Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
File: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft (raw, json)
Hash identifier: gJRGgmClvd85WdFv7ABZVUU6r3+fKkRyPNojDq86kbI=
Subject key identifier: BB:38:37:4B:56:67:98:6E:69:D7:32:E8:0C:B4:57:31:BB:0D:4C:AD
Authority key identifier: 2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
Certificate issuer: /CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Certificate serial: 019CAA21964F5698F50FF134AAF19E989A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
Manifest number: 077B
Signing time: Sun 01 Mar 2026 16:00:53 +0000
Manifest this update: Sun 01 Mar 2026 16:00:53 +0000
Manifest next update: Mon 02 Mar 2026 16:00:53 +0000
Files and hashes: 1: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl (hash: LqdsIy4Z/3jY36tSUbsbykmmkvYlv7XyexxLdBn3aGM=)
2: qQXczGpLv7J7hq-BXv0MunRxV1c.roa (hash: Ujrg8dmMYkyioyqFyW+i5iP0MRcs5Kuh6E+0SAn8NNs=)
3: z5F-NpHTklKVWAn6D5A0JTxkXS0.roa (hash: sWSxz0HZQ0kSW1+UlQBYZDH3NEvjZZ8BJExjY5FUj2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:96:4f:56:98:f5:0f:f1:34:aa:f1:9e:98:9a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Validity
Not Before: Mar 1 16:00:53 2026 GMT
Not After : Mar 2 16:00:53 2026 GMT
Subject: CN=bb38374b5667986e69d732e80cb45731bb0d4cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:00:d9:c7:05:e4:e1:04:fc:55:9a:5c:e8:
6d:e4:90:5b:13:96:63:11:06:0a:d9:d4:54:cf:5b:
29:89:b1:57:58:c2:c0:49:be:c8:44:1c:8a:9d:58:
30:a6:84:f4:b9:10:5e:6c:91:6b:7b:c2:c6:f3:b1:
b5:96:8a:0c:84:0c:59:21:23:cb:c7:76:d8:cc:f3:
61:9f:b6:3c:5d:67:cb:94:23:f0:8c:76:1a:eb:ce:
f3:27:f3:66:17:78:55:3c:a4:a0:81:c5:40:07:e9:
9b:e4:2b:6c:5c:cc:67:9a:a4:3e:ea:c3:88:3f:61:
65:55:01:e5:ee:52:30:3d:16:13:63:d6:e9:d8:33:
17:5d:cb:42:f6:03:e4:a2:dd:ad:4a:ca:67:51:31:
65:40:21:1a:39:c1:f3:c8:51:e5:5a:40:e0:27:9c:
e3:05:ea:86:66:4a:dc:58:65:d4:df:11:e2:a0:31:
51:26:d1:15:f0:c5:bc:4e:86:16:02:6e:8c:c9:e2:
ec:b9:5f:d0:32:82:49:fb:49:fb:2e:aa:00:ac:69:
8f:ff:06:e0:48:0b:00:d7:4c:eb:e9:67:5d:50:1e:
6a:97:32:cc:42:c0:03:dd:af:ed:6e:11:32:50:83:
1f:ef:2f:ac:7d:ec:3a:49:e6:7f:c0:df:77:1d:2d:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:38:37:4B:56:67:98:6E:69:D7:32:E8:0C:B4:57:31:BB:0D:4C:AD
X509v3 Authority Key Identifier:
keyid:2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:91:87:1c:c0:7c:f6:0b:1b:2b:2e:3b:74:04:53:a2:39:8a:
71:d0:c4:0f:78:9d:f1:01:e6:12:87:01:ed:f9:2e:c0:da:a5:
6f:e2:e0:13:fe:d9:fa:44:f7:60:86:16:a4:b8:c8:6a:2c:4c:
f1:80:71:a5:06:8f:6f:57:ec:a8:0e:c6:6b:a7:46:75:88:e7:
c3:4f:c0:f9:b4:f3:21:cf:10:3a:f0:84:0b:90:33:8b:df:35:
91:22:a8:15:63:f6:99:13:4b:64:61:f7:36:c2:e2:51:8d:11:
fe:ad:26:61:f6:a2:d9:8b:25:4f:ee:03:0d:6e:18:40:c4:2e:
03:98:a2:cc:4a:5e:04:54:9b:9f:6f:1d:06:13:a8:fe:14:24:
6e:a5:ee:7c:c2:ad:18:75:49:f3:32:22:d3:c3:a9:75:7a:58:
e5:c5:87:9f:1c:a7:04:96:f6:2f:b1:89:19:c0:1b:04:d0:05:
d6:16:dc:cf:60:0e:a5:7d:bd:db:7f:39:b8:33:b1:61:65:ea:
47:5c:94:20:4e:24:09:35:94:a4:cc:19:98:7e:7d:0c:99:8f:
02:74:16:ef:d8:2d:c0:9d:ed:86:46:51:bd:01:3e:ce:96:52:
6d:50:73:99:da:90:44:58:c0:bb:15:ea:46:2e:71:a2:df:7d:
6c:30:9b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:29 2026 by rpki-client