Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: iOwLolNPkdDebu4P40V1Ekg/bb2Gpw+uc1xTE4iq4G4=
Subject key identifier: 7A:11:15:CE:DE:54:C9:C4:F9:D2:A6:27:63:05:22:F8:D6:5A:09:20
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 019CAAC608182C11B12CE08D087DFB446BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 069F
Signing time: Sun 01 Mar 2026 19:00:30 +0000
Manifest this update: Sun 01 Mar 2026 19:00:30 +0000
Manifest next update: Mon 02 Mar 2026 19:00:30 +0000
Files and hashes: 1: 9lZ-yzBoTL2Q3tEfTGvAJ31AkaI.roa (hash: mZ5mTYqzMf+60QDXA/A80xWmGAZGWKbUo1eAsowQ3Ow=)
2: Yha1UjCg0bYTT2iIVJMZtFAgxEU.roa (hash: dVgYPXPBCxJJox+uQJ6Z0WgrgA/2WvOp6YXY7a/W6os=)
3: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: USJUi/wW4BKw5yW541+TnuVlfrxBF1zXQNqn9AgJ8Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:08:18:2c:11:b1:2c:e0:8d:08:7d:fb:44:6b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Mar 1 19:00:30 2026 GMT
Not After : Mar 2 19:00:30 2026 GMT
Subject: CN=7a1115cede54c9c4f9d2a627630522f8d65a0920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:ed:23:5c:e7:07:bc:40:1c:e8:d3:14:6b:
8b:71:61:2c:26:a5:96:b8:2e:ca:d3:b9:2e:4b:d1:
a6:5f:55:8c:e1:94:1c:7d:c3:c9:76:3f:1e:4e:8a:
67:1b:6f:60:d4:df:16:2c:90:4c:3a:9e:57:60:95:
9a:5b:4b:c7:27:45:7b:1d:0e:5d:db:d2:18:e5:d5:
f6:21:87:af:a9:06:09:61:b7:b3:2f:58:06:e5:7d:
43:82:18:97:23:d9:7f:83:70:36:4f:0b:ed:52:c8:
fb:c9:d2:60:ed:10:ca:f5:04:b3:78:56:92:24:61:
5f:22:6c:23:46:05:cd:bf:42:0f:e4:e5:61:58:c6:
f3:27:02:af:50:f3:7b:0b:d7:f0:f9:e1:cd:d6:1e:
81:e3:0d:99:27:23:e4:4a:f0:2e:9a:1f:fa:c1:84:
34:e3:b5:8e:0c:35:bc:a8:02:6c:63:da:07:9d:32:
0e:4b:79:0b:62:69:6a:0c:8a:f8:96:7f:03:c0:14:
ea:9e:32:54:e3:4f:3b:6e:f2:50:08:87:68:a7:e2:
5b:aa:67:37:b7:89:b8:3e:dc:e1:a9:20:49:a9:ff:
11:73:02:51:12:14:50:80:7e:c1:2f:43:d5:1e:65:
6e:bb:05:81:31:26:41:a8:17:46:bc:9b:ec:25:97:
c7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:11:15:CE:DE:54:C9:C4:F9:D2:A6:27:63:05:22:F8:D6:5A:09:20
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:82:6c:00:a2:c4:41:fb:e6:83:f4:59:75:64:10:bb:c7:36:
3e:30:84:82:90:d4:e5:e9:4e:2a:15:ed:f7:c5:be:a2:25:65:
9d:3c:fa:20:4e:a8:aa:a3:69:cc:52:9f:ec:d9:ba:ef:2e:ab:
3b:a3:3d:9e:bf:73:52:92:53:6a:3b:09:23:ff:fe:e8:c8:26:
5f:99:4b:89:8f:c6:42:62:31:d7:98:f5:a8:64:d1:a3:14:88:
0f:06:80:c9:7a:18:03:cb:07:e7:cc:52:6d:b1:80:4c:ce:43:
5e:5e:3a:1b:74:9c:6f:26:15:ba:a7:88:a8:c9:e5:6e:7a:4c:
d9:fa:7d:9b:de:e0:d5:69:01:36:df:50:83:cd:97:05:0b:78:
cb:e5:eb:30:65:9c:b5:eb:be:c5:b8:da:ec:9c:65:88:61:b5:
d9:f3:7f:0f:be:ba:f7:55:31:41:9f:06:3e:2a:df:7d:1f:7a:
3a:24:17:05:8a:45:9a:70:c0:e8:28:27:c8:02:75:2a:fa:ea:
09:2a:24:e6:ad:3d:16:c9:8e:ed:96:12:16:bd:a8:6d:fd:a6:
e7:af:03:ed:5e:67:3e:4c:9e:20:d2:cc:b5:c2:87:14:74:92:
04:d9:1a:35:09:6f:b5:03:b8:d8:36:c5:05:b5:61:46:e4:ff:
6a:38:62:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:23 2026 by rpki-client