Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: xWpg5D7+KWsFiKFna0aA7VSg6ltzxD1wEjh0k5DyssI=
Subject key identifier: 7F:63:B9:F2:3F:40:02:D6:58:46:59:8C:B9:0D:9D:47:79:78:AF:C4
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 019CACB46AF2C27AEF2740DB26A667F862C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 06A0
Signing time: Mon 02 Mar 2026 04:00:30 +0000
Manifest this update: Mon 02 Mar 2026 04:00:30 +0000
Manifest next update: Tue 03 Mar 2026 04:00:30 +0000
Files and hashes: 1: 9lZ-yzBoTL2Q3tEfTGvAJ31AkaI.roa (hash: mZ5mTYqzMf+60QDXA/A80xWmGAZGWKbUo1eAsowQ3Ow=)
2: Yha1UjCg0bYTT2iIVJMZtFAgxEU.roa (hash: dVgYPXPBCxJJox+uQJ6Z0WgrgA/2WvOp6YXY7a/W6os=)
3: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: hxxdZoFVFiiJc3w7Iqtwz2gsxonixo1JzNNIvkKFD30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:6a:f2:c2:7a:ef:27:40:db:26:a6:67:f8:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Mar 2 04:00:30 2026 GMT
Not After : Mar 3 04:00:30 2026 GMT
Subject: CN=7f63b9f23f4002d65846598cb90d9d477978afc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:76:16:98:85:b7:52:f4:fa:83:f3:27:65:
73:85:32:5a:a4:41:04:88:e3:5d:23:c1:46:f5:24:
4e:04:99:f6:b4:ea:7f:bd:16:92:37:96:a7:a0:2d:
e7:0f:af:c5:1c:1b:16:ba:62:93:85:2f:7a:36:0e:
d1:83:f0:7c:ef:70:9a:27:55:12:8e:a0:0f:52:2b:
79:ce:38:a4:fd:dd:96:a7:e5:83:32:dc:70:14:fa:
4b:74:27:ed:8c:7f:8b:ac:02:e6:b2:de:d0:f8:40:
75:b7:ac:21:3c:24:de:b3:ec:d0:f4:73:4e:f2:dd:
69:26:99:b5:6d:12:2d:73:39:92:05:9f:6b:73:86:
de:18:42:c9:36:8e:1c:55:05:5b:6d:3d:8f:cc:bf:
33:6f:bd:ac:09:b9:75:a7:7a:48:9f:e0:bf:7f:89:
3e:7e:40:12:cc:48:c7:8c:87:0a:f9:66:33:7c:dc:
99:1c:52:b7:67:4c:d1:b9:85:ce:59:91:89:1c:68:
d6:9e:c9:b6:66:71:18:60:f4:bf:7b:19:5f:30:51:
fa:2e:98:47:d9:56:9b:94:17:6d:22:1f:cb:4e:4d:
73:2b:ec:f1:07:47:92:7a:80:0a:64:72:0c:cf:1e:
3b:b7:a5:9d:49:2f:6c:eb:17:30:af:01:0a:20:a5:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:63:B9:F2:3F:40:02:D6:58:46:59:8C:B9:0D:9D:47:79:78:AF:C4
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d9:e1:5b:bf:98:d0:42:a2:f7:8b:f8:d7:6f:df:4a:08:ce:
80:cd:4e:d7:0b:3a:1b:f6:71:be:1e:96:25:54:cb:71:52:f0:
0e:35:3b:5b:f0:db:16:f0:65:75:00:37:97:4a:e0:4e:4c:a4:
6d:bd:8f:35:80:d4:46:f1:24:25:e8:d5:14:39:54:f8:08:bd:
cf:1d:38:a1:68:47:18:d0:22:2e:a3:da:45:32:79:c7:db:41:
8f:fe:71:cc:3c:98:f9:ac:23:eb:ec:51:2c:58:1f:d3:41:96:
36:2e:f6:fc:fb:62:34:0d:44:f0:af:5a:df:85:2e:77:6c:ff:
2e:33:6f:2d:20:fd:ea:86:68:88:8c:85:05:26:46:6b:a8:02:
69:5d:6d:a7:b2:db:5a:a3:37:4f:34:03:76:9e:9e:fb:23:e8:
68:1f:49:81:03:d4:e2:bc:7b:bf:eb:2f:30:3e:e6:17:a6:5b:
88:34:bd:e1:a3:de:a2:a8:bf:e9:0d:9f:a7:ca:ba:ab:e0:cf:
8d:73:47:8d:71:0f:e9:99:91:b1:6f:2e:6e:22:10:e6:9e:5e:
a0:e8:db:b7:45:00:53:33:0b:86:3f:e3:7f:54:8b:8a:86:4b:
9b:b2:63:62:14:0f:31:52:ef:cf:e4:ae:ba:e2:18:18:be:ec:
db:84:cf:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystGrywnrvJ0DbJqZn+GLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZmNkYTEyOGZlODJhZmMwNmU4YWFkMWM4ZTVjY2RmYjM1
NTYxZTQwHhcNMjYwMzAyMDQwMDMwWhcNMjYwMzAzMDQwMDMwWjAzMTEwLwYDVQQD
Eyg3ZjYzYjlmMjNmNDAwMmQ2NTg0NjU5OGNiOTBkOWQ0Nzc5NzhhZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFN2FpiFt1L0+oPzJ2VzhTJapEEE
iONdI8FG9SROBJn2tOp/vRaSN5anoC3nD6/FHBsWumKThS96Ng7Rg/B873CaJ1US
jqAPUit5zjik/d2Wp+WDMtxwFPpLdCftjH+LrALmst7Q+EB1t6whPCTes+zQ9HNO
8t1pJpm1bRItczmSBZ9rc4beGELJNo4cVQVbbT2PzL8zb72sCbl1p3pIn+C/f4k+
fkASzEjHjIcK+WYzfNyZHFK3Z0zRuYXOWZGJHGjWnsm2ZnEYYPS/exlfMFH6LphH
2VablBdtIh/LTk1zK+zxB0eSeoAKZHIMzx47t6WdSS9s6xcwrwEKIKUIVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9jufI/QALWWEZZjLkNnUd5eK/EMB8GA1UdIwQY
MBaAFJb82hKP6Cr8Buiq0cjlzN+zVWHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81MzM4NmMtNDhjNS00MmVlLWJkMDkt
ZTUwYWJjOGU4ODQ0LzEvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81MzM4NmMtNDhjNS00MmVlLWJkMDktZTUwYWJjOGU4ODQ0
LzEvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArtnhW7+Y
0EKi94v412/fSgjOgM1O1ws6G/Zxvh6WJVTLcVLwDjU7W/DbFvBldQA3l0rgTkyk
bb2PNYDURvEkJejVFDlU+Ai9zx04oWhHGNAiLqPaRTJ5x9tBj/5xzDyY+awj6+xR
LFgf00GWNi72/PtiNA1E8K9a34Uud2z/LjNvLSD96oZoiIyFBSZGa6gCaV1tp7Lb
WqM3TzQDdp6e+yPoaB9JgQPU4rx7v+svMD7mF6ZbiDS94aPeoqi/6Q2fp8q6q+DP
jXNHjXEP6ZmRsW8ubiIQ5p5eoOjbt0UAUzMLhj/jf1SLioZLm7JjYhQPMVLvz+Su
uuIYGL7s24TPhA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:43 2026 by rpki-client