Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier: NXFtlDR7xpgyOzIgDnwSJcy91Kcw5DlqjQ1Bseanktc=
Subject key identifier: 25:DF:46:A6:E1:15:14:AF:BE:B7:6E:BA:EC:AE:E9:3F:02:31:AB:A7
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 019F1943E4375CAEA937134A00899D518A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number: 1521
Signing time: Tue 30 Jun 2026 16:01:47 +0000
Manifest this update: Tue 30 Jun 2026 16:01:47 +0000
Manifest next update: Wed 01 Jul 2026 16:01:47 +0000
Files and hashes: 1: VYI9qa8JCE6VkIqD0V54pQu3Jdo.roa (hash: pJTrpDe7OIckvsF3AmZnqqPmgPvtyMz/7jk3tJQykek=)
2: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: 3RC1a+LcPAbzl5E4im/Mg7CKbNfCzGFLLJMGZxOvpgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 16:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:e4:37:5c:ae:a9:37:13:4a:00:89:9d:51:8a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: Jun 30 16:01:47 2026 GMT
Not After : Jul 1 16:01:47 2026 GMT
Subject: CN=25df46a6e11514afbeb76ebaecaee93f0231aba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:98:25:1e:e7:e2:1b:90:fa:9f:a0:96:29:
63:09:9b:2f:c3:2b:9e:04:1e:48:d2:6e:65:48:85:
4a:97:d3:b4:b1:62:9d:ea:5e:05:33:ed:a0:5d:61:
d0:77:bf:61:e4:47:f0:93:01:4f:4c:2a:be:c5:79:
c8:38:e5:94:67:ca:d0:09:eb:2e:9b:2c:db:20:b0:
af:51:80:cd:a4:e2:21:99:e2:12:3a:6e:74:b3:58:
be:76:c6:ab:06:bf:ad:a3:a4:36:00:24:75:d5:e0:
39:3c:51:53:45:90:5d:10:d5:19:f8:33:0b:1b:0b:
45:96:4e:f8:d1:d8:0b:db:b5:2c:ce:3d:a4:a2:ae:
ed:47:7f:c7:51:c8:00:00:77:3d:81:ec:5d:68:59:
7a:74:df:8f:e0:87:3e:a3:47:19:eb:87:64:19:a2:
54:be:ab:70:2a:64:a2:34:85:fd:9e:5a:26:f4:f9:
08:71:68:fc:6c:2e:8b:65:2b:85:54:94:a4:94:11:
c1:66:44:fd:d1:27:12:d4:92:38:66:26:93:af:70:
c9:e8:ec:8f:79:a1:c8:e7:e3:f5:e9:04:fc:4b:d5:
73:07:62:c6:a9:9f:2d:18:cd:1e:ff:0d:31:fc:6e:
16:86:ad:27:fb:99:61:39:3b:5a:c9:f4:00:dd:e0:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DF:46:A6:E1:15:14:AF:BE:B7:6E:BA:EC:AE:E9:3F:02:31:AB:A7
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8f:64:55:0f:50:17:b6:65:96:0c:c5:55:9e:92:67:99:af:
2c:cc:8c:b5:4d:7d:09:88:11:88:47:3a:4f:46:6b:89:66:1f:
8b:70:f2:37:33:b1:4d:19:28:40:54:40:e2:0b:f4:0a:0e:62:
75:ca:89:a9:cc:60:0f:e8:a6:e5:a1:45:7b:2a:e0:23:21:c6:
5b:c1:2c:85:9d:7c:1e:4a:1e:b8:0d:32:ed:e5:0d:47:8a:63:
f8:01:75:5e:39:13:a2:91:71:f2:8c:f2:5d:5a:08:cb:2f:67:
b0:aa:a7:2e:7d:b7:b8:a6:07:8e:0c:8a:06:12:39:cd:1d:92:
6e:ca:41:c3:f0:f7:56:c6:47:54:38:30:1a:0f:76:69:ad:99:
48:be:e4:76:47:47:63:93:e1:12:74:80:32:e0:6b:42:9d:82:
6a:81:8a:13:f1:bf:56:b2:db:ce:a8:ab:ad:dd:e3:f2:ab:7d:
92:2c:b2:bc:67:53:89:cd:d4:82:d2:da:4f:fc:1c:22:03:fb:
cf:35:88:de:70:21:f1:bb:83:d1:90:45:5d:14:35:74:ae:fe:
9d:3d:1e:e9:75:0d:cd:11:e8:b5:76:bf:5d:4d:14:ed:34:a7:
ac:4b:0b:53:8f:5b:bb:e8:e7:cc:a9:a1:dc:a3:46:00:82:53:
c6:c8:16:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:37:42 2026 by rpki-client