Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier: Wq8LebmUXuyeRmJSZnwqZU+o1UCQRZ2LX9Iup/mXrSw=
Subject key identifier: A7:14:4D:FE:E1:38:B5:C9:B4:61:18:40:78:39:A1:57:CB:DA:4D:78
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial: 019CAC4686C093683B05C0329F9500B6BB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number: 156C
Signing time: Mon 02 Mar 2026 02:00:28 +0000
Manifest this update: Mon 02 Mar 2026 02:00:28 +0000
Manifest next update: Tue 03 Mar 2026 02:00:28 +0000
Files and hashes: 1: JJJqBn2vrMXP7kngEan0imFBrIE.roa (hash: KnDyBCr49BTGq3A5Ah9xTrAKORQ9HlD3KaBetAPGdn4=)
2: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: Mp/LoSznoz3tc0nDwuQizWHnacPeCgwbrAXqh0pee7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:86:c0:93:68:3b:05:c0:32:9f:95:00:b6:bb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
Validity
Not Before: Mar 2 02:00:28 2026 GMT
Not After : Mar 3 02:00:28 2026 GMT
Subject: CN=a7144dfee138b5c9b46118407839a157cbda4d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:8c:16:c5:0b:ff:98:2e:88:e8:1e:3f:39:
0f:6e:3c:b3:3b:84:3d:2c:a0:ba:fd:8f:a6:fe:42:
c3:d3:09:97:d4:71:3e:24:a1:9d:bc:e3:06:11:34:
1d:61:b5:6b:68:08:43:b4:f3:d1:7b:21:e1:1c:65:
5d:d2:75:b4:5e:2c:9c:e4:1f:dc:0b:3a:1b:cf:15:
69:f0:19:17:59:c3:58:9b:94:3f:7a:b4:3f:f4:07:
bf:0a:6a:22:5d:db:75:2a:59:bb:be:3d:8f:31:e9:
76:21:d3:76:d7:4e:f6:06:2a:42:87:31:89:36:23:
dd:49:05:dc:93:d6:8a:1a:e0:55:aa:05:f8:a0:85:
1e:ea:98:4f:f8:a4:22:bf:cc:9d:25:c2:23:b4:9d:
40:f7:07:9f:c7:01:4f:d7:cf:61:41:88:4f:e3:c7:
cd:96:c6:f6:b5:92:de:5c:7e:cf:ef:61:b8:d4:54:
34:ab:3e:d8:9d:c9:50:19:cc:e8:cd:55:fd:fd:ae:
42:e7:8a:f1:49:66:2b:a2:d0:c5:67:7e:a2:43:5b:
ab:c4:72:bc:f0:15:a9:75:f6:c7:80:fd:76:55:2b:
49:cc:ea:ee:4d:64:08:6a:3c:75:a3:38:65:b6:3f:
c2:c7:0d:a0:68:5a:c9:c3:be:37:3a:06:c0:8a:6e:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:14:4D:FE:E1:38:B5:C9:B4:61:18:40:78:39:A1:57:CB:DA:4D:78
X509v3 Authority Key Identifier:
keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2a:b5:1d:1f:87:b3:f7:3b:e8:83:bf:4e:0c:5a:68:37:1d:
87:31:a7:33:f9:09:2d:eb:8b:55:27:15:83:df:12:f9:79:be:
41:0e:0e:98:37:fd:c0:d8:bf:c6:1f:75:e8:be:45:99:d2:5d:
9d:88:e5:ce:2d:fc:cc:07:3d:bf:20:a6:e6:a1:53:d8:e6:c3:
8a:a4:13:3d:ca:c5:4c:d0:2e:79:2b:08:2e:81:92:ec:58:99:
34:00:6f:0e:22:b1:e4:dc:30:b8:15:2c:ed:2c:e8:73:be:69:
66:c1:24:88:fa:f7:52:5c:20:8b:09:a3:de:df:9e:80:8d:bf:
35:2c:35:f6:4e:4d:a4:59:81:f8:44:20:5c:e5:4e:38:ac:4c:
c0:ba:08:0d:97:55:aa:ee:11:40:e5:4b:8a:b7:a6:77:9f:60:
12:37:c0:04:d1:82:d6:bf:19:22:f7:48:61:2b:41:99:c3:52:
58:d8:53:5a:48:e4:92:e4:1b:80:3d:d1:8d:04:a5:dd:7c:9d:
64:ad:f3:19:0d:88:8a:75:e9:5d:a4:d7:db:55:5e:7d:51:d5:
cb:8b:af:14:de:9e:90:4e:e5:c6:7b:4b:d4:9e:be:88:57:17:
4f:d4:99:3b:bf:fb:e6:7e:60:9b:77:7c:f1:94:cb:af:22:ad:
59:38:b2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:42 2026 by rpki-client