Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
File: _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json)
Hash identifier: /0GSV6Dnsreqdys0PRiVLZ8Kdog8WqeN88ka04v81QI=
Subject key identifier: 8C:AE:9F:63:30:8C:56:DF:06:8B:6B:A8:7D:E4:E0:A9:72:A5:A6:2C
Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Certificate issuer: /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Certificate serial: 019CADC79CAACB8E2C409C646D75C9F6912C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
Manifest number: 0663
Signing time: Mon 02 Mar 2026 09:01:05 +0000
Manifest this update: Mon 02 Mar 2026 09:01:05 +0000
Manifest next update: Tue 03 Mar 2026 09:01:05 +0000
Files and hashes: 1: M-XgOjesPXIogjBIQr0FL2b7KV0.roa (hash: cfiY/wJuu827u4/W0gn3sJ9LCmjPRCXCxBqRyHWf5wA=)
2: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: MMcnhNeDGod/x154yfU8Xf8TUaJtWeebE/sn33dXoeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:9c:aa:cb:8e:2c:40:9c:64:6d:75:c9:f6:91:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Validity
Not Before: Mar 2 09:01:05 2026 GMT
Not After : Mar 3 09:01:05 2026 GMT
Subject: CN=8cae9f63308c56df068b6ba87de4e0a972a5a62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:83:aa:cd:83:b3:88:5e:16:3a:54:84:47:
6f:99:19:76:24:a3:64:13:bb:0f:b3:94:8c:66:5c:
d1:60:23:f2:b0:31:b9:9a:f7:2a:7c:01:08:29:79:
ee:6a:0c:18:c1:79:46:06:4b:1d:de:1e:4e:c6:55:
9e:72:39:db:9e:20:74:d0:d1:e7:f3:22:9a:72:e5:
17:f0:65:55:dd:e8:42:de:73:f4:b2:a2:13:a1:c3:
96:ec:03:13:83:9f:20:17:dd:d8:d2:a0:59:60:d0:
b6:7c:12:81:65:f3:f7:b3:e1:88:8c:59:88:11:b7:
9e:24:d8:96:18:a4:cd:ae:66:66:74:70:90:b4:65:
16:e7:f5:9a:f3:dc:79:1a:58:95:ba:6b:04:6c:be:
13:a4:18:fe:01:70:e3:92:20:f8:43:2a:23:b7:3e:
87:75:b1:a0:f1:6b:81:b9:87:f3:66:e1:e6:2d:a6:
08:46:69:4d:6e:c7:aa:41:00:c8:f9:bd:85:4d:71:
be:1b:fd:00:a9:8e:bc:16:c2:b8:fe:2b:a8:48:a6:
70:bd:15:87:4b:df:a9:2e:dd:5c:11:77:ae:7e:87:
6c:a6:a1:d9:67:e4:f9:1a:70:4e:d6:21:f2:22:93:
16:39:9c:05:69:5e:2a:f6:ee:a4:ba:f3:52:a0:61:
d9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AE:9F:63:30:8C:56:DF:06:8B:6B:A8:7D:E4:E0:A9:72:A5:A6:2C
X509v3 Authority Key Identifier:
keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:94:ed:b6:e5:35:b1:c3:33:58:6f:c8:62:44:af:2f:5b:6d:
33:11:4e:94:06:be:10:b5:4d:2e:fb:47:f0:c5:64:5d:7d:88:
dc:0f:1c:61:93:c6:21:4a:20:30:fb:cf:3f:b9:76:18:7b:f5:
7b:d9:34:e8:dc:dc:23:3a:85:f6:3e:f9:e7:94:55:ff:5e:6a:
20:f6:17:88:f2:66:de:d0:bc:b5:2c:78:b5:c5:f0:79:53:b3:
5d:08:2e:5b:9f:5f:5f:d6:cc:04:f1:4b:c1:86:16:ae:09:e5:
70:e0:e6:bc:ae:5a:6d:3e:a2:36:08:16:2d:b7:55:15:f5:19:
b2:48:f8:60:7d:84:4e:47:b4:06:19:27:b3:dc:b9:df:15:63:
61:44:bd:ec:3e:f8:6f:91:8d:58:12:d5:cf:01:ff:ef:6e:78:
a2:17:97:ca:0d:78:ac:84:af:a6:99:64:8d:2b:4a:25:99:36:
5b:e8:4e:09:83:2e:bb:67:3f:aa:a7:45:5a:80:94:cb:5d:a5:
fb:37:9a:33:d9:ff:a1:56:8a:3b:b9:5a:1d:51:84:0d:e7:2a:
4e:56:40:9b:e3:65:3c:53:6b:31:af:9c:53:e7:3a:6e:ab:b3:
fd:1a:e5:50:5f:d8:09:ad:f9:d2:ba:93:19:f3:e2:3b:aa:f1:
dd:73:2c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:58 2026 by rpki-client