Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
File: lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json)
Hash identifier: YK763sju4ARYk3sh3NQmf419eNbwu+WALdTllF3tO3U=
Subject key identifier: 90:68:C5:CF:12:3E:94:0B:41:F8:83:0B:4B:5A:CF:8F:0F:24:8C:B6
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Certificate issuer: /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial: 019CAAFD77FB11F33647DA03DB191B4CD354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
Manifest number: 0F90
Signing time: Sun 01 Mar 2026 20:01:03 +0000
Manifest this update: Sun 01 Mar 2026 20:01:03 +0000
Manifest next update: Mon 02 Mar 2026 20:01:03 +0000
Files and hashes: 1: hpL47SCSZrlNealKIc7LnC9PZp0.roa (hash: aYpQwmMiUXEwJ5X39H8U0kkfHeCdBOKpUZxQ3nISq/k=)
2: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: bCAtk/jEUyaNe4TDKhXyiKVtHzRmWRsuG7dFYKmN/3U=)
3: pw0RXXsD6LUrqOPEq8MgqL2qpD0.roa (hash: 917pV46CquJ4To8++B0OiVsGyf2fknUas8X+vyjzrnQ=)
4: uW3Eqs7Ri1lpnJVP-zAoNcXwTHM.roa (hash: /f9zR5HqJoOd5VfNKyewt9lLgfvwRHYV5D7mc7m8SfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:77:fb:11:f3:36:47:da:03:db:19:1b:4c:d3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Validity
Not Before: Mar 1 20:01:03 2026 GMT
Not After : Mar 2 20:01:03 2026 GMT
Subject: CN=9068c5cf123e940b41f8830b4b5acf8f0f248cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:43:3c:e7:b4:22:92:ab:20:6f:8c:97:b4:
72:d1:54:5a:2b:fd:6e:ae:92:cb:51:ab:e1:8e:a1:
15:f3:51:af:f0:82:44:f7:6b:d1:22:b4:a7:33:a3:
bf:27:ea:d4:5d:e0:e7:b3:ec:5f:8a:cc:84:20:91:
b4:c2:40:a7:c6:b8:18:20:2c:af:f7:55:b9:83:cf:
7e:6e:f2:1f:1c:10:80:10:10:d1:35:ad:5e:9f:1c:
ae:6c:53:43:a8:cd:0b:26:78:e4:de:bb:76:a5:1a:
48:4d:f2:e4:d2:ca:b3:01:65:69:59:b3:21:a0:e7:
f0:e0:39:32:20:bf:da:f6:08:fe:60:ab:96:da:fc:
80:f4:04:b7:bf:e8:b2:62:39:44:c5:db:19:b6:63:
2f:92:50:57:ae:fc:97:38:27:74:f5:3a:4b:ff:75:
fa:92:e2:99:8e:ce:b4:b5:7d:30:90:8c:6f:cd:c8:
43:56:1f:34:d3:d6:ee:00:4e:f5:5c:86:f9:f0:ab:
9c:7a:c8:14:27:8d:0a:90:08:86:50:da:fa:31:59:
9e:6c:57:8f:0b:26:db:f1:ca:15:0d:81:a7:d7:b5:
4a:5d:8d:12:59:46:5e:c8:ec:80:a0:f3:ff:1e:27:
14:c2:85:5c:70:e3:b7:e0:d0:8d:a9:02:a9:72:b4:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:68:C5:CF:12:3E:94:0B:41:F8:83:0B:4B:5A:CF:8F:0F:24:8C:B6
X509v3 Authority Key Identifier:
keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0e:92:27:7c:fd:b0:d6:22:a6:37:17:25:38:5b:63:40:02:
a2:3f:63:22:c4:4e:50:6b:c8:29:24:3f:0e:6e:65:01:7f:d8:
14:be:21:47:21:9b:4d:9e:28:16:9f:32:b2:8d:ab:ce:28:d6:
bc:55:35:0b:36:61:ef:4a:a6:cd:7c:0d:1c:36:b1:b2:11:c7:
b7:bb:83:c0:ea:8f:d8:34:7e:2a:7d:52:65:ac:37:69:db:8b:
6f:7f:b6:a8:80:8e:74:72:81:c9:3d:a1:19:88:77:d0:ae:5c:
63:7e:3b:ea:8a:81:50:7a:f2:93:7a:7b:71:88:5f:00:55:9f:
27:27:a5:d3:46:17:69:83:96:75:86:a5:6e:63:a3:b7:dc:4f:
24:fc:3a:7e:50:b4:e1:6b:f1:8a:85:0e:63:55:de:12:56:b8:
ab:b7:ef:d1:a0:89:92:3a:39:3d:49:cd:24:85:ef:c0:9b:5b:
59:20:4c:78:af:8b:ca:7a:3e:6b:1d:4f:ee:13:93:50:27:dd:
a9:b5:84:b7:8c:ef:ec:6a:29:20:36:06:6e:43:f2:10:44:5f:
e6:d9:fe:6a:a9:af:df:f6:75:d2:74:09:88:35:79:3b:9f:0b:
6c:da:3a:a3:59:f8:83:a0:c0:9a:93:c5:6c:a4:60:a6:3c:a1:
87:2e:b8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:34 2026 by rpki-client