Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: 0v5cdKsKBowha5t2KIvyrFhXvuLya4jqP9OXi0+FdkI=
Subject key identifier: 07:AF:91:9B:93:2E:84:EE:52:70:B0:BE:CB:4E:64:9A:5C:FC:05:13
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 01A0DE72DA26AA7291648FA777CFC0F24A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 08CC
Signing time: Sat 26 Sep 2026 16:01:03 +0000
Manifest this update: Sat 26 Sep 2026 16:01:03 +0000
Manifest next update: Sun 27 Sep 2026 16:01:03 +0000
Files and hashes: 1: 9lZ-yzBoTL2Q3tEfTGvAJ31AkaI.roa (hash: mZ5mTYqzMf+60QDXA/A80xWmGAZGWKbUo1eAsowQ3Ow=)
2: Yha1UjCg0bYTT2iIVJMZtFAgxEU.roa (hash: dVgYPXPBCxJJox+uQJ6Z0WgrgA/2WvOp6YXY7a/W6os=)
3: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: y08bB1KudZK3QBXPrfhk7Sdj30+dMfQtgpfG3hTq2AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:72:da:26:aa:72:91:64:8f:a7:77:cf:c0:f2:4a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Sep 26 16:01:03 2026 GMT
Not After : Sep 27 16:01:03 2026 GMT
Subject: CN=07af919b932e84ee5270b0becb4e649a5cfc0513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:cc:23:e5:86:f4:a2:3f:1f:17:de:22:0f:
5d:22:59:03:d7:e0:67:a5:d9:4d:33:a8:d8:1b:4d:
8d:d7:8b:55:fd:20:88:21:4d:4b:9e:6f:f5:c7:0d:
77:f5:27:58:47:46:fd:b7:87:b5:3e:81:42:08:e0:
fe:83:06:db:b4:92:be:37:90:04:74:91:18:06:71:
65:74:8b:5f:49:c2:82:77:6d:1b:b1:14:7a:5e:cd:
93:0d:6c:94:f3:4c:3d:13:35:06:b5:1b:bb:fd:78:
93:06:c1:e7:77:c3:92:ad:36:22:ad:4b:e4:2d:23:
4a:98:18:d7:f9:8a:10:a7:95:a1:63:d8:9b:73:79:
8b:03:1a:e0:8b:3c:ee:0f:6e:5b:80:f3:e8:cf:10:
71:1e:05:23:e7:fb:2d:d6:bb:78:d0:51:29:36:c4:
a3:6f:cb:57:0f:c7:2a:2d:9d:86:1d:44:78:ab:ce:
d6:46:96:65:3c:b6:96:29:85:5e:64:fe:4d:0e:c9:
53:35:03:3a:9f:c1:5c:95:28:19:ba:9c:ef:3b:4f:
bc:a1:dc:21:09:ff:60:56:2f:f0:e9:28:7e:07:ac:
97:06:de:38:a4:c3:37:e3:0f:39:0d:f2:e0:8d:0a:
2e:97:f2:96:3d:4d:3a:d7:ed:ff:f6:a7:96:62:df:
f8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AF:91:9B:93:2E:84:EE:52:70:B0:BE:CB:4E:64:9A:5C:FC:05:13
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:63:63:d3:48:d3:2b:83:fb:6e:86:2f:ca:fa:47:08:93:46:
76:8b:32:7a:be:f0:34:ae:44:bd:d7:e7:de:4d:77:9f:5e:13:
4e:5d:fd:e9:36:7b:45:fc:24:73:88:18:09:f1:94:12:07:9f:
d8:fc:f5:c2:78:b3:95:49:f5:48:9d:ac:79:3e:a9:3e:ed:c5:
db:8e:fc:7f:ab:bc:92:51:f8:20:cd:c6:43:fc:0f:b2:8f:8a:
79:88:a0:a3:72:17:84:0d:b7:1b:9d:0b:57:c5:52:89:34:db:
33:aa:78:42:28:e1:93:ad:6f:97:b2:31:be:11:5d:0d:6a:cf:
3b:39:48:e3:5f:10:ad:c2:22:10:9f:95:09:ac:86:e6:69:d4:
7e:2b:31:9e:43:99:a1:5b:6f:9c:3d:a9:9b:d8:05:19:ec:a6:
a6:40:e2:19:bb:44:4d:87:34:e9:b0:0a:4f:cc:27:a9:60:13:
45:48:8c:06:78:8c:ec:82:4f:cd:d3:df:40:40:66:51:b7:8d:
d1:04:a2:a8:f3:de:b6:2b:fb:1d:9b:d7:0b:a5:dd:59:28:06:
4b:e9:38:6c:99:93:a5:43:95:9c:4d:33:61:63:67:c6:9a:2c:
50:08:33:e8:21:82:2d:ad:a9:77:93:83:3a:49:34:37:9a:27:
06:3c:5b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:33:01 2026 by rpki-client