Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: bdQ/sakgRWoEjYKMVrYPmLw+Y3YJV22c7z2UkOHxsJA=
Subject key identifier: 3C:C1:F8:D5:83:48:4E:5F:8C:BD:08:16:E3:34:5D:8D:6B:A7:96:CC
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 019D9A3EBD76C12F29E6D7F00DC89F1C6304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 071B
Signing time: Fri 17 Apr 2026 07:01:36 +0000
Manifest this update: Fri 17 Apr 2026 07:01:36 +0000
Manifest next update: Sat 18 Apr 2026 07:01:36 +0000
Files and hashes: 1: 9lZ-yzBoTL2Q3tEfTGvAJ31AkaI.roa (hash: mZ5mTYqzMf+60QDXA/A80xWmGAZGWKbUo1eAsowQ3Ow=)
2: Yha1UjCg0bYTT2iIVJMZtFAgxEU.roa (hash: dVgYPXPBCxJJox+uQJ6Z0WgrgA/2WvOp6YXY7a/W6os=)
3: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: 2y92WDDY/1Wjjp/33sfzEkjxnqUYY3AEmMbgJmPZFdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:bd:76:c1:2f:29:e6:d7:f0:0d:c8:9f:1c:63:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Apr 17 07:01:36 2026 GMT
Not After : Apr 18 07:01:36 2026 GMT
Subject: CN=3cc1f8d583484e5f8cbd0816e3345d8d6ba796cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:14:8a:d1:29:8d:49:28:ef:c5:ac:15:98:
af:16:8e:f8:77:4f:42:75:9a:45:ac:40:96:fd:4c:
5e:09:3e:13:62:80:b5:7c:94:59:b5:b7:a6:d2:37:
e4:7f:b5:42:48:a4:08:e5:76:3b:be:bf:db:61:9b:
65:ad:4a:2b:14:6b:6e:58:5b:07:1b:f6:61:78:db:
ba:33:11:5f:93:7f:ac:b5:a9:44:6c:e3:5d:c3:52:
1f:ea:36:8f:26:65:bc:1c:ca:74:8b:96:a0:64:94:
31:3c:90:5a:9e:96:36:fb:42:6c:8f:70:43:90:61:
bb:20:55:34:d8:7e:4c:87:f8:cf:8a:3a:b0:ce:27:
14:20:7f:ff:fa:25:25:ec:05:15:ab:c3:9f:b6:c9:
0b:f8:7c:ee:c5:a5:a8:0a:ca:0b:c0:cb:16:1b:57:
0f:5c:91:a8:cd:1d:fd:64:f0:8c:02:90:db:c1:ab:
01:4c:41:22:14:43:87:51:7e:75:a0:6e:ce:5f:77:
02:c3:02:ab:ee:88:7e:95:10:28:eb:86:2a:19:43:
42:a2:07:02:ec:c2:4e:02:92:12:5c:93:80:ba:97:
ef:a8:e1:a0:f0:83:34:b9:95:41:f5:62:4e:30:22:
31:4f:35:81:e1:78:62:f3:b7:0f:27:9a:1f:ab:fc:
7c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C1:F8:D5:83:48:4E:5F:8C:BD:08:16:E3:34:5D:8D:6B:A7:96:CC
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:dd:4d:eb:03:ad:3f:ca:9c:e2:e1:43:2e:e3:c2:cf:84:58:
4e:7c:f7:d7:23:ea:15:3b:57:4a:f6:6c:fd:e4:20:50:22:bb:
b5:46:69:1f:38:af:ac:a4:01:6f:81:6f:36:71:0b:9a:1b:77:
9f:38:97:64:c6:ca:17:24:bb:91:86:52:93:d9:eb:a0:fd:98:
9e:73:51:87:38:8b:e9:97:0d:98:fe:84:9d:1a:d8:71:9b:20:
a0:bf:70:32:36:34:67:24:0b:dc:c5:ff:1a:2e:0c:82:be:9f:
2d:ba:11:83:2a:11:65:ce:0c:73:5c:be:91:8c:e1:22:86:3d:
5c:b3:de:5b:dc:3c:ee:31:f6:48:34:af:dc:4d:c5:50:32:0a:
71:bc:30:43:63:8f:d7:e6:de:8a:ae:75:06:d2:91:c3:24:ff:
63:41:85:5c:20:81:26:76:a5:99:eb:7e:63:17:d8:35:b9:ef:
a5:c1:6f:5c:c9:c8:58:5e:d6:c4:30:2f:c8:74:a5:e0:ae:51:
e8:92:ab:e3:80:48:35:68:8b:c1:65:cf:39:f5:e4:d7:3a:20:
20:c0:d0:0b:88:53:70:1f:20:45:8c:c8:75:8a:3c:0f:7e:ee:
01:18:d2:c8:ca:dd:a1:7f:3d:bb:a6:1c:d5:59:ac:ae:21:cc:
a8:0f:3b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:23 2026 by rpki-client