Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: XqS2lWlxccvXT3UxQ6VywK+6F6xaeuyuY+SVl8ASNCo=
Subject key identifier: 6A:B4:6E:E5:0C:1F:7E:6D:73:E6:78:DD:32:1E:9A:EA:78:8C:99:4F
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 01A0DC847171E96842BFCE4321B1AA9FE8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 08CB
Signing time: Sat 26 Sep 2026 07:01:02 +0000
Manifest this update: Sat 26 Sep 2026 07:01:02 +0000
Manifest next update: Sun 27 Sep 2026 07:01:02 +0000
Files and hashes: 1: 9lZ-yzBoTL2Q3tEfTGvAJ31AkaI.roa (hash: mZ5mTYqzMf+60QDXA/A80xWmGAZGWKbUo1eAsowQ3Ow=)
2: Yha1UjCg0bYTT2iIVJMZtFAgxEU.roa (hash: dVgYPXPBCxJJox+uQJ6Z0WgrgA/2WvOp6YXY7a/W6os=)
3: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: oV/2AAWgV0GI+3dRiqcC4iWBwcoMaMarFde/sXfbg/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:71:71:e9:68:42:bf:ce:43:21:b1:aa:9f:e8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Sep 26 07:01:02 2026 GMT
Not After : Sep 27 07:01:02 2026 GMT
Subject: CN=6ab46ee50c1f7e6d73e678dd321e9aea788c994f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:13:3b:92:96:37:bc:98:2c:bf:c7:89:28:85:
b4:3e:3a:a7:06:75:9f:8e:dc:9f:2e:c3:07:d6:4c:
fc:b6:2f:2e:d3:9f:cf:a5:a5:f2:2f:c2:e8:8d:cd:
a6:80:48:2d:9d:01:cf:4b:5f:6c:83:74:1c:40:32:
49:7b:d5:36:58:71:e9:1b:a4:35:7e:12:03:f5:38:
28:f5:23:29:79:15:9a:14:02:8d:2a:84:49:3f:64:
b7:b8:52:05:76:06:ac:d7:df:6b:fa:39:a6:39:79:
cb:63:bb:b8:b5:b9:99:52:97:9c:bb:df:e9:ec:f1:
f9:b4:27:97:f8:42:3b:7b:87:3b:63:60:27:bd:e1:
ea:3e:7f:05:fc:f7:73:8a:f4:14:89:8f:8b:89:2b:
70:41:b0:0b:3c:a6:eb:6e:7c:24:4d:73:10:af:d3:
c6:ee:d6:fc:59:53:a6:54:14:80:41:16:bd:0c:15:
3d:ca:4f:d8:c2:63:cc:8d:42:7d:f5:79:bc:50:74:
bf:d6:f9:cd:aa:96:94:2b:d7:1d:65:e0:3a:69:fb:
92:55:4b:ed:d0:e5:04:49:14:ea:9d:12:e8:f1:6e:
59:89:ba:44:65:ef:11:2f:79:a9:40:15:60:7d:fb:
07:1c:7c:2a:49:b6:ad:4a:7b:f8:ff:3d:2f:8f:47:
56:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B4:6E:E5:0C:1F:7E:6D:73:E6:78:DD:32:1E:9A:EA:78:8C:99:4F
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:a6:a3:73:89:97:bf:ae:69:83:ba:0f:be:ae:96:7f:d8:c6:
fc:1c:2a:20:37:a9:f6:0a:45:ad:ec:c0:6a:97:98:5e:4e:f5:
1c:67:fa:15:51:1e:d9:5d:4e:38:15:9b:1e:d6:f9:b5:dd:1a:
03:01:39:02:25:42:6b:e9:92:38:40:57:c7:90:7e:0f:cb:8e:
f6:f5:b6:0c:78:68:b3:68:7c:8b:c2:4b:96:02:4c:4a:b4:d1:
0d:23:59:fc:3b:ab:9a:63:18:f1:05:46:9b:27:e8:fa:e8:f4:
22:30:c3:06:10:e4:70:fc:af:8e:fb:de:85:16:18:26:15:6b:
93:66:da:8f:a5:7c:33:44:8c:07:d0:df:66:2a:c2:a0:e8:86:
4a:1b:79:c4:3a:de:33:02:ec:b8:4b:b1:02:56:5d:88:0c:cc:
0b:3d:ba:d3:e0:2b:04:84:57:f0:99:f4:5a:86:9c:47:f4:c3:
76:79:01:8b:60:ef:6a:44:9e:e1:6d:5d:f6:4a:41:0f:98:b1:
18:58:aa:f3:d0:53:96:c7:8e:a1:0b:41:91:2c:88:46:13:20:
54:ec:9a:6d:fa:5f:f6:bc:1f:18:4e:f9:d1:e2:78:0f:d8:3f:
7b:f8:22:60:14:4a:04:db:d4:bf:20:60:3c:3c:b3:87:e2:9e:
c1:73:a4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:37:32 2026 by rpki-client