Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
File: LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft (raw, json)
Hash identifier: RkAE8hcba+6ZG/M8ehA2BLY0IJ7SGJZzhxhlXC+JT9Y=
Subject key identifier: 82:34:F3:EA:47:89:BF:9E:0A:74:8B:2C:F8:57:79:81:DB:54:B8:2B
Authority key identifier: 2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2
Certificate issuer: /CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2
Certificate serial: 019D284E07555FE17B20B1553325AAFC39B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
Manifest number: 0242
Signing time: Thu 26 Mar 2026 04:01:35 +0000
Manifest this update: Thu 26 Mar 2026 04:01:35 +0000
Manifest next update: Fri 27 Mar 2026 04:01:35 +0000
Files and hashes: 1: GxprRy6go3u5_DAdndXbJ5nUbwg.roa (hash: 2ASCUCuWedqY/SvOcJo00rP++cWKEIODdp7vE3Sk8Vs=)
2: LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl (hash: VJSlLXxU+AssVuAPGGx5/Zh/eNT7FFo06bGyQUWV0xc=)
3: esQ4LQtwMGAVPfo5Iqwd6J1wFFg.roa (hash: Zp5wls9Z57v3c+rmph9lPmQEqF9p8BKAcLAfNlb+aO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:07:55:5f:e1:7b:20:b1:55:33:25:aa:fc:39:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2
Validity
Not Before: Mar 26 04:01:35 2026 GMT
Not After : Mar 27 04:01:35 2026 GMT
Subject: CN=8234f3ea4789bf9e0a748b2cf8577981db54b82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7f:d5:d1:64:ab:cf:02:37:bc:ce:9f:75:d0:
92:3a:35:be:3a:c0:6b:5e:72:d6:3c:4f:ce:ad:3e:
b9:11:35:12:de:c3:7f:f1:d5:fd:67:a7:1f:a9:51:
6b:93:1b:e7:52:31:61:46:f4:09:12:d7:11:43:91:
b8:a0:17:3b:6b:d8:f3:d3:eb:9a:ce:9d:24:f1:ec:
63:81:10:32:d2:ef:3c:37:44:43:e7:f9:fb:f3:59:
6f:44:a6:9f:26:ee:19:a9:62:92:4b:1d:6e:80:4e:
9b:37:10:4c:3f:64:37:56:b0:dc:16:e1:a0:86:fa:
76:c5:5a:07:df:3f:36:52:c6:bf:ca:b3:d0:79:7e:
fc:0a:3d:8f:81:f6:48:78:c4:06:29:2c:6b:cb:cf:
d6:f5:40:4a:82:b7:bd:16:43:57:0d:dd:af:93:10:
8f:b9:2b:8a:a4:b3:11:12:29:db:9e:9b:7e:0b:d4:
73:cb:a0:47:ab:3a:5c:d6:7a:9d:1a:64:b9:01:c4:
2c:2b:c3:6f:dd:56:32:c0:c7:d0:62:3c:f1:c8:4a:
4f:0c:06:3a:c1:ff:b2:73:fa:16:b1:55:55:6b:93:
b3:88:d4:c3:c8:c5:d7:45:ea:29:26:1f:d8:23:3b:
51:93:41:60:f2:ca:a6:03:e0:86:c8:77:09:d7:2b:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:34:F3:EA:47:89:BF:9E:0A:74:8B:2C:F8:57:79:81:DB:54:B8:2B
X509v3 Authority Key Identifier:
keyid:2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:24:91:22:ce:2a:cc:de:f4:f7:67:0c:57:ac:5f:bb:5c:84:
fc:6f:d9:4d:69:81:0d:58:35:af:e6:3f:b1:4d:72:cc:6c:ce:
10:5d:96:43:98:e9:1d:99:a8:b1:99:7b:06:8b:59:f7:0c:6c:
0f:d2:84:40:21:e8:51:59:10:1b:5c:c1:00:f7:e9:bb:f0:cb:
97:6e:ba:c0:d9:bd:fa:39:99:19:dd:5a:7a:da:71:df:45:38:
ea:25:32:ee:9a:23:60:48:61:00:87:e5:a6:a0:5f:dd:ad:73:
96:54:f4:5e:ae:bc:3b:b5:43:1e:81:69:8a:4b:58:07:27:4e:
38:e8:36:e9:e4:cd:26:70:b2:18:bd:7d:2b:64:8c:a2:34:28:
9f:ec:9a:ac:ed:62:2a:ed:b3:21:32:53:ca:36:c1:cf:33:1a:
a1:d6:43:92:5d:78:d7:84:60:51:6a:2e:ca:f7:3b:20:e3:6c:
9c:17:f3:e6:76:f0:54:63:83:8a:84:3b:34:09:1b:a9:ec:da:
0c:f8:27:07:a6:43:7f:3a:f4:26:98:e4:d8:bb:f4:9d:bc:9c:
d5:05:2e:90:da:ff:e5:6e:ac:8e:34:6d:62:bb:12:75:d8:d9:
c9:63:86:83:12:f9:bf:05:ed:6c:9d:ac:65:70:0a:4e:89:3d:
20:31:26:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:34 2026 by rpki-client