Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
File: LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft (raw, json)
Hash identifier: AqB0/2lUEa61RwVCnVpvrGIh+q8atV6LzUYnpWzBsVs=
Subject key identifier: CC:08:AD:D0:5C:4B:4C:3F:B9:7F:D3:57:BE:02:0B:8A:40:64:CA:3D
Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
Certificate issuer: /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Certificate serial: 019D284E09D8EED2F60BDAF6830F354C2EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
Manifest number: 0659
Signing time: Thu 26 Mar 2026 04:01:36 +0000
Manifest this update: Thu 26 Mar 2026 04:01:36 +0000
Manifest next update: Fri 27 Mar 2026 04:01:36 +0000
Files and hashes: 1: 6WiXlh5QhCuw_MVwaut0x2jiEEs.roa (hash: qUA6n5/TXrCPUvcsaToKEYv6wtNRYISXJDQml29JrEs=)
2: 94_6VQI2I2lo1u38qt6hn9A7wgw.roa (hash: NobqK3i7W7bFpKNzurxj01gS8em3bf9sK5Lxekb+0hU=)
3: LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl (hash: IHk+gOoPLVBsYCoeO6+ucnWeJDMJrq1UQ5jwkivLuTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:09:d8:ee:d2:f6:0b:da:f6:83:0f:35:4c:2e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Validity
Not Before: Mar 26 04:01:36 2026 GMT
Not After : Mar 27 04:01:36 2026 GMT
Subject: CN=cc08add05c4b4c3fb97fd357be020b8a4064ca3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ff:a5:68:be:6e:87:99:0b:25:45:8f:30:a0:
6a:7b:fb:dc:50:42:6b:60:42:05:db:96:17:fc:69:
b8:a3:5a:72:dc:72:4b:8c:9f:ca:b5:fb:2e:cd:df:
12:29:de:8e:3c:73:30:73:41:a4:36:4d:82:26:80:
b9:0b:51:4d:d6:aa:b7:bb:e8:5c:29:2d:a3:86:df:
6a:80:27:7b:f1:04:bb:af:bf:60:7b:12:4f:f1:cf:
bc:00:fd:a8:12:ee:c0:19:49:f5:3e:59:59:13:26:
93:02:5d:c9:b7:b5:65:2b:3f:ef:2a:77:d4:33:19:
18:69:39:40:f9:61:10:7a:0c:00:b3:68:60:97:f2:
4c:47:e8:9d:4e:47:a8:8c:6d:48:c7:71:6e:af:7e:
80:35:79:98:47:00:f0:d4:12:4f:8b:fa:0e:76:46:
51:cf:d0:60:b6:1e:a3:ec:16:6e:32:69:31:5c:79:
65:f6:45:98:1a:8b:68:35:77:9c:9b:5d:8f:86:43:
98:27:29:18:83:0f:04:c5:23:e1:bf:d9:95:1f:30:
29:9e:ee:6b:e5:cb:4b:43:e7:03:cb:f4:63:b4:97:
c7:14:fd:1e:f8:0e:05:f5:42:47:45:87:00:f7:4c:
90:cf:7a:1c:8b:2e:f5:2b:76:19:b7:ae:6c:27:f0:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:08:AD:D0:5C:4B:4C:3F:B9:7F:D3:57:BE:02:0B:8A:40:64:CA:3D
X509v3 Authority Key Identifier:
keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:31:1f:a7:33:e9:de:05:33:e8:ba:26:44:0d:7f:b5:af:49:
fa:1e:38:c7:8c:d7:d1:ef:b5:52:91:b0:56:16:12:ce:b6:93:
72:ff:1a:eb:4b:4c:3f:98:75:a5:30:de:ef:4e:a4:7a:3c:04:
6f:88:61:d8:f8:96:e4:c2:26:c0:7e:3b:32:7a:67:83:c2:24:
10:05:a6:c0:fb:f2:7a:1c:4b:d9:56:78:a2:bd:ae:49:e7:4d:
3b:a5:70:8f:f1:10:e9:af:13:81:be:ad:35:4d:74:03:00:ab:
9c:b7:e6:97:c5:23:5d:5a:f3:4c:3b:94:7f:94:25:c3:43:56:
f4:36:00:92:81:c3:8d:e4:9d:d0:d0:4b:0e:ce:21:48:da:da:
93:94:c3:df:d1:3c:dd:09:d8:77:26:cc:dd:02:4c:b9:f8:f5:
d2:2d:5a:54:2b:35:c5:74:d8:ff:d9:f3:82:c4:91:88:78:ef:
ef:f2:a3:81:76:73:f1:be:8a:57:37:a5:8a:24:47:06:8e:41:
03:37:dd:d0:e6:57:d3:d4:6e:3a:53:39:fb:c3:c6:08:11:9a:
82:47:c8:79:74:2f:e3:2b:51:5d:c2:ce:ab:40:9b:0a:33:57:
07:df:ea:34:a2:5e:b9:4e:22:a6:52:50:39:ff:a6:0e:b2:6e:
85:10:ff:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:03 2026 by rpki-client