Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
File: LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft (raw, json)
Hash identifier: +UaUxlk3ABGz0p5TFU/OJH43NAKpPPA/8hHI8NSDVYI=
Subject key identifier: CA:8F:F3:F6:9F:D4:65:A7:B4:AD:6C:B7:59:0C:E8:22:74:5C:5D:A4
Authority key identifier: 2D:50:36:35:7F:BC:3C:A3:08:66:AD:E0:63:26:2A:D0:D4:40:B6:60
Certificate issuer: /CN=2d5036357fbc3ca30866ade063262ad0d440b660
Certificate serial: 01A123F853D19026F62BA20A5FCC05A1433F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
Manifest number: 01AA
Signing time: Sat 10 Oct 2026 04:00:39 +0000
Manifest this update: Sat 10 Oct 2026 04:00:39 +0000
Manifest next update: Sun 11 Oct 2026 04:00:39 +0000
Files and hashes: 1: LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl (hash: r1wNjCjxrMjXjaIJg+j9fPa8G8wrd6Z/Vg9FkfNl/4A=)
2: Rpy7QWovYwdZQAvT1XL6SDhlWtw.roa (hash: Z7pDSRPHr8DmCaGGeQ16hWhefhTjEYXfJeW0Mr0f2Qs=)
3: wDbeUy5vMGU92nZCGMGGt4_gvPU.asa (hash: izW7X2u98Zh+LrJ8/PtYNnVCPiYS+v78ooSttWUx0mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:f8:53:d1:90:26:f6:2b:a2:0a:5f:cc:05:a1:43:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5036357fbc3ca30866ade063262ad0d440b660
Validity
Not Before: Oct 10 04:00:39 2026 GMT
Not After : Oct 11 04:00:39 2026 GMT
Subject: CN=ca8ff3f69fd465a7b4ad6cb7590ce822745c5da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ef:54:86:ec:3d:cb:af:49:6f:30:57:98:f7:
d2:b6:75:53:b1:4c:12:e2:15:79:1a:9d:48:f4:d6:
ca:4f:16:b3:33:dc:44:b6:79:92:27:d9:b4:54:ac:
1c:70:6a:1a:80:9b:d0:97:44:b8:0e:7e:17:c7:a3:
8c:a0:05:1f:18:e9:b7:fc:f7:14:31:a7:cf:8c:b5:
b3:0f:a7:61:ae:7f:02:40:8f:ac:83:65:6b:4a:1f:
af:26:a0:7d:f6:48:97:e2:8d:38:bb:55:41:77:b8:
c3:cc:a4:32:52:d6:ad:2d:1b:cd:b6:6f:3f:3b:96:
9a:d0:c6:41:2a:fa:b1:68:41:14:dd:ba:52:76:8e:
62:86:0d:ee:1b:e7:c9:e5:e8:ac:bf:40:4d:25:68:
97:89:de:f6:aa:f7:c7:47:a2:a1:17:98:76:8d:41:
97:42:d3:10:db:b2:18:0b:da:41:b5:41:57:16:9f:
39:57:dd:40:ee:26:3b:8c:28:71:b1:f4:95:79:b2:
4a:2e:48:43:08:be:de:7a:2b:c0:37:16:ce:98:23:
64:9a:e1:11:a7:f2:da:52:05:fa:b3:b1:ca:f0:a5:
f9:f1:cd:f0:ce:57:29:21:0e:66:b0:14:90:b1:06:
7b:32:8e:92:73:d5:93:36:32:6f:13:e2:d8:b8:9a:
8f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8F:F3:F6:9F:D4:65:A7:B4:AD:6C:B7:59:0C:E8:22:74:5C:5D:A4
X509v3 Authority Key Identifier:
keyid:2D:50:36:35:7F:BC:3C:A3:08:66:AD:E0:63:26:2A:D0:D4:40:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cb:f9:f8:7c:de:c4:53:ee:0f:e0:d5:55:d5:54:56:44:db:
ab:ef:d2:3f:7d:76:20:16:ef:40:48:18:ea:6b:79:88:4b:75:
c8:d6:a2:02:fb:d3:e1:6f:79:69:06:c9:e7:b0:61:f3:d2:37:
15:12:33:5e:31:ae:ad:34:60:a4:dd:6c:96:1b:ce:99:3c:a8:
a2:e7:ff:bb:bc:db:05:63:3a:d1:95:51:33:35:01:1e:da:e4:
e7:87:7b:8e:47:bd:cf:d6:3f:d9:8c:49:25:d5:07:75:c1:2d:
2f:a0:10:50:b9:8e:c9:93:ff:39:b4:70:97:f0:ea:d7:b3:25:
2b:fa:80:28:68:37:21:3c:dd:c5:99:3f:dc:fc:5e:3e:73:b9:
54:79:17:5c:17:d6:33:96:cd:a1:4f:e9:30:7a:9e:62:b5:44:
ba:fc:82:69:2c:e2:11:92:c0:39:22:51:8b:77:11:78:2a:f2:
ae:c4:cc:25:47:61:3c:b3:ef:50:f5:9b:c5:9e:ff:b6:56:73:
36:5b:31:b6:10:3c:a9:ee:30:7c:f4:40:5f:85:85:45:bf:00:
9f:e1:fa:e8:61:e9:46:b1:d4:5a:1b:24:0f:a7:5e:4e:98:ea:
f8:cd:60:ea:d1:85:9c:42:60:69:13:57:c0:2f:98:7d:f1:c4:
20:b8:80:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:48:23 2026 by rpki-client