Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: gSNwwpYwjRoVMDZ/OiPoWdO25k+ZLNlGPvrk2JOa9Y0=
Subject key identifier: 09:BE:EF:78:E9:77:89:8B:CE:D9:51:F0:28:E6:CD:BC:E0:B9:C0:FE
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 019FAB640299BBBC4DA34B8DEB9B04F695EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 082D
Signing time: Wed 29 Jul 2026 01:01:25 +0000
Manifest this update: Wed 29 Jul 2026 01:01:25 +0000
Manifest next update: Thu 30 Jul 2026 01:01:25 +0000
Files and hashes: 1: 9lZ-yzBoTL2Q3tEfTGvAJ31AkaI.roa (hash: mZ5mTYqzMf+60QDXA/A80xWmGAZGWKbUo1eAsowQ3Ow=)
2: Yha1UjCg0bYTT2iIVJMZtFAgxEU.roa (hash: dVgYPXPBCxJJox+uQJ6Z0WgrgA/2WvOp6YXY7a/W6os=)
3: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: ur0097rRYccsauBU4NY+lPpoE6iDUXO0N0+YiSguRFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:64:02:99:bb:bc:4d:a3:4b:8d:eb:9b:04:f6:95:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Jul 29 01:01:25 2026 GMT
Not After : Jul 30 01:01:25 2026 GMT
Subject: CN=09beef78e977898bced951f028e6cdbce0b9c0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bb:1b:41:9b:82:52:81:2f:47:78:55:5c:f0:
9e:86:86:10:a9:11:86:a7:87:8f:00:14:24:b1:12:
d8:dc:d7:b7:28:ba:64:e2:93:77:97:83:3a:be:ab:
c9:9c:64:c3:a1:b8:93:34:62:bd:55:40:b2:28:37:
d8:40:4c:65:cc:41:68:ff:58:7c:03:54:b4:05:77:
b6:da:b8:b0:21:e4:a4:f8:91:cc:2c:60:54:e0:fd:
74:ac:28:d0:26:49:76:06:1f:14:07:5b:8a:73:46:
e7:c0:5b:ab:ae:ae:a1:d6:b8:7b:16:81:23:6a:2b:
6c:ae:56:b6:9d:12:83:f1:0a:a4:3b:5a:6c:a6:87:
4f:d8:31:0f:a6:e8:f5:2d:ef:4a:c5:7d:2d:c4:67:
34:0e:86:1c:f4:ca:35:82:3b:83:65:79:d2:bf:95:
73:62:70:a9:79:e7:9e:cd:37:d3:17:42:2b:e7:11:
dc:83:0d:66:62:ba:2a:ae:eb:2d:28:f5:19:b4:57:
c1:c3:9f:f0:77:92:65:6d:a4:c6:5b:85:ef:62:19:
08:80:b9:ae:54:38:25:e3:67:32:95:63:34:24:3e:
b0:1a:0a:5d:ac:00:ef:46:fc:22:11:d8:b1:6a:72:
a7:95:88:d2:f9:3e:ba:09:6f:8c:06:ea:6a:90:13:
99:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BE:EF:78:E9:77:89:8B:CE:D9:51:F0:28:E6:CD:BC:E0:B9:C0:FE
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:75:39:bc:79:5d:98:1e:06:32:5c:dd:be:d2:53:c5:a8:5d:
c9:be:6f:6b:12:6a:a2:9a:00:9f:2a:41:b9:75:90:ed:06:ed:
df:59:9e:5a:d1:f1:a7:9e:aa:f2:ec:40:c3:e6:ca:d5:fa:68:
32:3e:2c:bb:89:b2:19:79:2c:2d:81:19:1f:fb:a3:1c:8e:51:
fc:07:cc:66:f5:4a:6c:ff:15:58:00:c4:8c:5c:be:a8:0c:af:
27:10:4a:65:7c:89:13:a5:31:ae:80:61:fc:3c:a5:61:22:6a:
b7:a6:d2:78:b4:dd:80:41:be:a9:2f:53:31:ff:94:a6:10:07:
37:f1:cb:db:d4:50:21:e7:de:78:bb:5a:4a:05:2f:8c:82:e1:
28:f3:58:61:7a:46:0b:be:a1:71:ca:f5:83:51:a7:97:78:1e:
33:0a:fb:eb:d6:6f:4a:a2:41:8e:ed:3e:ea:95:54:5a:b5:87:
5c:7b:1b:26:05:09:6b:c3:99:92:e4:55:53:6a:c7:fa:e6:3b:
11:26:41:e6:9a:93:ba:82:1d:94:dc:31:d0:83:e0:93:56:05:
bb:53:97:bf:c2:0b:fc:3c:bd:d1:62:f4:48:af:71:7b:1c:70:
f6:46:6d:c0:d1:8f:ae:c8:69:9f:29:e7:15:84:e9:1a:78:57:
93:b7:11:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:13:09 2026 by rpki-client