Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier: 9pBQC+5cw2jms7iGpwReHpDcKIrvNt/a0o7CVPi0Lbs=
Subject key identifier: 01:6C:EF:32:DB:C8:81:B7:9B:25:82:64:FF:61:76:40:52:01:7F:BF
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial: 01A0DC8525E10C1019A03E4B2347BF7FB918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number: 14A4
Signing time: Sat 26 Sep 2026 07:01:48 +0000
Manifest this update: Sat 26 Sep 2026 07:01:48 +0000
Manifest next update: Sun 27 Sep 2026 07:01:48 +0000
Files and hashes: 1: MxY3wYjJf-HzpELgQOqWr-CuO5k.roa (hash: esg/AqYi4A1ugA5X6Pi57Y+6AvgsMKQZF7yVPFwOVOY=)
2: ha3A5YiON6pwuQbKycX4Nu-iCJU.roa (hash: /mkj5tkVuu0LcdOKt7MFz4DExlQhsM54fwEEAhXdQGE=)
3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: wIWOCGe40xXi32zCv+IpqzE0DCzRs/jnIKBh3FZ8m+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:25:e1:0c:10:19:a0:3e:4b:23:47:bf:7f:b9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Validity
Not Before: Sep 26 07:01:48 2026 GMT
Not After : Sep 27 07:01:48 2026 GMT
Subject: CN=016cef32dbc881b79b258264ff61764052017fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:59:a7:0c:6b:c4:f9:6c:20:dc:da:3b:d7:d0:
2d:04:95:be:99:32:22:7b:9f:1d:4e:25:54:28:a4:
20:24:54:ac:a9:95:67:32:d4:cc:83:44:97:b9:a6:
81:0c:27:c2:13:d3:36:1d:92:9a:a4:6c:cf:88:61:
5e:3c:e2:6e:d3:ad:86:4b:fc:1a:83:f4:9c:71:e7:
bc:03:b2:93:0c:4e:2a:cd:1c:36:8e:15:1c:03:74:
e8:67:4b:43:71:43:58:c8:a7:31:a7:ff:de:f7:17:
fe:9b:79:25:56:0d:51:e2:fd:ae:19:ca:ad:b9:fa:
ad:06:de:12:0e:aa:d1:14:bd:b5:f1:83:4e:3c:8a:
60:83:3a:7d:3f:5d:16:52:cf:8e:cd:a7:b5:36:64:
8b:e5:a6:9c:6b:dd:c8:ff:84:7e:3f:44:ed:35:1b:
11:ea:0a:2d:83:b9:f7:df:3c:92:1a:54:4c:89:17:
88:0f:c9:66:f3:4b:63:b2:02:7f:8f:54:3f:c2:7e:
92:96:57:54:2c:db:79:7b:a6:8c:96:e3:30:ba:30:
7e:47:94:47:07:41:f6:49:3d:5f:6c:e9:83:55:23:
aa:90:2b:cb:04:b7:0b:b9:dc:59:42:8a:a7:27:a0:
6a:7f:7a:e4:3e:b6:be:89:44:3a:c3:c5:39:f0:d6:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6C:EF:32:DB:C8:81:B7:9B:25:82:64:FF:61:76:40:52:01:7F:BF
X509v3 Authority Key Identifier:
keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bf:fa:91:bf:be:a3:80:cc:f9:97:ee:5e:c9:7b:0c:de:d4:
5b:a7:ab:11:1e:58:40:9f:12:31:32:1d:27:c0:59:9a:a3:7a:
b9:12:56:05:6f:62:1b:d8:3a:c0:3e:c9:7b:d6:ed:fa:c0:e2:
42:7a:ef:41:de:89:8d:fe:40:ab:87:39:a3:30:39:55:2e:ca:
cc:c1:36:ff:ab:3c:de:57:e9:9b:85:50:e9:6e:27:5d:86:32:
e0:d9:ac:ca:8b:39:af:39:32:b1:3b:cf:fd:53:70:cc:94:d2:
61:d8:e3:ba:49:1d:42:48:cf:82:33:8d:43:ca:d2:74:9c:cd:
1b:73:63:b5:5a:9e:27:1b:69:43:19:af:2b:e9:46:d6:27:b4:
e7:4d:4c:c3:36:4b:93:67:a1:94:bb:ee:4c:66:5b:2e:11:6d:
bf:e8:d4:23:3c:b0:6d:1a:13:09:1e:96:58:6b:e3:5a:01:9b:
bd:ce:bc:bd:be:0b:81:08:d9:e9:e6:8e:fc:f8:4b:3a:bd:c2:
f4:da:58:3f:cc:8f:ae:a7:db:0a:66:c8:76:bf:39:80:7b:28:
7e:f9:39:9b:2a:37:ea:9e:94:93:13:4d:e7:d6:f6:b7:9f:c6:
8c:44:af:f8:28:1c:ea:7a:d9:7e:fc:44:0c:b9:9e:df:c4:5f:
67:fd:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:12:58 2026 by rpki-client