Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
File: _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json)
Hash identifier: wbl+ag8/13MmtkMOzy43HS4Xs4uoUBABCI/IPGTobo4=
Subject key identifier: 2B:7C:54:27:20:1B:3F:5F:AB:E8:14:37:8C:6D:C4:6D:A8:EC:33:3D
Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Certificate issuer: /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Certificate serial: 019D2961CA973E0E50D4D7204E6EEFFA3497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
Manifest number: 06A3
Signing time: Thu 26 Mar 2026 09:02:47 +0000
Manifest this update: Thu 26 Mar 2026 09:02:47 +0000
Manifest next update: Fri 27 Mar 2026 09:02:47 +0000
Files and hashes: 1: M-XgOjesPXIogjBIQr0FL2b7KV0.roa (hash: cfiY/wJuu827u4/W0gn3sJ9LCmjPRCXCxBqRyHWf5wA=)
2: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: 4ldO0tY3UQ5FxiXnbzzl9WeJEcWGfP+npDiqd/hf/5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:ca:97:3e:0e:50:d4:d7:20:4e:6e:ef:fa:34:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Validity
Not Before: Mar 26 09:02:47 2026 GMT
Not After : Mar 27 09:02:47 2026 GMT
Subject: CN=2b7c5427201b3f5fabe814378c6dc46da8ec333d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f5:81:ba:d9:94:85:89:18:a5:19:3b:d7:a5:
6e:22:d0:25:c4:01:74:b7:ba:c1:50:96:03:c3:86:
58:02:fb:5a:4b:06:0d:80:20:d1:49:66:27:b6:5d:
c5:23:c9:73:78:59:e5:c9:0f:26:c4:00:9a:a6:41:
94:d2:d0:3f:9e:59:fb:f7:83:8b:39:7b:3d:7b:2d:
33:ba:0d:05:24:1c:70:27:b0:09:2d:39:aa:ad:01:
92:d7:14:0b:15:a7:41:35:3b:98:22:ee:6d:db:be:
62:cb:26:fd:b9:3e:ec:51:1a:bc:65:a5:f2:80:5e:
08:19:3f:ed:ba:83:d2:3a:01:8e:dc:82:62:4c:67:
e2:97:d0:8a:39:6f:10:3a:b9:99:ae:dc:47:27:20:
5f:1e:6a:9f:9e:3f:1d:62:96:46:36:53:64:b1:ef:
2e:72:39:55:14:89:e4:7e:13:1c:ab:de:09:90:83:
4d:03:b8:0f:c8:1a:55:86:f3:83:10:fd:68:ea:ec:
2c:a2:11:9c:bb:5d:33:42:c0:98:92:20:33:a0:2b:
17:4c:58:1a:7c:3b:fa:c6:8a:03:8c:bd:44:7c:c3:
21:9f:c3:2e:42:6f:89:36:46:a7:83:55:92:c7:18:
5b:f0:58:21:53:32:fd:32:3c:4c:41:17:3d:77:79:
c6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7C:54:27:20:1B:3F:5F:AB:E8:14:37:8C:6D:C4:6D:A8:EC:33:3D
X509v3 Authority Key Identifier:
keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:86:9d:2b:49:0b:f2:f2:5f:a3:0e:4a:31:a7:7a:03:5c:fc:
cb:55:f1:85:ae:c6:1f:27:3f:4e:47:2e:d5:cb:6c:62:7e:64:
d2:d7:6f:8b:41:e6:19:d4:c2:b4:6d:28:83:2d:08:66:3a:b1:
9b:9d:cc:c2:bf:73:5a:a6:71:2e:48:2b:7d:b2:22:65:83:fe:
58:19:b6:19:d6:5b:70:57:5d:4a:23:1a:0e:33:75:b2:06:26:
7c:76:e0:d1:ab:58:51:49:32:db:62:2f:55:20:a9:c4:cc:d4:
2e:21:9d:a6:a3:88:58:7e:1b:ce:c8:db:48:75:7a:7f:f5:05:
13:3e:2a:d0:d7:dc:37:37:88:ee:94:77:bf:67:de:82:20:aa:
3c:88:1b:94:23:c2:3b:3f:f5:6d:c9:45:8e:4b:0f:cb:4b:c3:
53:bf:b8:15:c4:3c:f1:97:2e:8f:0c:25:4d:6e:be:a4:77:2a:
b3:7e:a0:95:09:cd:36:e0:88:59:9d:8a:3b:25:40:93:45:d0:
c3:ab:20:43:51:71:f8:56:d5:5e:cc:ed:2a:ed:5e:ab:3d:04:
55:d7:c7:c7:81:c2:cf:9f:0e:80:d0:8a:81:c2:9f:a3:99:27:
59:d3:3f:52:ba:39:b1:5d:89:02:c0:f2:af:54:1f:d2:c6:05:
3a:5d:26:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYcqXPg5Q1NcgTm7v+jSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjU1MGI3MTBkN2YwZjk0YjBjZTQzMmNmMGU0ZTk1MGNj
NGUxY2EwHhcNMjYwMzI2MDkwMjQ3WhcNMjYwMzI3MDkwMjQ3WjAzMTEwLwYDVQQD
EygyYjdjNTQyNzIwMWIzZjVmYWJlODE0Mzc4YzZkYzQ2ZGE4ZWMzMzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPWButmUhYkYpRk716VuItAlxAF0
t7rBUJYDw4ZYAvtaSwYNgCDRSWYntl3FI8lzeFnlyQ8mxACapkGU0tA/nln794OL
OXs9ey0zug0FJBxwJ7AJLTmqrQGS1xQLFadBNTuYIu5t275iyyb9uT7sURq8ZaXy
gF4IGT/tuoPSOgGO3IJiTGfil9CKOW8QOrmZrtxHJyBfHmqfnj8dYpZGNlNkse8u
cjlVFInkfhMcq94JkINNA7gPyBpVhvODEP1o6uwsohGcu10zQsCYkiAzoCsXTFga
fDv6xooDjL1EfMMhn8MuQm+JNkang1WSxxhb8FghUzL9MjxMQRc9d3nGMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCt8VCcgGz9fq+gUN4xtxG2o7DM9MB8GA1UdIwQY
MBaAFPy1ULcQ1/D5SwzkMs8OTpUMxOHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNWNmNjctZTI5Ni00NmU4LTkxOWMt
NDczYTI5YWMzMzYzLzEvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lNWNmNjctZTI5Ni00NmU4LTkxOWMtNDczYTI5YWMzMzYz
LzEvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4adK0kL
8vJfow5KMad6A1z8y1Xxha7GHyc/Tkcu1ctsYn5k0tdvi0HmGdTCtG0ogy0IZjqx
m53Mwr9zWqZxLkgrfbIiZYP+WBm2GdZbcFddSiMaDjN1sgYmfHbg0atYUUky22Iv
VSCpxMzULiGdpqOIWH4bzsjbSHV6f/UFEz4q0NfcNzeI7pR3v2fegiCqPIgblCPC
Oz/1bclFjksPy0vDU7+4FcQ88ZcujwwlTW6+pHcqs36glQnNNuCIWZ2KOyVAk0XQ
w6sgQ1Fx+FbVXsztKu1eqz0EVdfHx4HCz58OgNCKgcKfo5knWdM/Uro5sV2JAsDy
r1Qf0sYFOl0meA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:07 2026 by rpki-client