Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier: pgLVoAb/6asaXVzzxRnxoeyt9FXfAOQKOinvIaOSCrs=
Subject key identifier: B6:61:FB:07:7E:0C:92:D9:F4:D0:A7:63:69:BA:D3:99:3F:05:58:3B
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial: 01A0F1555BACB39DB3CE28BFFFC46771497A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number: 17A2
Signing time: Wed 30 Sep 2026 08:01:38 +0000
Manifest this update: Wed 30 Sep 2026 08:01:38 +0000
Manifest next update: Thu 01 Oct 2026 08:01:38 +0000
Files and hashes: 1: JJJqBn2vrMXP7kngEan0imFBrIE.roa (hash: KnDyBCr49BTGq3A5Ah9xTrAKORQ9HlD3KaBetAPGdn4=)
2: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: BuOPilWq1DrNQtKarn+xAFqSRcrzZQ5Dq0UftQQo1IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 08:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:55:5b:ac:b3:9d:b3:ce:28:bf:ff:c4:67:71:49:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
Validity
Not Before: Sep 30 08:01:38 2026 GMT
Not After : Oct 1 08:01:38 2026 GMT
Subject: CN=b661fb077e0c92d9f4d0a76369bad3993f05583b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:2d:5f:66:1a:a1:f8:55:a1:22:c2:e6:3f:
99:c3:79:71:26:89:2f:99:d7:2e:9d:2f:f4:e3:e0:
bd:e2:50:91:e7:9c:96:53:56:59:35:d9:66:d2:3c:
c5:7e:15:d4:0d:ba:a8:a1:0a:f8:f9:21:3e:91:3f:
87:38:10:24:8f:ba:90:24:e4:00:ae:24:61:66:b4:
6e:c5:80:61:a6:0c:9c:14:ca:b0:d2:96:61:5a:58:
b3:7a:be:4e:d9:b8:a6:c2:eb:bb:5d:d8:d7:0b:73:
cb:92:39:32:63:f6:83:74:94:bd:74:d3:fe:7b:0c:
e6:5a:de:60:4c:5e:be:07:c2:7b:6a:5c:7e:ad:bf:
80:41:65:bf:dd:cb:77:db:a2:26:9e:e2:27:2b:a6:
b1:8d:81:f2:74:09:aa:a3:71:0b:40:a4:8a:bf:7f:
9a:e1:a6:73:cc:43:5a:3d:c8:0f:f2:a7:e7:20:d6:
83:aa:d2:2b:d7:7f:34:be:9e:a6:af:38:c3:e0:9e:
3e:47:f4:25:01:29:9f:18:47:5d:6b:23:f1:eb:48:
34:35:ac:1c:49:7c:40:21:7b:61:25:36:24:ec:af:
2c:d7:1e:ca:69:16:5e:f4:ac:c9:97:57:58:82:30:
67:54:28:7c:f9:77:56:9a:cf:0c:f4:50:e5:e4:ee:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:61:FB:07:7E:0C:92:D9:F4:D0:A7:63:69:BA:D3:99:3F:05:58:3B
X509v3 Authority Key Identifier:
keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f6:09:e8:dc:27:8d:2c:a4:5b:b8:cf:78:3b:d9:e3:56:11:
f3:7f:8e:77:7b:c7:5b:bd:e3:58:b8:83:09:60:34:d1:10:f6:
66:d5:a5:72:26:5c:1a:31:bc:18:7d:92:f7:05:9e:a9:a0:6d:
95:b1:3f:58:bc:40:bf:64:a8:18:41:ed:ca:ba:aa:d3:fc:71:
b1:fe:5e:01:a6:f7:da:0b:3c:88:37:85:94:89:67:8a:fe:c1:
dd:fd:d0:94:cc:d0:3e:9e:7b:f3:39:94:07:7e:32:07:2f:b8:
a1:ca:de:ec:0e:a9:1e:47:74:9b:78:1a:66:63:10:ab:17:5d:
02:fd:9a:1a:fd:62:d4:79:f7:27:40:d3:52:84:0f:5e:95:0a:
66:e4:14:4c:01:10:17:cb:57:9c:67:17:0a:6e:6e:b4:e3:b6:
37:c9:96:1d:ba:99:4e:29:d4:7e:d2:7a:aa:e5:05:85:b4:b3:
c7:24:74:ea:24:07:f3:3e:71:0f:b5:d8:b9:89:12:81:3f:6e:
39:64:f9:15:37:c2:db:8e:9a:e1:27:d8:cd:39:5e:4c:c4:a9:
31:1e:af:cf:5a:4a:fd:7d:9c:6f:d4:a0:78:e7:91:fa:5f:82:
57:ab:33:50:40:b9:e2:dd:dd:4d:01:c6:91:b4:56:c3:9d:cc:
30:f4:94:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:11:46 2026 by rpki-client