
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier: V30jwTy9Acwu7scPT+4AZuhh93faWBfIlbjSwCmX5+0=
Subject key identifier: ED:36:FF:7F:CA:3F:A6:D5:93:C1:F4:C6:94:37:63:85:7C:A9:6D:38
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial: 019DA48ACB99275311E9F63FCE39D2976E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number: 0B3F
Signing time: Sun 19 Apr 2026 07:00:52 +0000
Manifest this update: Sun 19 Apr 2026 07:00:52 +0000
Manifest next update: Mon 20 Apr 2026 07:00:52 +0000
Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: sEuvTANHp493Oik5c3tbLxwy4z44gJzwFw4/xXdXnsw=)
2: w9C2YEP1w5Y_JbXVYJuueL5--a4.roa (hash: +XN99efnsnCoGzlf+tUbIokhlmEnZBGkv0fp+mcWEF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:cb:99:27:53:11:e9:f6:3f:ce:39:d2:97:6e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Validity
Not Before: Apr 19 07:00:52 2026 GMT
Not After : Apr 20 07:00:52 2026 GMT
Subject: CN=ed36ff7fca3fa6d593c1f4c6943763857ca96d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:ca:44:75:db:ed:61:26:27:ea:3c:42:19:
bd:3c:16:af:08:46:31:89:7d:9c:ee:eb:c2:c6:1e:
49:53:ea:7f:52:70:57:74:32:06:a1:9f:4b:5e:1d:
2d:ef:9f:3a:c7:33:9e:49:a2:99:16:e6:77:2d:b8:
c9:df:47:fe:fe:2c:09:8c:62:86:b1:d6:53:22:6f:
b4:cf:bb:9d:48:5d:00:b1:57:44:69:55:ab:79:97:
42:a3:05:2b:08:11:42:a0:59:02:1a:20:82:9d:81:
c7:40:56:09:05:ea:e9:b2:c2:a9:35:0f:75:64:db:
e5:97:40:a5:52:8f:19:32:a7:51:8e:a4:f3:bc:3f:
dc:ff:6c:2b:b6:7f:bb:8b:37:6c:71:91:69:89:1e:
78:04:ce:de:06:8f:54:92:38:cb:a7:92:16:ad:f3:
c1:48:92:1d:d5:18:20:1c:e5:c5:66:b0:e2:e1:3c:
a6:cf:45:c1:03:6f:fe:fc:ca:d1:aa:a4:7f:3c:6b:
b6:9c:6c:31:98:8d:fb:53:ec:48:e4:c6:6b:96:21:
ec:ff:89:7c:d8:dd:20:8b:e5:3e:10:d9:c6:99:ef:
a9:75:2c:dc:a2:23:5c:2d:90:7c:a8:99:d4:80:97:
f4:6a:c5:a3:c8:f5:3e:a1:d9:c1:aa:dd:db:c3:8b:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:36:FF:7F:CA:3F:A6:D5:93:C1:F4:C6:94:37:63:85:7C:A9:6D:38
X509v3 Authority Key Identifier:
keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:98:2b:69:09:cf:78:5a:fc:82:d4:80:67:56:db:b5:63:92:
9b:ac:eb:8e:3c:f3:ed:16:7e:7e:27:ea:70:8b:82:65:56:75:
06:60:b9:cb:a9:0e:aa:48:50:87:1f:24:a7:da:b7:ea:5a:37:
8e:04:6c:6e:93:bd:19:9b:2e:88:f2:cd:96:75:73:9c:2a:8a:
61:c7:b7:5a:d0:59:1f:a9:c7:ea:da:89:f7:3e:08:6e:a1:33:
51:b6:56:9d:54:e6:a9:d8:0f:ee:73:ac:33:86:71:22:39:91:
19:e3:23:6a:8e:95:fd:97:a1:7e:64:62:1a:91:65:9d:89:81:
47:a5:32:6d:24:a7:98:8d:44:1e:5d:42:df:d8:3e:77:f7:78:
c8:c1:2e:28:9a:84:4a:28:dd:be:34:11:4c:1f:e0:f2:3a:68:
ed:dd:03:8d:18:4d:b9:8e:4a:f4:a9:15:ea:07:40:e6:e6:21:
78:2c:51:1c:3b:b3:8b:d7:54:97:4e:dd:a2:a0:7f:4d:56:2e:
d8:d4:df:3d:44:87:ab:e4:d1:0c:bb:85:a6:fc:cf:ab:88:b4:
ca:63:d7:2d:1c:ed:55:38:26:1d:90:fd:88:16:61:7e:44:6b:
da:9f:15:98:cb:95:37:6f:ec:45:ff:6c:9b:5c:3e:d4:44:89:
6e:c8:e6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:02:57 2026 by rpki-client