Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier: PNggT56+RfLyuXn0YTB7OGYOcPZunNkoG3XqHMzEGg8=
Subject key identifier: FE:3A:63:35:FE:00:2D:0E:55:AB:0A:22:73:19:42:82:E5:A5:45:6C
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial: 019FAAF54C8545210D10AD577892281F8C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number: 16F9
Signing time: Tue 28 Jul 2026 23:00:30 +0000
Manifest this update: Tue 28 Jul 2026 23:00:30 +0000
Manifest next update: Wed 29 Jul 2026 23:00:30 +0000
Files and hashes: 1: JJJqBn2vrMXP7kngEan0imFBrIE.roa (hash: KnDyBCr49BTGq3A5Ah9xTrAKORQ9HlD3KaBetAPGdn4=)
2: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: k8llpyKE4/OE5Pv5XQU7esY46Sq8IALK/7k3OlNMuO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:4c:85:45:21:0d:10:ad:57:78:92:28:1f:8c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
Validity
Not Before: Jul 28 23:00:30 2026 GMT
Not After : Jul 29 23:00:30 2026 GMT
Subject: CN=fe3a6335fe002d0e55ab0a2273194282e5a5456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:06:48:63:30:f9:20:a9:a6:d4:df:aa:94:
46:03:94:cb:9e:66:3a:ce:a8:31:92:88:92:21:5a:
7d:14:06:08:c1:dd:79:1c:db:ac:37:75:a8:ac:0f:
89:fa:df:3a:4b:f5:8b:d8:07:2d:5c:40:c9:d6:17:
fe:4c:15:80:4c:c0:3b:3a:62:b1:1d:c4:c7:75:90:
0d:33:29:41:cc:d7:3a:90:95:19:4a:99:04:2c:b8:
14:df:9a:6b:d9:71:08:27:72:39:e9:a0:6b:3a:fd:
ea:d0:1b:83:02:82:b7:64:a5:df:a0:89:bc:d4:c4:
35:ad:b3:7d:0d:f6:64:52:e8:ee:86:13:67:44:0c:
2f:15:41:6e:2d:b5:97:90:8f:3d:66:e1:03:9c:90:
71:58:0f:f5:f4:18:7e:01:4e:c9:96:58:8e:79:07:
cb:98:ea:89:8d:82:fb:a3:ca:ee:02:17:84:76:75:
04:75:7e:9f:4b:3b:f5:2d:6c:80:8a:bc:16:29:1c:
78:4f:22:c5:63:41:4d:b6:16:bf:8b:90:42:c3:f1:
96:e7:18:62:8c:0e:36:b0:78:a0:61:25:9b:42:25:
da:56:f4:a0:68:81:86:51:51:97:dc:47:96:48:00:
9c:92:28:f4:55:a1:83:c7:ae:04:9a:df:40:56:ea:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3A:63:35:FE:00:2D:0E:55:AB:0A:22:73:19:42:82:E5:A5:45:6C
X509v3 Authority Key Identifier:
keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:10:42:d2:dc:92:d1:47:80:0e:83:78:76:2d:72:e3:99:ff:
3d:30:39:46:08:2a:1c:4a:c7:45:89:4f:fa:90:f7:84:36:36:
2d:4e:8c:1a:d6:84:b0:d5:a6:74:b2:b7:23:22:2d:c6:f9:36:
f8:3c:f4:f9:37:3f:6a:02:90:4f:55:1e:24:35:53:d8:8b:b8:
9f:d6:29:f3:8d:de:04:7f:1a:7b:0c:68:02:ea:bf:b6:ca:20:
59:c6:d8:ff:27:00:ac:b9:9b:58:65:96:35:15:0c:1a:68:9b:
45:c4:78:00:7c:ac:3e:bf:26:9b:92:1d:c0:64:78:db:f4:e1:
df:ad:42:3e:b1:10:5e:80:60:bb:fa:76:f1:88:62:24:23:ee:
d0:89:09:22:58:d9:55:ea:8c:b5:00:58:99:c1:b4:a3:7f:eb:
b3:95:86:39:41:af:09:09:66:c4:9d:f8:06:ba:24:82:55:a3:
0f:8c:b7:fc:f8:c2:e3:63:70:cb:b8:d0:be:88:2d:16:d5:70:
70:61:6b:f2:ce:35:8f:c0:c6:67:fc:c9:ce:00:56:61:dc:68:
50:86:34:f6:14:30:99:e3:7f:e3:ed:cc:23:84:33:fa:55:99:
64:48:c3:97:f0:fd:82:d9:b6:cd:b5:92:ac:f9:86:7a:97:4f:
4c:37:42:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:19:17 2026 by rpki-client