
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier: xzBwBDl4c3EU0Oy9tMwjs6XTr15vSH889pz9q1G5QAk=
Subject key identifier: 07:F7:D3:85:5C:8D:2D:EA:A7:98:1F:DB:95:E9:7A:A6:0C:B5:DF:15
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial: 019DA3E6E8240364221E7CE4B6B2573B47E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number: 12F9
Signing time: Sun 19 Apr 2026 04:01:51 +0000
Manifest this update: Sun 19 Apr 2026 04:01:51 +0000
Manifest next update: Mon 20 Apr 2026 04:01:51 +0000
Files and hashes: 1: MxY3wYjJf-HzpELgQOqWr-CuO5k.roa (hash: esg/AqYi4A1ugA5X6Pi57Y+6AvgsMKQZF7yVPFwOVOY=)
2: ha3A5YiON6pwuQbKycX4Nu-iCJU.roa (hash: /mkj5tkVuu0LcdOKt7MFz4DExlQhsM54fwEEAhXdQGE=)
3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: 4MULB9lJO+49njnNE8K6r/pDne+lI6OJ+yHFC8LNa6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:e8:24:03:64:22:1e:7c:e4:b6:b2:57:3b:47:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Validity
Not Before: Apr 19 04:01:51 2026 GMT
Not After : Apr 20 04:01:51 2026 GMT
Subject: CN=07f7d3855c8d2deaa7981fdb95e97aa60cb5df15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:e5:dc:4b:48:f6:a7:ef:ff:cd:53:a2:18:
48:b9:2d:94:c4:23:43:6c:c9:44:f4:68:af:59:a9:
69:07:0d:55:7a:60:ac:3b:d2:47:3a:02:f4:4b:73:
a6:76:be:52:b2:4c:2f:99:be:ac:f5:0d:49:1c:9b:
91:d4:5d:1a:7b:c7:d8:cd:7b:0f:af:c2:0b:34:df:
0f:7e:05:91:77:2e:a5:6d:66:65:9a:6c:a3:51:ae:
81:ea:03:1e:ca:96:36:a3:bd:1c:39:5f:2f:a1:58:
85:b0:d7:7a:10:49:75:b0:40:66:c4:5b:20:76:83:
d9:cb:70:a5:52:0a:c5:fe:50:1c:70:c2:3a:77:5e:
11:db:39:5a:28:03:64:04:fd:3c:e5:88:f2:7d:bb:
c1:ae:bb:30:7e:a0:74:f5:13:8b:df:4d:e0:2e:cb:
d5:1e:4e:c9:05:25:1a:f0:19:a1:76:ff:85:d5:33:
32:89:11:5b:c4:c6:60:f3:1b:5a:da:25:86:f5:9f:
e8:b6:be:ad:67:ec:c0:6f:8e:c7:75:35:23:6e:73:
43:36:39:d8:bb:6d:25:b0:ae:a8:e2:8c:5a:69:5c:
05:ad:6e:f2:19:e1:e7:dd:d4:c2:e8:b4:a6:1a:d5:
8b:ed:f4:2b:37:f5:9f:ae:25:68:f1:3d:db:72:a9:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F7:D3:85:5C:8D:2D:EA:A7:98:1F:DB:95:E9:7A:A6:0C:B5:DF:15
X509v3 Authority Key Identifier:
keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:37:18:ef:22:7a:ae:ef:4c:60:7b:3c:87:26:9f:79:3e:42:
b4:7a:b4:e7:c9:fd:66:63:7b:be:17:7b:a8:40:fc:bf:f6:d0:
32:b7:45:64:90:42:ae:8a:2e:1d:1e:d4:09:32:4d:83:77:46:
6f:f9:ed:93:af:c6:b5:46:f9:2f:29:79:d5:d8:8f:4d:4e:c4:
b6:9b:90:b6:df:80:3b:8c:61:a3:ca:ed:a4:28:70:05:4a:2d:
45:22:c4:e4:80:de:07:5c:bf:d1:a2:b0:e1:ca:b7:b3:b7:0b:
7c:41:00:99:90:4b:f7:90:ce:b2:25:04:b0:29:2d:15:40:4b:
7b:da:7f:0e:91:71:ee:7b:76:b6:56:10:36:87:73:2b:09:58:
ea:6c:19:be:e6:d9:76:b6:0b:ba:f4:99:7c:ff:ae:6d:99:31:
84:56:ba:ab:2c:7a:f4:e0:f6:3d:55:f1:84:d3:ca:62:08:c7:
cf:0b:6d:3a:e9:c9:d6:5d:f3:bb:9a:d5:51:1c:c2:f1:bd:f1:
16:67:a4:22:08:2e:62:79:9c:99:c1:0a:cd:cb:74:1c:e5:86:
6e:95:81:83:c9:3d:89:0b:01:a0:84:db:33:ba:2a:b6:85:dc:
66:0a:ff:55:88:cc:29:7c:1f:4c:e0:67:6e:37:02:6e:6f:2a:
a9:97:60:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:03:15 2026 by rpki-client