Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: WIeNejzBrl3X6afOd1NAr5WnEOHa5VPGk/ktaL2gEAQ=
Subject key identifier: B1:89:16:21:11:D6:43:A4:88:E6:CC:CC:A7:7B:CB:A7:80:DE:B1:47
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 01A0E81C49D350A4B305BCF0301FF3E59B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 08D1
Signing time: Mon 28 Sep 2026 13:02:42 +0000
Manifest this update: Mon 28 Sep 2026 13:02:42 +0000
Manifest next update: Tue 29 Sep 2026 13:02:42 +0000
Files and hashes: 1: 9lZ-yzBoTL2Q3tEfTGvAJ31AkaI.roa (hash: mZ5mTYqzMf+60QDXA/A80xWmGAZGWKbUo1eAsowQ3Ow=)
2: Yha1UjCg0bYTT2iIVJMZtFAgxEU.roa (hash: dVgYPXPBCxJJox+uQJ6Z0WgrgA/2WvOp6YXY7a/W6os=)
3: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: VVsg/nlP6KUM8Gv1SQFSxhaDlyLX+5xL4vwTNwEAVKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:49:d3:50:a4:b3:05:bc:f0:30:1f:f3:e5:9b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Sep 28 13:02:42 2026 GMT
Not After : Sep 29 13:02:42 2026 GMT
Subject: CN=b189162111d643a488e6cccca77bcba780deb147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:c5:a2:04:81:0e:72:74:d8:c7:c8:49:44:
1d:86:39:d0:87:57:33:34:c7:b1:ff:e7:1f:f1:f1:
19:34:cf:67:ba:36:93:ba:ad:50:be:d2:1d:ab:83:
bb:f2:c8:79:0d:ab:49:63:d6:7e:76:56:fb:cf:9e:
49:de:b4:75:85:10:3b:65:e7:6c:08:df:78:c7:cd:
53:1d:38:a8:14:3a:46:c0:ca:5d:a4:58:c7:91:cd:
54:89:9c:52:d4:39:1c:59:7b:40:51:07:65:c5:ff:
1b:fd:a5:a5:ee:33:cb:2b:13:f2:1d:c8:57:cb:ea:
48:cc:ac:e7:9e:a1:62:99:da:19:db:c3:5f:fd:6f:
0e:47:7b:e1:86:2b:0c:85:67:19:d1:40:03:8e:52:
e0:d6:58:77:f6:74:3f:60:3c:46:0b:b5:73:61:06:
c2:97:74:87:3f:89:59:29:4b:58:d5:b5:18:04:24:
04:08:3e:f4:b5:fb:d3:da:37:c7:ce:ae:b4:32:8d:
a4:d8:f8:4e:49:af:c3:68:79:eb:6c:69:7a:2c:c4:
2f:7e:38:60:ae:c9:dc:05:b7:de:2f:d6:fc:fa:19:
cb:c2:41:6f:dd:82:b6:09:b0:a5:be:b4:36:b1:04:
73:5e:54:e1:eb:f9:08:a5:80:e3:f3:fc:77:6a:58:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:89:16:21:11:D6:43:A4:88:E6:CC:CC:A7:7B:CB:A7:80:DE:B1:47
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:39:c2:59:6e:d8:f4:de:9f:54:04:80:32:c4:cd:63:cd:02:
64:8f:e3:29:53:4a:a7:67:c8:7f:95:e1:2f:3a:54:ca:f6:45:
29:45:52:16:6c:45:16:60:07:e1:8f:66:34:28:4f:3f:07:34:
be:7b:fd:fb:70:d7:07:84:0c:4c:07:21:ad:aa:05:99:5e:9b:
bc:bf:b1:ea:7e:be:ac:77:52:c8:cc:a8:6a:f7:a4:13:22:09:
e7:50:bc:4b:42:78:a3:db:18:14:ae:55:88:e9:b2:aa:c5:27:
31:dc:1e:67:ce:84:90:d4:89:55:f7:da:57:2b:1c:eb:41:a2:
0f:b7:c9:b0:36:85:3f:ab:98:59:7b:96:3d:ef:9a:65:93:56:
f4:4c:82:c9:a0:5b:60:be:59:71:78:d5:db:8e:0a:a5:5c:f0:
df:c5:d9:fb:bf:3e:2d:55:73:2d:24:99:63:0d:31:67:24:15:
00:09:dc:8e:fd:d8:ea:a5:c6:c4:03:2b:76:0e:9f:ad:f7:d4:
44:4c:f0:f0:1b:8d:0d:b1:ba:e7:4f:24:49:14:bb:fb:6c:fe:
ae:87:4a:97:41:2a:09:b7:fb:94:ea:05:2f:db:b0:ba:ce:e3:
d9:e9:9b:ca:1a:ff:27:23:48:4b:54:c0:36:14:c7:16:35:5f:
2a:cf:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:43:51 2026 by rpki-client