Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: thJXiZ1iDoVxfJ4jW57sF4zDmM0wnOVwV77SkEMyuvQ=
Subject key identifier: 0E:9D:9F:F9:95:9E:74:C8:EC:74:26:E8:6B:93:0D:26:8D:6B:19:89
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 019D265EE091AF445136C6031A4B4F7F5213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 06DF
Signing time: Wed 25 Mar 2026 19:00:45 +0000
Manifest this update: Wed 25 Mar 2026 19:00:45 +0000
Manifest next update: Thu 26 Mar 2026 19:00:45 +0000
Files and hashes: 1: 9lZ-yzBoTL2Q3tEfTGvAJ31AkaI.roa (hash: mZ5mTYqzMf+60QDXA/A80xWmGAZGWKbUo1eAsowQ3Ow=)
2: Yha1UjCg0bYTT2iIVJMZtFAgxEU.roa (hash: dVgYPXPBCxJJox+uQJ6Z0WgrgA/2WvOp6YXY7a/W6os=)
3: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: LjN5kkATly1SbEDMInUubYwmEVK98TMlwaGLgUuEQb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e0:91:af:44:51:36:c6:03:1a:4b:4f:7f:52:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Mar 25 19:00:45 2026 GMT
Not After : Mar 26 19:00:45 2026 GMT
Subject: CN=0e9d9ff9959e74c8ec7426e86b930d268d6b1989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:b9:61:e5:26:26:3b:e0:26:95:37:e4:2e:
c8:1e:03:56:f7:76:3b:d1:df:83:99:a5:4e:00:a1:
5a:75:9d:66:71:90:c9:e6:88:f0:96:23:9a:71:3f:
73:3a:56:23:53:5a:ae:88:60:bd:11:aa:dd:cb:a7:
e8:9d:b0:71:bc:77:d7:d4:d5:a5:40:be:24:c3:f7:
5e:8d:d6:60:d8:2f:9a:b6:51:b7:c4:43:ed:a3:05:
ab:17:c9:dc:ec:99:cc:05:3b:b1:c6:f7:a9:97:50:
2b:e3:83:73:96:8d:29:d9:ba:25:31:85:9c:99:3f:
f5:c2:01:21:5f:43:2e:f3:be:3a:43:f1:06:5c:69:
ff:d5:2f:35:f7:78:4a:40:e9:d8:30:e4:ba:dd:46:
94:24:e9:c1:de:3b:85:2d:85:03:8f:b5:08:d7:d0:
b2:d6:cd:3a:e6:50:99:f3:85:46:92:3d:c4:03:21:
6b:c5:14:11:a7:8d:c8:68:50:7a:71:db:11:5a:76:
ec:d7:9a:3f:d2:69:b8:83:07:a2:36:02:db:7a:e9:
e7:60:66:b8:f6:b0:b2:67:9a:12:de:e9:e2:74:11:
53:f8:0c:d2:41:0a:f2:65:a0:a6:25:69:76:43:b2:
a8:9e:99:de:ac:cd:59:b3:73:44:83:a1:0d:1b:be:
58:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9D:9F:F9:95:9E:74:C8:EC:74:26:E8:6B:93:0D:26:8D:6B:19:89
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:37:20:e0:70:b1:a0:91:88:44:1e:e4:e2:8f:13:ac:3f:02:
77:aa:ba:14:83:8a:04:0b:77:1f:07:23:e4:71:38:44:f3:9b:
47:d0:b4:70:b9:80:51:8d:ba:b5:67:b3:b5:7b:03:39:00:4e:
a8:6b:af:e9:0d:b5:76:c1:e2:46:4d:3d:96:50:c3:e3:82:f9:
dd:a7:69:e3:76:b1:8a:33:a7:86:1e:8c:ac:13:9e:58:e7:a5:
76:0b:df:6b:23:dc:ee:bd:db:ba:ed:2d:91:11:43:97:62:9a:
fc:18:4d:12:7d:88:33:d2:0b:78:fa:86:20:80:75:fa:09:f6:
9d:ab:01:c2:81:b1:9a:f3:1e:ea:37:d7:47:14:60:fd:85:e5:
9e:a3:c1:f0:6f:3c:dd:00:46:0d:de:e3:f8:c9:47:f7:5e:c6:
9e:2d:e4:a4:e0:72:b0:ea:3d:53:eb:9d:dd:be:be:7a:49:a9:
e1:43:97:4d:c4:d4:2b:a6:2b:14:27:e1:1d:07:75:5c:ea:a4:
81:f7:b5:2e:d9:d8:03:b7:3a:c7:76:8c:4d:77:74:c9:9c:37:
90:72:de:9e:8f:51:a5:42:f2:4f:6e:94:d0:82:20:eb:fe:39:
bc:62:a3:66:0a:24:8a:0c:ce:20:fe:82:87:25:f5:65:5c:e8:
69:46:b2:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXuCRr0RRNsYDGktPf1ITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZmNkYTEyOGZlODJhZmMwNmU4YWFkMWM4ZTVjY2RmYjM1
NTYxZTQwHhcNMjYwMzI1MTkwMDQ1WhcNMjYwMzI2MTkwMDQ1WjAzMTEwLwYDVQQD
EygwZTlkOWZmOTk1OWU3NGM4ZWM3NDI2ZTg2YjkzMGQyNjhkNmIxOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEC5YeUmJjvgJpU35C7IHgNW93Y7
0d+DmaVOAKFadZ1mcZDJ5ojwliOacT9zOlYjU1quiGC9Eardy6fonbBxvHfX1NWl
QL4kw/dejdZg2C+atlG3xEPtowWrF8nc7JnMBTuxxvepl1Ar44Nzlo0p2bolMYWc
mT/1wgEhX0Mu8746Q/EGXGn/1S8193hKQOnYMOS63UaUJOnB3juFLYUDj7UI19Cy
1s065lCZ84VGkj3EAyFrxRQRp43IaFB6cdsRWnbs15o/0mm4gweiNgLbeunnYGa4
9rCyZ5oS3unidBFT+AzSQQryZaCmJWl2Q7KonpnerM1Zs3NEg6ENG75YhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6dn/mVnnTI7HQm6GuTDSaNaxmJMB8GA1UdIwQY
MBaAFJb82hKP6Cr8Buiq0cjlzN+zVWHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81MzM4NmMtNDhjNS00MmVlLWJkMDkt
ZTUwYWJjOGU4ODQ0LzEvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81MzM4NmMtNDhjNS00MmVlLWJkMDktZTUwYWJjOGU4ODQ0
LzEvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxjcg4HCx
oJGIRB7k4o8TrD8Cd6q6FIOKBAt3Hwcj5HE4RPObR9C0cLmAUY26tWeztXsDOQBO
qGuv6Q21dsHiRk09llDD44L53adp43axijOnhh6MrBOeWOeldgvfayPc7r3buu0t
kRFDl2Ka/BhNEn2IM9ILePqGIIB1+gn2nasBwoGxmvMe6jfXRxRg/YXlnqPB8G88
3QBGDd7j+MlH917Gni3kpOBysOo9U+ud3b6+ekmp4UOXTcTUK6YrFCfhHQd1XOqk
gfe1LtnYA7c6x3aMTXd0yZw3kHLeno9RpULyT26U0IIg6/45vGKjZgokigzOIP6C
hyX1ZVzoaUay9A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:32 2026 by rpki-client