Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier: BK4nE0zCf0/tyyH76laSYNi1SygNBzquVI+o1CM2638=
Subject key identifier: FD:90:E2:4F:74:32:44:A2:D7:07:2E:E5:87:3D:D6:35:51:95:9D:F0
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial: 019D27E0148CB9181C4281EC02969A4AD524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number: 15AC
Signing time: Thu 26 Mar 2026 02:01:29 +0000
Manifest this update: Thu 26 Mar 2026 02:01:29 +0000
Manifest next update: Fri 27 Mar 2026 02:01:29 +0000
Files and hashes: 1: JJJqBn2vrMXP7kngEan0imFBrIE.roa (hash: KnDyBCr49BTGq3A5Ah9xTrAKORQ9HlD3KaBetAPGdn4=)
2: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: wJ14xeuvqxxu3+YsE7T6QLWBMRuZIuIkzXVUughhyEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:14:8c:b9:18:1c:42:81:ec:02:96:9a:4a:d5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
Validity
Not Before: Mar 26 02:01:29 2026 GMT
Not After : Mar 27 02:01:29 2026 GMT
Subject: CN=fd90e24f743244a2d7072ee5873dd63551959df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:76:6f:24:ca:33:c6:4e:08:40:5f:72:9a:2d:
3e:43:2a:e3:a6:06:8b:aa:34:a3:03:58:91:04:73:
1c:f7:af:06:c5:34:d0:3c:1c:5c:56:52:29:5f:79:
56:11:64:4b:29:0f:9f:43:43:a8:1f:b1:18:83:4d:
71:34:eb:d9:dc:22:c5:6c:5c:f0:57:a9:02:5d:47:
98:f3:48:bd:26:19:cc:38:82:dd:e1:0d:ba:3c:68:
43:8c:aa:18:dd:29:2c:44:67:33:ba:a5:2e:1f:53:
8a:a7:31:b6:51:57:18:ec:a4:f0:fb:26:ce:1c:e7:
61:21:e3:f7:cd:09:92:10:21:0e:1d:1b:1d:d0:f1:
71:66:15:22:ad:c3:4b:9b:9c:c5:42:88:0a:99:52:
62:70:54:55:0e:cc:ac:10:e9:57:4f:cf:0e:04:77:
e2:e4:c4:c8:f0:f2:ac:e2:ec:0f:ab:d8:21:a3:c5:
d7:32:a9:2a:20:20:1b:70:ed:82:aa:eb:fe:1f:84:
76:df:ad:8c:1d:94:7e:c6:c8:5f:d0:8d:63:4f:fb:
96:2b:82:ef:d8:48:c3:14:f5:3a:3c:98:ef:aa:17:
5e:e6:ae:bb:84:6f:10:71:72:92:f4:e7:7b:78:b0:
20:b7:9a:ef:38:7a:f3:a6:2a:fb:63:05:49:09:91:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:90:E2:4F:74:32:44:A2:D7:07:2E:E5:87:3D:D6:35:51:95:9D:F0
X509v3 Authority Key Identifier:
keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ff:a9:b9:02:99:47:22:eb:4b:f3:fd:f7:1c:7f:2a:02:b8:
78:aa:bd:d1:61:08:b7:44:d8:ac:74:db:1b:c8:e8:a5:86:9d:
40:3a:04:60:dd:db:ba:e1:24:44:d5:9d:55:f0:b2:49:05:06:
a5:93:c4:99:e1:4b:fe:a3:6b:b2:68:b4:cd:de:81:62:95:9f:
72:0f:a9:f9:f5:fc:f5:d3:d1:96:d5:9a:95:44:33:13:76:c6:
ef:4f:1a:85:86:65:ce:d4:71:f2:38:78:41:5a:04:3d:a7:8c:
f0:45:3c:8a:eb:f9:52:a2:66:2d:e3:83:41:cd:28:4c:13:8b:
eb:a6:a7:2b:42:5a:db:2f:6b:6a:c7:6c:e2:f1:73:fc:53:79:
96:56:f6:09:59:02:c3:72:83:63:ff:f8:5a:99:a4:6e:b5:f4:
16:50:3c:ac:b9:54:f6:f0:ac:ce:95:7c:ed:4b:da:8a:34:d9:
f3:8f:4e:0c:5a:cf:a1:d7:69:68:c2:6e:c1:bd:51:80:66:1d:
0e:66:b7:d3:b8:bd:89:b4:5c:d2:c7:b3:16:8d:ec:4b:b9:9e:
75:d6:1a:81:1f:85:4b:cf:42:37:3e:ff:fc:70:12:5b:bb:88:
50:11:c8:1b:33:65:b5:b0:0f:2e:f8:0f:78:ef:e1:ac:22:da:
b0:c7:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:56 2026 by rpki-client