:e3:59:
c8:a4:82:c5:32:17:07:4f:1b:66:dd:5a:4b:4f:31:
22:8e:aa:31:66:ab:49:e5:e8:3e:36:3d:5b:7b:58:
09:07:cc:0a:bf:24:85:96:8b:d2:ad:a8:7d:4f:28:
aa:fb:c5:dc:2b:22:1b:05:21:4a:0d:54:37:fa:e1:
3b:f6:88:9b:cf:30:1c:c1:c8:09:42:a2:cd:90:54:
e8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:91:E6:1F:69:DD:75:01:9B:C3:87:34:0F:8B:9C:39:5A:4A:2B:16
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8c:72:c9:14:dc:23:e8:f8:d7:dd:fd:5a:36:ef:f2:1b:23:
81:91:8f:b4:3c:48:61:a4:e3:f0:44:68:0a:c6:67:10:ba:bc:
01:a5:0b:76:2e:ac:d9:ef:5c:11:78:4f:70:6e:9b:30:ff:e1:
35:48:f5:e9:03:44:fb:61:fb:1d:d5:e7:5d:22:82:94:49:1f:
fe:4a:b7:51:95:df:c8:ee:ba:da:dc:38:54:83:e0:ce:55:a9:
6d:49:34:e5:36:3d:f1:f9:3b:df:2b:7b:6c:1d:ba:be:2d:1e:
ff:83:54:1c:7f:dd:4d:db:82:76:64:a1:2a:cd:08:96:f2:25:
0d:56:36:ea:81:20:84:f3:11:09:cc:08:cf:fd:91:0b:20:a0:
9c:75:5f:41:3d:11:ce:06:7e:9a:d1:c3:9d:73:5a:1c:9a:41:
95:fc:b9:b1:04:7e:ac:1b:57:d2:52:04:18:5c:d3:c9:b6:55:
91:b4:31:b7:9f:30:e4:cf:3b:14:32:1b:44:18:18:07:4a:c6:
b5:12:e0:3b:09:85:58:82:25:53:a7:76:20:c6:1f:20:79:58:
09:0c:d0:53:bf:55:31:31:fd:db:c2:78:74:73:af:9c:44:7a:
e1:a3:2b:9a:67:01:91:63:54:6d:2f:1e:b9:8f:6c:35:01:bb:
b2:f0:18:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhUKZ6mZi34t1refPSNGvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZjgwOTYxMzg3N2RlYWI4NzRhOTQwMWQxNTZkYjE0ZmY0
ZDI4MTQwHhcNMjYwNTE2MTYwMTE3WhcNMjYwNTE3MTYwMTE3WjAzMTEwLwYDVQQD
EygzZDkxZTYxZjY5ZGQ3NTAxOWJjMzg3MzQwZjhiOWMzOTVhNGEyYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpNqZ+mGFvmpg6M3J/nxQ0rO+hRv
VWayG72t3XyfDZeE/az9yHK5Z2Omh0RRTy31/9Y1Vo+duydBj0iy1gPb2NIV6VJm
EcZpBBDSNDGVb3z/yxYGiOG87H7a9BI9Nt64RcMKNA5xY061zeY2HLtUCdxB+xgp
SFDr1jIpmKP4ib4kJKn863eFppCk/3pIH09D0IislENSF0zheqgMJb6h6qMiQsqA
CD4IV1mi7W/W+4sw41nIpILFMhcHTxtm3VpLTzEijqoxZqtJ5eg+Nj1be1gJB8wK
vySFlovSrah9Tyiq+8XcKyIbBSFKDVQ3+uE79oibzzAcwcgJQqLNkFTo0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2R5h9p3XUBm8OHNA+LnDlaSisWMB8GA1UdIwQY
MBaAFJb4CWE4d96rh0qUAdFW2xT/TSgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hZDI3ODItZjUzYS00YmI0LWI4ZDct
NjQ2NmQ0ODM0NTljLzEvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hZDI3ODItZjUzYS00YmI0LWI4ZDctNjQ2NmQ0ODM0NTlj
LzEvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooxyyRTc
I+j41939Wjbv8hsjgZGPtDxIYaTj8ERoCsZnELq8AaULdi6s2e9cEXhPcG6bMP/h
NUj16QNE+2H7HdXnXSKClEkf/kq3UZXfyO662tw4VIPgzlWpbUk05TY98fk73yt7
bB26vi0e/4NUHH/dTduCdmShKs0IlvIlDVY26oEghPMRCcwIz/2RCyCgnHVfQT0R
zgZ+mtHDnXNaHJpBlfy5sQR+rBtX0lIEGFzTybZVkbQxt58w5M87FDIbRBgYB0rG
tRLgOwmFWIIlU6d2IMYfIHlYCQzQU79VMTH928J4dHOvnER64aMrmmcBkWNUbS8e
uY9sNQG7svAYVg==
-----END CERTIFICATE-----
Generated at Sun May 17 01:08:02 2026 by rpki-client