Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
File: LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json)
Hash identifier: TQ/wYUcnERkaPh2Jo8rLTqznSVdkU735K+RTle9mgHw=
Subject key identifier: 27:0B:05:25:E1:29:75:0F:25:80:5A:5E:30:9F:DC:F5:13:40:D7:6F
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial: 019D29CE20DD655BD99C7B140C3416CA8BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
Manifest number: 12E0
Signing time: Thu 26 Mar 2026 11:01:07 +0000
Manifest this update: Thu 26 Mar 2026 11:01:07 +0000
Manifest next update: Fri 27 Mar 2026 11:01:07 +0000
Files and hashes: 1: C38xz0J3nKWG69p6aEh_3L1eROo.roa (hash: hgv2Dm3n9xuUIJlnQhstdXeK7/AZFfz5gfOa9h0Ol2A=)
2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: knLHkw20DMLiaoEfFo/Ki3o5qcBqUBn86MAn/Wo5pBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:20:dd:65:5b:d9:9c:7b:14:0c:34:16:ca:8b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Validity
Not Before: Mar 26 11:01:07 2026 GMT
Not After : Mar 27 11:01:07 2026 GMT
Subject: CN=270b0525e129750f25805a5e309fdcf51340d76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:a2:d7:b1:cb:98:7f:0c:f7:b6:3b:f6:ef:
50:c2:5a:11:c2:5c:36:4d:23:ba:71:43:01:f8:96:
1f:6c:0c:2e:64:d0:fe:a4:9e:d1:b5:f5:dc:21:60:
c2:04:df:3c:87:21:88:b1:2c:e7:9c:1f:c8:63:6c:
75:f7:16:62:5e:f4:ad:2a:39:1c:cb:ca:44:c0:91:
cf:59:9c:d9:1e:4b:62:bd:89:d0:78:4a:98:53:f8:
dd:2a:5d:2c:f1:82:4a:cb:97:11:36:4f:13:2a:6b:
f9:ff:bc:2d:f5:bf:94:b3:a8:4a:47:94:40:57:5c:
d2:4f:b4:04:cb:3a:d1:0a:39:3c:de:c0:0c:f3:26:
fb:9c:0c:92:ea:cb:87:49:8e:c7:e4:66:25:1a:c4:
8f:ab:6b:f1:83:62:51:1c:84:77:55:16:f4:42:74:
5b:9a:ba:13:37:30:a8:f6:6c:c6:19:5c:66:10:da:
24:f2:51:28:c7:90:14:ea:ce:e3:b2:27:a0:4b:f5:
81:46:02:60:2f:13:c9:6b:1e:53:2c:a1:7b:37:0a:
dc:f2:dd:4b:58:ef:a9:90:55:c5:7d:de:04:e3:8b:
e8:98:f0:9b:9f:d5:d1:a6:df:d6:7e:af:06:7b:57:
60:31:77:62:66:3c:e9:42:ad:c9:66:4c:66:2d:33:
3f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0B:05:25:E1:29:75:0F:25:80:5A:5E:30:9F:DC:F5:13:40:D7:6F
X509v3 Authority Key Identifier:
keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:82:28:af:52:f3:93:f5:88:40:9a:bd:55:5e:fa:d2:3e:f5:
b1:bc:d3:97:ba:fd:75:b8:94:af:f7:e5:df:a3:c5:8c:b1:83:
ce:8c:4d:33:d1:c8:fc:8a:33:95:59:18:64:06:88:dd:cb:97:
d5:66:20:f4:a2:bb:90:e6:fb:4a:0e:4f:b9:34:50:4b:16:4b:
22:8d:5b:75:61:2d:80:6d:b6:ba:dd:3e:f8:0e:47:53:b9:36:
cc:9e:92:87:06:de:49:cf:79:47:7c:61:f4:d0:0f:2d:a9:98:
73:11:b8:8f:6b:16:ff:3e:e5:d1:93:5e:ad:97:d5:b3:e6:78:
c1:be:88:b4:e7:59:9f:71:20:a1:5b:b2:09:ec:1f:93:4d:d8:
55:95:c4:fb:dc:82:54:73:75:13:8e:7f:7e:af:1d:3d:03:97:
86:a5:98:d0:21:3a:04:dd:8c:c2:be:8f:df:f7:b7:96:03:e1:
43:45:6c:9f:80:81:60:62:88:97:c8:57:03:b5:3f:f3:17:63:
86:bd:5f:19:a5:e5:aa:b0:f6:8c:d3:09:c0:f8:b7:9c:cb:e6:
07:7f:9e:f3:9c:d9:f5:2f:38:9c:d9:59:60:7c:70:2d:e8:3d:
a7:48:41:d5:e5:cf:ae:c0:0a:88:f3:d5:d3:60:79:50:11:ee:
1d:a4:1b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:42 2026 by rpki-client