Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
File: lrvRv8ovihV4-qtbEMD8NVVhzGU.mft (raw, json)
Hash identifier: RUrC5Y7ajq3aMN3lgtyRTYOPHgwxxmmxNR+0zgc9AEY=
Subject key identifier: 02:6E:10:A7:53:AB:C6:C9:BC:84:FC:1E:74:38:65:3C:08:00:89:C6
Authority key identifier: 96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
Certificate issuer: /CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Certificate serial: 019D2772D54240885BB3064D429A5B1628F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
Manifest number: 081E
Signing time: Thu 26 Mar 2026 00:02:10 +0000
Manifest this update: Thu 26 Mar 2026 00:02:10 +0000
Manifest next update: Fri 27 Mar 2026 00:02:10 +0000
Files and hashes: 1: lrvRv8ovihV4-qtbEMD8NVVhzGU.crl (hash: ig7NtdzkS6Vfooyx6ye2pKt7qXAU1rZDUkX0qthPAZE=)
2: v7ov36hfvtk8wkcEWj0LQvv50EQ.roa (hash: z6k20v/tfXJDwNdPG7+trPkkzDOlvFnCMcAGQoe5GKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d5:42:40:88:5b:b3:06:4d:42:9a:5b:16:28:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Validity
Not Before: Mar 26 00:02:10 2026 GMT
Not After : Mar 27 00:02:10 2026 GMT
Subject: CN=026e10a753abc6c9bc84fc1e7438653c080089c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:97:5c:b0:b7:68:9c:87:47:f7:85:37:36:
29:af:56:39:51:f8:73:7e:a2:9f:76:da:43:46:61:
c1:e6:b9:98:b7:dd:6f:96:69:f5:3e:c7:b5:23:e9:
a6:6a:b8:6f:c9:d2:67:34:d5:11:ad:7a:75:f9:b0:
35:6e:a0:09:fd:b9:ba:18:b1:68:c8:b0:29:06:4c:
56:71:8d:eb:3e:25:f0:29:42:94:e3:6a:67:35:23:
21:16:3b:8c:c1:64:8e:e9:5a:93:ca:ea:c3:df:c3:
03:ab:e1:d0:9b:ab:89:0f:21:37:ae:b5:4b:65:41:
38:07:70:75:f9:11:0a:a7:55:58:3a:7d:42:7f:3b:
b6:f6:b9:39:4a:8c:2d:bd:01:8d:26:71:48:0c:e0:
77:bc:72:f4:b3:ac:32:a4:98:8f:cd:89:5f:1a:23:
13:5e:41:c8:0f:34:95:f8:db:f6:b5:47:91:78:18:
61:fd:8c:50:7a:e1:79:d9:ef:f8:bf:a9:40:46:4c:
9b:57:3f:3d:1e:30:f8:91:a8:7d:3d:93:83:1c:fd:
01:5e:ae:22:98:cc:0a:24:98:64:19:58:e8:99:5c:
44:b2:5a:6a:d0:c5:fd:17:d4:d4:3c:47:08:35:0e:
36:0f:15:c3:5c:36:b7:11:47:95:02:b7:66:b2:8a:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6E:10:A7:53:AB:C6:C9:BC:84:FC:1E:74:38:65:3C:08:00:89:C6
X509v3 Authority Key Identifier:
keyid:96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:17:3d:d1:be:e7:fd:65:ab:cf:de:d9:bb:1d:a8:f9:e2:a7:
b7:ff:27:e3:77:77:94:28:a6:25:90:de:c5:26:fc:73:de:a9:
ba:76:04:80:37:9e:0e:93:1d:32:46:ce:72:31:40:2d:b6:14:
d4:d4:72:d1:43:5e:c1:68:62:63:9b:84:49:20:90:30:f5:c5:
29:83:7b:47:3a:98:68:59:66:7a:40:1d:d5:11:26:b3:57:16:
a3:37:8a:a7:40:7b:47:c9:58:c5:63:6f:01:54:67:30:36:4c:
4e:59:1a:5e:b5:3c:64:e5:38:9b:4c:97:98:c9:85:00:db:61:
f3:6b:13:36:49:e8:9d:6c:09:69:1b:5a:fb:a8:da:6e:5d:88:
4f:b3:b0:74:40:f5:e4:b6:9d:22:c1:bb:99:ef:17:66:09:58:
c4:ac:a9:47:d3:46:fd:76:24:6b:8e:c2:0f:55:03:99:0b:50:
4a:eb:2b:f9:77:97:f0:f2:d0:05:8f:2c:c0:14:eb:c5:78:c5:
ae:f2:27:cf:a2:d2:78:4b:8c:62:c8:48:bd:b0:68:bb:b6:ad:
2b:64:77:89:5e:28:31:75:a3:58:05:7c:dd:7c:85:a9:22:dc:
29:50:4d:94:90:c7:f9:2d:db:0f:b3:32:ba:8f:c0:18:40:02:
1a:05:6a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:42 2026 by rpki-client