Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
File: lvLaL6G8jtLyvGtwOovxU0D5fPo.mft (raw, json)
Hash identifier: 6ZXUk/y7a9nMuKYth5m970AUom26DeksGYwu51SzMt8=
Subject key identifier: 59:C1:BF:34:56:19:92:5C:EB:0C:D4:77:D9:2A:67:9C:6D:E1:66:CB
Authority key identifier: 96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
Certificate issuer: /CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Certificate serial: 019CAA90030D394F9DFA5A57F832094ECD4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
Manifest number: 0C23
Signing time: Sun 01 Mar 2026 18:01:30 +0000
Manifest this update: Sun 01 Mar 2026 18:01:30 +0000
Manifest next update: Mon 02 Mar 2026 18:01:30 +0000
Files and hashes: 1: hDVYn_Cqke4-sU20IyVPJrrTGIs.roa (hash: aIes+pqXbeivjOHzkJRTZPV5B1wddYada+DAKnLqkQU=)
2: lvLaL6G8jtLyvGtwOovxU0D5fPo.crl (hash: tu/pnRNFBCgNtpjU962rKmlpqy24pcwzJr9dPT5ILZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:03:0d:39:4f:9d:fa:5a:57:f8:32:09:4e:cd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Validity
Not Before: Mar 1 18:01:30 2026 GMT
Not After : Mar 2 18:01:30 2026 GMT
Subject: CN=59c1bf345619925ceb0cd477d92a679c6de166cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:66:6d:00:36:2a:93:c0:2a:50:a2:a0:f6:
61:57:4b:a1:a7:6a:37:00:f7:fc:8c:c9:67:82:b2:
00:6b:a3:f4:1b:4f:66:9a:e8:72:60:15:be:32:38:
30:ac:fd:4b:37:f5:01:6c:80:5c:f0:e9:c2:57:8f:
57:ad:dd:8d:a3:be:6f:f3:7a:77:97:c8:85:2f:be:
49:d8:49:f6:06:1e:93:96:95:64:32:41:5f:be:0e:
98:0c:85:f8:ea:e9:92:62:fb:f7:29:91:28:94:d1:
00:9c:ef:fd:d0:d0:23:a3:b9:c3:1d:76:e3:66:67:
37:18:8b:cd:bf:3e:2f:d5:ab:b8:70:f7:97:4d:d9:
c2:5f:1f:03:af:be:52:83:25:b9:ba:5e:51:8a:61:
68:bd:7e:88:ac:fe:6a:ff:44:b3:d8:c0:35:36:fe:
cc:03:80:2f:2e:a2:64:40:50:b0:52:cd:98:24:a3:
a8:98:06:80:c6:50:88:8d:b8:13:30:0a:da:3c:90:
69:55:56:f0:57:ee:ef:8f:cd:1e:17:ba:dc:1f:89:
86:8d:79:b7:49:e2:54:fd:ac:29:50:8f:1c:c1:05:
91:0b:22:59:96:62:47:fb:f3:fe:f4:b9:b3:b4:1c:
65:44:e8:fe:f0:29:90:56:09:8e:9f:0f:b6:cb:de:
6b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C1:BF:34:56:19:92:5C:EB:0C:D4:77:D9:2A:67:9C:6D:E1:66:CB
X509v3 Authority Key Identifier:
keyid:96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:75:79:3d:56:5a:90:c5:3d:0c:dd:2d:92:d9:f7:3e:41:40:
0b:b4:e9:43:a6:0c:96:e2:bf:b8:13:1f:b8:7e:83:fc:6c:bc:
