Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
File: lvLaL6G8jtLyvGtwOovxU0D5fPo.mft (raw, json)
Hash identifier: 1hUIGtUR8fdUHpVkLMVwkKkc9CRwUDBvE8SN1Te9ieg=
Subject key identifier: 8C:2F:84:CD:C9:9A:34:84:17:2B:1D:A9:3C:13:ED:86:CD:55:8F:C4
Authority key identifier: 96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
Certificate issuer: /CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Certificate serial: 019D9A06BFFE2347E64613649C75E10ED0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
Manifest number: 0C9F
Signing time: Fri 17 Apr 2026 06:00:26 +0000
Manifest this update: Fri 17 Apr 2026 06:00:26 +0000
Manifest next update: Sat 18 Apr 2026 06:00:26 +0000
Files and hashes: 1: hDVYn_Cqke4-sU20IyVPJrrTGIs.roa (hash: aIes+pqXbeivjOHzkJRTZPV5B1wddYada+DAKnLqkQU=)
2: lvLaL6G8jtLyvGtwOovxU0D5fPo.crl (hash: PmwViWISd0RShfNLeSfjdMX5380XIw8XHjnIjDqDMXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:bf:fe:23:47:e6:46:13:64:9c:75:e1:0e:d0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Validity
Not Before: Apr 17 06:00:26 2026 GMT
Not After : Apr 18 06:00:26 2026 GMT
Subject: CN=8c2f84cdc99a3484172b1da93c13ed86cd558fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:83:e0:01:a5:db:39:0b:69:7f:b2:33:c3:
5f:91:6c:15:7d:e9:14:b8:17:a6:74:0e:eb:43:5f:
c7:da:00:4c:ed:38:50:41:c1:2c:c8:de:60:24:71:
42:10:df:6c:ea:a4:d1:e5:21:e0:7b:1a:57:40:8a:
cc:0e:09:7d:a2:53:4a:af:a9:39:e6:88:8a:bd:4c:
ba:ec:ad:18:0d:4f:9e:c9:cf:b8:47:2b:55:e5:47:
1d:41:6d:76:bd:74:a9:26:72:5f:1b:0c:a3:b6:f3:
5f:d7:ca:d5:0b:ad:be:64:5a:cb:48:c5:75:13:ce:
f3:c6:a2:17:68:89:a3:d8:19:c0:1c:9a:d0:ab:c3:
be:be:b8:c1:51:ff:81:a6:29:16:2e:1f:ba:5e:27:
98:8e:52:58:c9:4b:3c:04:0a:cb:e0:d6:97:0a:df:
f5:79:4e:6e:25:c6:a8:c9:d9:96:f5:9f:d9:c5:fb:
a3:0d:92:7b:14:46:16:1b:d7:3e:c1:45:db:90:52:
cf:00:f1:c5:c4:56:64:77:b2:5e:f2:f3:6e:53:92:
02:2f:d3:4d:15:61:62:78:cf:bb:40:d8:ce:18:2c:
07:29:69:8f:33:51:78:3f:36:db:8c:1b:15:3a:e0:
ef:40:2a:8a:9a:7c:cb:82:00:8a:c6:d8:20:c1:76:
e6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2F:84:CD:C9:9A:34:84:17:2B:1D:A9:3C:13:ED:86:CD:55:8F:C4
X509v3 Authority Key Identifier:
keyid:96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9e:ef:6b:49:79:0c:85:13:0c:ea:98:d4:3e:f8:c6:52:ed:
5a:8f:8a:60:42:47:a0:77:ed:7e:f9:f8:4c:c9:3a:e7:95:8e:
e8:67:33:d1:0f:f0:7b:c9:9f:e9:39:7a:b8:e9:90:48:e3:ed:
01:9b:0b:00:31:bc:61:f4:6d:af:1d:d1:ea:e2:3b:21:fe:af:
a7:64:cf:01:2f:63:d9:4a:71:41:db:30:26:24:5e:da:42:3e:
55:58:cb:7e:e0:a2:3e:8a:79:e2:49:be:69:5a:61:42:ae:a1:
76:6d:84:d5:d6:02:2e:20:2f:45:0e:9a:75:49:95:c0:2a:6d:
4d:02:a6:b0:6e:35:83:21:af:d9:87:db:87:86:31:86:82:ca:
09:a8:fc:45:fc:29:8e:ec:8d:e8:ec:19:9d:a8:b5:30:13:3b:
0f:b3:3a:ba:d7:18:75:fd:32:5a:84:ac:20:50:a4:25:06:79:
5e:90:35:9b:5f:60:e9:de:76:a6:e4:d5:22:21:13:20:69:05:
ed:d2:20:2a:b2:f1:9f:a9:9f:91:f8:6e:be:da:60:a5:bf:5e:
88:67:ed:61:d1:e1:c4:ed:79:af:0c:0d:3b:5a:19:e1:a8:f3:
e2:05:20:2f:77:ba:43:00:57:09:77:8b:f3:fc:f9:ad:00:28:
12:e6:6d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:30 2026 by rpki-client