Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
File: LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json)
Hash identifier: llaVV6p+wjLaCaBpGp3vfFGGIej90TUEC6zQ4/+Dq3c=
Subject key identifier: FA:64:FE:C8:D5:25:CC:5B:74:B7:57:88:A8:16:2D:44:19:01:AF:7D
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial: 019D99D0720B26AF90D94652E8A86C765E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
Manifest number: 131A
Signing time: Fri 17 Apr 2026 05:01:07 +0000
Manifest this update: Fri 17 Apr 2026 05:01:07 +0000
Manifest next update: Sat 18 Apr 2026 05:01:07 +0000
Files and hashes: 1: C38xz0J3nKWG69p6aEh_3L1eROo.roa (hash: hgv2Dm3n9xuUIJlnQhstdXeK7/AZFfz5gfOa9h0Ol2A=)
2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: CXP+VCKwGpFfzt4+Kqia/0T7ebIH3ikC5KVThAaAWPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:72:0b:26:af:90:d9:46:52:e8:a8:6c:76:5e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Validity
Not Before: Apr 17 05:01:07 2026 GMT
Not After : Apr 18 05:01:07 2026 GMT
Subject: CN=fa64fec8d525cc5b74b75788a8162d441901af7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:0e:28:47:da:41:73:e4:74:ff:41:63:39:
bf:c2:cb:86:4b:c1:1d:b0:2e:1a:36:1b:9f:61:ed:
3e:20:83:7f:ca:b2:50:10:13:c0:9e:54:ee:7e:31:
8b:7e:e3:b2:ce:68:7a:93:6d:b1:f7:26:a4:34:01:
2a:1f:01:41:3b:d7:0b:e3:f6:49:27:11:7d:66:18:
8f:65:cd:b0:74:c1:a4:2a:79:2e:da:f1:e0:ab:06:
20:f2:1b:94:7f:77:8b:ea:9b:f1:b5:be:b4:a8:b1:
4c:3d:27:b3:0e:ab:4f:0b:25:73:0b:25:80:3e:6c:
5b:99:ce:ad:29:22:5a:84:86:87:9f:0f:82:fa:59:
d0:96:a9:02:a9:0c:4e:26:2d:6d:a6:d2:28:7f:41:
3a:6a:f4:cc:03:a2:3b:d3:84:2a:9d:ed:b7:fe:be:
8f:0a:0f:bf:83:b2:8a:23:30:1d:c2:2a:03:56:71:
85:0a:41:9c:05:5e:16:de:79:6a:85:f6:43:e2:5c:
0c:ec:2f:cc:52:2e:af:00:55:1b:b8:82:8e:4c:9d:
24:b3:ea:cb:84:63:fe:c8:34:c8:1b:04:86:98:53:
ee:c8:99:43:46:36:a0:49:c7:84:7b:ee:c9:21:a4:
71:43:22:b6:35:57:06:20:ec:69:21:52:0c:a9:ca:
fb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:64:FE:C8:D5:25:CC:5B:74:B7:57:88:A8:16:2D:44:19:01:AF:7D
X509v3 Authority Key Identifier:
keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:81:f3:51:5e:8a:2d:c5:a8:9c:fd:cc:7d:3d:17:39:5a:3e:
9f:d9:dc:4b:29:1e:19:e2:bc:ce:2d:7b:20:03:a1:df:e8:33:
2b:81:ed:6d:d0:53:18:7f:6b:23:90:d9:4d:92:fc:bf:2f:4a:
fd:21:82:34:79:eb:4d:77:53:df:7f:7d:9d:af:33:b6:dc:7c:
bb:84:1a:0f:e6:a6:39:24:c2:df:a3:5b:99:1b:dd:df:b2:d9:
58:b7:3f:7d:e5:5b:94:31:99:b5:4f:ca:22:98:24:fd:c2:8c:
15:20:35:0f:4a:68:1e:c7:5b:e7:66:93:95:ec:00:f3:db:e8:
61:8f:0c:63:a3:ba:08:e3:d2:62:4e:2e:cf:54:ad:2c:7d:fc:
27:4c:c0:98:77:06:20:de:53:aa:2d:1d:96:a9:16:ad:8b:c9:
41:19:55:dd:be:fc:40:39:7e:fc:ab:e0:a5:8f:6e:70:e1:dc:
7d:4a:b6:d6:b5:9c:0a:2f:fc:14:4d:0c:c4:14:ae:b4:10:c4:
15:5c:8c:24:eb:a7:72:9e:fa:04:e9:1d:ad:de:2f:29:c6:c6:
b5:95:4d:7a:85:8d:35:4a:06:21:4a:87:9e:6d:3e:66:d9:e6:
a7:69:a8:d6:aa:b3:fb:71:68:7d:1a:81:83:60:f6:fc:2b:5a:
9a:cc:bc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:39 2026 by rpki-client