Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier: 0bV8KKHGaNmMAviS6DHAEXDF6z06ykLjJ9KU0aOMZNc=
Subject key identifier: 94:4E:D9:53:B7:C4:DD:CC:90:98:8E:A5:6D:14:34:5E:B8:13:F4:EF
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial: 019CAB6B4F0F64A5294E77B58E4727ABFAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number: 0ABE
Signing time: Sun 01 Mar 2026 22:01:02 +0000
Manifest this update: Sun 01 Mar 2026 22:01:02 +0000
Manifest next update: Mon 02 Mar 2026 22:01:02 +0000
Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: jGMIaCBoEbLgRXB4Hvm2JbRhtdnW22kUitQAt+uhxrU=)
2: w9C2YEP1w5Y_JbXVYJuueL5--a4.roa (hash: +XN99efnsnCoGzlf+tUbIokhlmEnZBGkv0fp+mcWEF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:4f:0f:64:a5:29:4e:77:b5:8e:47:27:ab:fa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Validity
Not Before: Mar 1 22:01:02 2026 GMT
Not After : Mar 2 22:01:02 2026 GMT
Subject: CN=944ed953b7c4ddcc90988ea56d14345eb813f4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:8f:f6:41:dd:11:9b:54:e8:0e:ed:de:06:
60:de:cd:ae:df:64:11:ec:b2:c4:4e:18:9d:29:00:
2b:9b:39:9e:f5:c0:7a:64:18:74:e7:b4:4e:f2:15:
0a:18:a6:78:8b:11:e0:de:86:9f:eb:49:89:df:80:
d0:19:bd:14:2f:c0:32:6e:0a:db:70:54:a1:81:94:
ec:95:4d:f8:f8:04:87:ec:4c:62:cf:66:c9:81:0f:
04:e2:79:24:73:01:e4:b6:07:89:ab:c4:5e:4d:53:
b6:84:1e:32:e3:63:35:51:15:19:a2:c1:f8:42:45:
6d:ce:65:37:e9:78:9f:1a:b9:13:79:e9:8c:ce:56:
f6:1b:5a:54:bc:0e:14:63:71:e8:73:55:76:9a:ef:
cb:60:c0:a7:53:5a:b4:51:a5:de:76:66:ef:30:d3:
6a:e5:cb:35:aa:27:6c:8e:ec:91:17:b5:d3:e2:08:
35:d7:fc:67:90:76:3d:3f:63:67:85:3f:3a:7e:c1:
2d:66:ee:a0:de:a9:44:3a:62:8c:99:12:fa:15:c3:
e4:02:c1:b1:ca:f8:aa:49:35:29:de:98:da:0d:55:
fa:c3:78:7f:51:7e:07:f6:6f:b9:65:58:cf:27:bb:
88:bc:cc:55:24:30:98:05:0c:ed:99:a3:be:14:24:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4E:D9:53:B7:C4:DD:CC:90:98:8E:A5:6D:14:34:5E:B8:13:F4:EF
X509v3 Authority Key Identifier:
keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:85:f4:3d:37:37:12:d3:0d:4a:a3:d1:b7:7c:73:c5:ee:22:
b3:3c:1a:af:d7:3d:1b:70:27:c8:ef:3e:da:53:e7:dd:50:f8:
4c:16:a7:25:4a:5c:83:ab:56:05:67:5d:f6:55:ad:9a:31:35:
34:ce:31:ef:f0:fc:a3:44:fb:7b:09:42:a4:18:54:99:85:7c:
49:87:c1:b4:3b:8a:18:17:27:bf:8e:64:33:f6:75:96:0d:c7:
e1:c7:54:59:9d:b5:a9:f0:e6:57:c4:80:68:35:ca:68:61:17:
c7:b8:b1:d6:6a:5f:2e:7f:73:a7:1f:e4:41:ec:66:d2:d9:af:
3f:e8:63:bb:0b:67:3b:5e:ee:e6:cb:17:9b:5d:d1:1f:94:5e:
0f:ed:c4:56:15:85:99:65:b2:81:b0:a4:d6:64:5f:39:ed:40:
52:fa:c0:bd:8e:a7:c9:ee:4e:00:54:40:7c:5d:29:1d:50:16:
7e:04:14:d3:29:e0:b8:bf:d0:67:aa:87:24:0a:4e:68:48:c7:
1e:a4:ee:62:16:7b:c3:84:98:be:06:3f:9f:61:1c:15:eb:2d:
ba:f2:9b:34:be:3e:f2:b2:99:ab:18:ad:a3:b6:c3:b2:9f:9d:
8d:70:14:d8:a2:a9:b2:71:ba:f2:08:63:2d:00:99:d9:dd:3b:
f6:9f:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:44 2026 by rpki-client