Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/Lv-mtXElVDEKD0zlQJznapqwRP8.mft
File: Lv-mtXElVDEKD0zlQJznapqwRP8.mft (raw, json)
Hash identifier: jexda1z9kaVP3+P9a3tKZ192J45Za18eGjk2Dpt1qY4=
Subject key identifier: 87:4B:72:14:16:CF:0A:86:82:1C:A0:C1:8A:69:6A:C1:1D:52:01:AF
Authority key identifier: 2E:FF:A6:B5:71:25:54:31:0A:0F:4C:E5:40:9C:E7:6A:9A:B0:44:FF
Certificate issuer: /CN=2effa6b5712554310a0f4ce5409ce76a9ab044ff
Certificate serial: 01A0DD975FF582A2C3508626B44F27BA0F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lv-mtXElVDEKD0zlQJznapqwRP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/Lv-mtXElVDEKD0zlQJznapqwRP8.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:01:20 +0000
Manifest this update: Sat 26 Sep 2026 12:01:20 +0000
Manifest next update: Sun 27 Sep 2026 12:01:20 +0000
Files and hashes: 1: Lv-mtXElVDEKD0zlQJznapqwRP8.crl (hash: OKkHlsjQdKssORf5HtGR92j7qvTLEljp9593ax349Jc=)
2: guQk2_AmnXnrbydwZ_1NYFOLLdc.roa (hash: P0zl7DUn0tIOspi9Tj42iu88q7ORqZVPECXA4/R7cBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/Lv-mtXElVDEKD0zlQJznapqwRP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/Lv-mtXElVDEKD0zlQJznapqwRP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lv-mtXElVDEKD0zlQJznapqwRP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:5f:f5:82:a2:c3:50:86:26:b4:4f:27:ba:0f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2effa6b5712554310a0f4ce5409ce76a9ab044ff
Validity
Not Before: Sep 26 12:01:20 2026 GMT
Not After : Sep 27 12:01:20 2026 GMT
Subject: CN=874b721416cf0a86821ca0c18a696ac11d5201af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:b3:c8:1d:2f:0f:3e:a3:80:cb:fd:d3:c6:
7c:ad:9b:af:78:ba:fc:02:82:01:be:d0:9b:09:df:
ee:9d:f3:c4:71:90:a3:be:b2:06:00:91:67:6b:7b:
38:bb:b7:d2:74:fb:01:ef:63:e9:db:b9:51:a6:4b:
2a:75:a3:8e:eb:8d:a5:2a:4a:cd:32:bf:1f:3f:20:
5f:71:88:a7:e2:db:a4:5e:30:5a:e9:f6:1c:1c:5e:
e6:09:d6:c7:59:36:ba:df:3b:ae:21:7e:1a:24:5d:
63:46:41:f9:2e:22:3f:80:26:ca:cd:ef:9d:3d:b4:
ca:21:83:98:c3:c8:5b:d5:5e:70:74:a0:7f:76:e3:
3a:58:a1:c0:aa:8a:36:ca:0c:56:d9:db:75:a7:fc:
c2:6a:cb:da:55:32:93:fa:15:fb:9a:76:cd:6e:07:
7a:5f:6c:89:b5:45:21:d7:33:85:c6:f1:af:67:df:
53:97:9a:5a:7b:c3:7b:c8:f8:8f:22:0f:8c:b4:0c:
e9:4a:0f:b7:ea:7e:2d:22:44:9e:d8:74:5f:81:a1:
a2:2f:1e:59:59:a6:d8:68:dd:a0:59:74:aa:db:cb:
a8:88:b7:ed:65:5e:01:32:c5:48:f4:0e:a6:a7:88:
58:cb:ed:df:9a:e2:6d:88:53:d6:c5:24:53:58:84:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4B:72:14:16:CF:0A:86:82:1C:A0:C1:8A:69:6A:C1:1D:52:01:AF
X509v3 Authority Key Identifier:
keyid:2E:FF:A6:B5:71:25:54:31:0A:0F:4C:E5:40:9C:E7:6A:9A:B0:44:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lv-mtXElVDEKD0zlQJznapqwRP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/Lv-mtXElVDEKD0zlQJznapqwRP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/Lv-mtXElVDEKD0zlQJznapqwRP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8d:59:aa:b8:8b:3c:bc:7d:fd:ca:5d:19:00:f7:fb:8e:31:
49:70:c9:20:8b:3d:e4:04:3e:68:83:dc:7b:80:b2:fd:9c:c7:
57:69:84:62:ca:9c:b1:17:ac:cd:1f:d8:e3:ac:90:65:08:86:
85:81:59:ad:ed:a9:c6:1f:b3:b9:93:07:47:e8:cf:3a:f5:ee:
37:5c:bc:f7:80:04:a6:14:58:72:bd:a3:d6:b8:da:64:bc:23:
b8:1d:4d:4d:13:e7:77:c4:27:f6:f0:36:af:41:01:0d:f2:ff:
a7:08:a3:97:43:8a:3c:16:28:26:15:25:82:f4:87:17:67:6f:
64:68:63:e1:6c:12:ba:83:77:e7:22:74:3e:ea:03:ba:d2:ff:
d3:fa:e0:27:dc:ac:49:ab:f7:44:0c:99:64:b5:f3:f0:9e:56:
ee:52:fa:1d:06:12:9c:21:ed:45:75:15:69:7f:60:1c:73:99:
2e:0f:4d:40:ec:f2:70:69:cd:8b:e3:b3:65:a9:e8:98:1d:7a:
6c:3a:4d:e6:a0:9d:3c:a7:f0:60:dc:ae:65:54:69:c8:92:21:
7b:14:36:9e:ec:f2:4c:6e:19:3e:90:6e:0e:8a:18:97:61:80:
a4:ec:d4:ab:c2:b3:7e:0f:96:b7:72:d4:6c:fb:ee:ba:25:dc:
5b:42:e2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:26:54 2026 by rpki-client