Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier: hhbredcDXmGB6s3tR8rA9MJU7mWivmpjxLxn2xDvZmI=
Subject key identifier: B2:81:C2:91:37:11:26:B3:9C:4C:8D:1E:D2:76:D4:05:9D:CA:BB:72
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial: 01A0F531D982C0A023B353B4CF9AAE6B8043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number: 17A4
Signing time: Thu 01 Oct 2026 02:01:19 +0000
Manifest this update: Thu 01 Oct 2026 02:01:19 +0000
Manifest next update: Fri 02 Oct 2026 02:01:19 +0000
Files and hashes: 1: JJJqBn2vrMXP7kngEan0imFBrIE.roa (hash: KnDyBCr49BTGq3A5Ah9xTrAKORQ9HlD3KaBetAPGdn4=)
2: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: nTyeEKYSij8xop3BpbZHsBDSzBXtNwPy28zcMeNelpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:31:d9:82:c0:a0:23:b3:53:b4:cf:9a:ae:6b:80:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
Validity
Not Before: Oct 1 02:01:19 2026 GMT
Not After : Oct 2 02:01:19 2026 GMT
Subject: CN=b281c291371126b39c4c8d1ed276d4059dcabb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:87:b5:ad:13:e3:d7:40:3b:0d:15:36:63:
a7:ca:e6:1a:a6:91:89:42:5b:66:c5:9b:09:5f:1a:
5e:b9:8b:98:90:71:57:1b:93:33:7a:cf:18:2a:24:
4a:f4:f8:a9:e5:f2:a6:cf:33:2e:28:9f:dc:30:fd:
60:12:d6:46:9b:a7:98:dc:92:95:8f:97:f7:d1:1e:
4d:2f:b0:1c:f3:c5:cd:a8:89:30:d1:55:36:69:d1:
80:ef:c4:9e:62:7b:ea:c6:1d:e7:f2:62:00:64:94:
d5:51:55:ed:73:a2:97:67:60:9e:fa:f0:6d:5f:9a:
8b:f2:5e:a8:e2:e1:31:64:64:3b:1e:9c:0b:a3:60:
20:dd:d4:d6:f5:74:fa:8f:a8:a0:26:ad:a7:10:6e:
72:75:48:be:22:49:3b:2f:6a:f3:57:05:70:4a:0a:
df:f1:1c:0a:7b:fe:93:4e:29:92:d1:55:c0:0f:b1:
fe:65:05:29:fe:ed:d1:b5:04:2a:05:ed:9f:92:7d:
1a:56:9c:2c:f6:b9:f8:b7:c1:b5:cb:7f:d9:2a:70:
09:f5:95:9e:e6:29:74:47:48:f4:9c:1a:2d:54:85:
b4:c4:0a:7b:7e:b7:12:b4:b4:c5:17:04:b7:79:9f:
6a:ae:8c:c2:40:ab:97:dc:40:73:6d:2f:68:47:af:
dd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:81:C2:91:37:11:26:B3:9C:4C:8D:1E:D2:76:D4:05:9D:CA:BB:72
X509v3 Authority Key Identifier:
keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:43:03:a1:cf:ce:2f:30:04:26:24:8c:6a:17:92:05:10:cb:
2a:35:5b:0b:f2:ba:f5:f5:60:a4:58:7a:71:74:f2:dd:2b:2a:
b7:6d:fb:f6:d3:55:2c:83:f2:f7:84:c9:a5:75:0f:23:6b:73:
de:ad:0b:03:4f:4e:ff:7f:6d:1c:fb:38:21:80:4e:d3:5a:e6:
a7:f4:93:6f:de:50:0b:a5:3e:80:df:b4:39:5b:9c:bc:75:d1:
6b:28:f9:78:df:be:62:24:15:8f:dd:de:d8:f1:92:f1:b2:03:
f9:1e:fa:e5:78:83:7b:dc:1e:ec:04:d6:ab:ca:11:79:0e:05:
46:ca:61:b8:35:a2:12:94:71:34:64:f5:7f:c3:40:02:69:74:
72:e1:7c:db:2b:f7:3e:5b:0c:b4:f7:64:94:bc:1b:eb:b6:7c:
00:f5:d0:24:0f:eb:cb:fa:9d:20:c6:ef:b5:80:81:d9:65:b4:
b6:ab:9e:9d:94:49:fc:87:b6:56:f4:55:a4:10:48:af:0e:b2:
f0:4e:ea:ef:4b:31:28:0a:65:e6:29:e0:57:83:37:45:af:fa:
d4:02:89:e8:f6:d6:ff:b3:fc:31:9c:7f:7c:62:17:b3:3a:0d:
ad:98:6e:88:ae:a1:56:e4:1d:d5:86:ba:4f:4a:78:ed:4a:48:
50:5d:70:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD1MdmCwKAjs1O0z5qua4BDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNTIzOTgyNTUyOTBlMzI4NjgwZDZlOGM4MGNkOTE4Zjg2
NDE3ODQwHhcNMjYxMDAxMDIwMTE5WhcNMjYxMDAyMDIwMTE5WjAzMTEwLwYDVQQD
EyhiMjgxYzI5MTM3MTEyNmIzOWM0YzhkMWVkMjc2ZDQwNTlkY2FiYjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNqHta0T49dAOw0VNmOnyuYappGJ
QltmxZsJXxpeuYuYkHFXG5Mzes8YKiRK9Pip5fKmzzMuKJ/cMP1gEtZGm6eY3JKV
j5f30R5NL7Ac88XNqIkw0VU2adGA78SeYnvqxh3n8mIAZJTVUVXtc6KXZ2Ce+vBt
X5qL8l6o4uExZGQ7HpwLo2Ag3dTW9XT6j6igJq2nEG5ydUi+Ikk7L2rzVwVwSgrf
8RwKe/6TTimS0VXAD7H+ZQUp/u3RtQQqBe2fkn0aVpws9rn4t8G1y3/ZKnAJ9ZWe
5il0R0j0nBotVIW0xAp7frcStLTFFwS3eZ9qrozCQKuX3EBzbS9oR6/dFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKBwpE3ESaznEyNHtJ21AWdyrtyMB8GA1UdIwQY
MBaAFC1SOYJVKQ4yhoDW6MgM2Rj4ZBeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mY2QzYzMtZjQ5NS00ZDIxLWE4YjAt
NDkwNjFmZmZkMDJhLzEvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9mY2QzYzMtZjQ5NS00ZDIxLWE4YjAtNDkwNjFmZmZkMDJh
LzEvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUMDoc/O
LzAEJiSMaheSBRDLKjVbC/K69fVgpFh6cXTy3Ssqt2379tNVLIPy94TJpXUPI2tz
3q0LA09O/39tHPs4IYBO01rmp/STb95QC6U+gN+0OVucvHXRayj5eN++YiQVj93e
2PGS8bID+R765XiDe9we7ATWq8oReQ4FRsphuDWiEpRxNGT1f8NAAml0cuF82yv3
PlsMtPdklLwb67Z8APXQJA/ry/qdIMbvtYCB2WW0tquenZRJ/Ie2VvRVpBBIrw6y
8E7q70sxKApl5ingV4M3Ra/61AKJ6PbW/7P8MZx/fGIXszoNrZhuiK6hVuQd1Ya6
T0p47UpIUF1wNg==
-----END CERTIFICATE-----
Generated at Thu Oct 1 15:17:39 2026 by rpki-client