d9:f2:6c:6f:46:91:05:f2:1c:fc:7d:a4:81:55:e9:1a:9d:ce:
d3:c4:b0:8b:12:f5:04:ff:e1:b4:4e:da:c3:75:15:fb:c3:1f:
6b:7f:f1:26:80:b4:f2:ce:83:9d:90:6e:55:e7:a1:7b:c5:20:
fd:ee:d7:08:5c:d5:87:51:4c:6b:d1:46:69:b8:b6:28:cc:ca:
5b:e8:82:ed:45:dd:1e:b8:02:37:2b:6b:9e:71:41:2d:79:2b:
1b:d9:54:ea:d1:31:a8:52:a9:fc:a2:0b:c8:fa:a3:df:1a:7b:
99:1c:06:2a:4d:a2:2d:c3:99:6d:b9:08:13:a4:32:8c:45:2a:
d3:4d:9e:18:dd:a2:86:33:96:43:98:ed:09:1b:c6:7b:94:e4:
a7:73:bf:e9:62:e6:9f:2b:9c:ae:7b:7c:e5:3d:72:c9:57:b0:
f6:22:6d:12:da:d6:47:16:7d:dd:57:e3:cf:44:57:91:37:32:
b8:28:02:96:62:86:ee:ee:b9:4b:d1:63:64:1e:61:6a:11:3a:
b4:58:d6:64:7b:4b:74:4b:71:cf:ed:b1:b9:86:a5:d2:ff:e2:
9f:b5:5a:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqkAMNOU+d+lpX+DIJTs1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZjJkYTJmYTFiYzhlZDJmMmJjNmI3MDNhOGJmMTUzNDBm
OTdjZmEwHhcNMjYwMzAxMTgwMTMwWhcNMjYwMzAyMTgwMTMwWjAzMTEwLwYDVQQD
Eyg1OWMxYmYzNDU2MTk5MjVjZWIwY2Q0NzdkOTJhNjc5YzZkZTE2NmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6BmbQA2KpPAKlCioPZhV0uhp2o3
APf8jMlngrIAa6P0G09mmuhyYBW+MjgwrP1LN/UBbIBc8OnCV49Xrd2No75v83p3
l8iFL75J2En2Bh6TlpVkMkFfvg6YDIX46umSYvv3KZEolNEAnO/90NAjo7nDHXbj
Zmc3GIvNvz4v1au4cPeXTdnCXx8Dr75SgyW5ul5RimFovX6IrP5q/0Sz2MA1Nv7M
A4AvLqJkQFCwUs2YJKOomAaAxlCIjbgTMAraPJBpVVbwV+7vj80eF7rcH4mGjXm3
SeJU/awpUI8cwQWRCyJZlmJH+/P+9LmztBxlROj+8CmQVgmOnw+2y95r6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnBvzRWGZJc6wzUd9kqZ5xt4WbLMB8GA1UdIwQY
MBaAFJby2i+hvI7S8rxrcDqL8VNA+Xz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZMYUw2RzhqdEx5dkd0d09vdnhVMEQ1ZlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mYzQ2OTAtMDgwZi00MDE4LTg5YTEt
OTNiNGZlNTE1N2VjLzEvbHZMYUw2RzhqdEx5dkd0d09vdnhVMEQ1ZlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mYzQ2OTAtMDgwZi00MDE4LTg5YTEtOTNiNGZlNTE1N2Vj
LzEvbHZMYUw2RzhqdEx5dkd0d09vdnhVMEQ1ZlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXV5PVZa
kMU9DN0tktn3PkFAC7TpQ6YMluK/uBMfuH6D/Gy82fJsb0aRBfIc/H2kgVXpGp3O
08SwixL1BP/htE7aw3UV+8Mfa3/xJoC08s6DnZBuVeehe8Ug/e7XCFzVh1FMa9FG
abi2KMzKW+iC7UXdHrgCNytrnnFBLXkrG9lU6tExqFKp/KILyPqj3xp7mRwGKk2i
LcOZbbkIE6QyjEUq002eGN2ihjOWQ5jtCRvGe5Tkp3O/6WLmnyucrnt85T1yyVew
9iJtEtrWRxZ93Vfjz0RXkTcyuCgClmKG7u65S9FjZB5hahE6tFjWZHtLdEtxz+2x
uYal0v/in7VaUw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:22 2026 by rpki-client