Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
File: LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json)
Hash identifier: lDTQbylXWLFsNW9KKAxxSXSihzsFJC69rhPOEOvHC5M=
Subject key identifier: 71:A9:8D:9E:1E:47:84:8D:B5:2A:2B:FC:82:24:A9:15:4E:60:16:29
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial: 019CAA58C5C0659DF12E3842EC3F4140B788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
Manifest number: 129E
Signing time: Sun 01 Mar 2026 17:01:10 +0000
Manifest this update: Sun 01 Mar 2026 17:01:10 +0000
Manifest next update: Mon 02 Mar 2026 17:01:10 +0000
Files and hashes: 1: C38xz0J3nKWG69p6aEh_3L1eROo.roa (hash: hgv2Dm3n9xuUIJlnQhstdXeK7/AZFfz5gfOa9h0Ol2A=)
2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: k2ZG+o7mLL5q56cjFv6nAWPwsVO/hUDx08c/OEV09rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c5:c0:65:9d:f1:2e:38:42:ec:3f:41:40:b7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Validity
Not Before: Mar 1 17:01:10 2026 GMT
Not After : Mar 2 17:01:10 2026 GMT
Subject: CN=71a98d9e1e47848db52a2bfc8224a9154e601629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3b:01:5b:26:60:18:3a:a6:2e:6d:0b:f7:fd:
f3:bb:43:6b:a4:e9:70:14:26:39:d9:c7:f1:80:9c:
5b:3f:fc:7c:33:9a:6f:c3:80:5e:2e:f4:26:9a:7d:
d6:f8:21:b7:18:2f:b7:d4:0b:05:c4:cb:06:0f:48:
74:4d:b8:d7:1a:f5:46:b3:c4:ee:80:2e:31:21:d4:
ca:42:15:5a:ba:d4:46:22:6e:97:c0:3c:4d:53:07:
32:f3:c1:ba:c9:9b:6e:6a:5f:f2:84:64:d0:36:25:
1d:1d:ea:92:41:94:a1:7a:21:ea:64:50:c4:97:df:
bd:76:5a:78:08:3b:df:d3:45:f8:08:4f:ce:4f:5d:
64:49:52:10:9e:ab:c3:20:f2:ad:42:3d:d3:cc:fc:
94:31:d4:c6:a2:aa:9f:9f:8c:77:fb:2d:68:26:ab:
90:fb:21:b8:fa:5d:0c:92:67:61:86:e7:f8:3b:23:
6a:6e:6f:81:da:46:e4:07:39:d4:d2:69:41:5c:23:
92:36:f8:9d:3a:29:2f:65:18:36:61:88:49:8b:20:
71:93:96:14:d2:f1:77:37:41:53:aa:ff:9b:38:de:
86:ed:0c:87:3d:66:66:d0:59:a2:5b:ca:60:9e:34:
7d:78:5d:a5:a6:cd:a9:65:25:76:34:91:49:fb:ab:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A9:8D:9E:1E:47:84:8D:B5:2A:2B:FC:82:24:A9:15:4E:60:16:29
X509v3 Authority Key Identifier:
keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:30:b7:b0:3d:58:8b:28:15:23:1d:a1:9e:2f:2e:d1:23:0b:
d3:07:bc:b5:fa:64:34:d5:66:4d:fc:a4:14:3e:a0:aa:63:73:
12:b0:6e:7b:20:b4:24:9f:15:8b:92:fd:3f:cf:64:68:bc:47:
11:06:ed:3e:1e:ca:d6:56:71:65:3d:e3:24:26:1b:f2:d3:8b:
09:a6:01:f9:e6:ef:05:53:70:23:61:17:42:01:3f:34:a0:32:
ca:fe:88:dc:ae:8d:b0:00:a4:8d:36:d1:24:24:be:f4:57:91:
cf:f5:ed:f5:3c:e9:96:2c:3c:39:d6:30:ce:f5:9f:7d:92:d5:
7a:94:84:00:cd:d4:a7:07:71:3b:be:ac:fd:ee:45:3d:e7:07:
f7:18:f8:9b:4f:e2:e1:c3:39:90:42:44:c0:b7:21:48:f1:d8:
06:e3:85:2b:45:3d:9f:f9:5a:f2:96:8f:18:e1:ae:d8:5d:6c:
7a:a0:d6:d9:6d:74:5a:db:b0:c0:dc:9f:43:77:ff:e6:02:9f:
4e:d7:5a:00:42:ac:47:c0:bf:57:61:20:48:eb:85:50:9e:ca:
aa:48:78:ba:53:51:b2:a1:59:d9:e6:68:fd:67:bc:e5:55:72:
f5:ba:78:d7:3c:74:37:17:f4:26:16:5b:2b:b7:de:3f:74:a4:
00:fa:cd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:31 2026 by rpki-client