Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
File: lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft (raw, json)
Hash identifier: CFvS7yYBWM7VyuhY/cG95IwBUIeNmK8Q+8IM0tJxT/M=
Subject key identifier: A5:2F:DC:C1:E7:A6:82:AB:1D:A9:BC:5F:67:6C:DB:FB:6B:2B:B7:AE
Authority key identifier: 96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
Certificate issuer: /CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Certificate serial: 019D33081BDF25FC9FBF05729F53811D56EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
Manifest number: 0756
Signing time: Sat 28 Mar 2026 06:01:02 +0000
Manifest this update: Sat 28 Mar 2026 06:01:02 +0000
Manifest next update: Sun 29 Mar 2026 06:01:02 +0000
Files and hashes: 1: lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl (hash: YU8QL00XJ7LGoXoNs+vEnjRCybERL4FBst6lO7Kuz/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:1b:df:25:fc:9f:bf:05:72:9f:53:81:1d:56:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Validity
Not Before: Mar 28 06:01:02 2026 GMT
Not After : Mar 29 06:01:02 2026 GMT
Subject: CN=a52fdcc1e7a682ab1da9bc5f676cdbfb6b2bb7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:f0:76:be:02:28:b4:24:1e:82:d7:fd:4f:
4c:6d:3b:fe:c0:2e:8a:57:9d:ea:bc:07:e4:90:71:
ea:7a:10:10:62:fd:4d:3c:52:1a:d4:99:64:3f:58:
09:b5:3d:0c:3c:a1:ea:83:b6:4a:13:39:93:e9:10:
5b:4a:c4:2e:4a:39:1e:68:00:36:31:2b:19:6e:58:
29:04:95:9e:e2:d8:83:be:79:36:77:54:cd:f5:67:
cf:80:bd:26:7b:3c:04:50:94:dd:4a:e3:ae:d4:d5:
c1:3d:64:7c:0f:3f:28:47:25:f2:b2:20:37:59:17:
34:6a:e1:b7:e1:b3:9a:58:8f:fc:b5:d7:7a:ed:c2:
7f:49:ad:b3:02:cc:f2:43:d4:c9:b4:52:a7:6f:1e:
39:db:7a:e6:43:32:d1:73:f2:1e:ba:51:02:df:9b:
4d:73:54:e8:ac:ae:b2:a5:fe:28:d6:c0:4f:a7:0c:
26:87:69:fb:57:b5:ae:97:71:af:4e:e3:55:37:fc:
3d:1a:11:75:fc:32:2f:9c:b8:d4:a0:97:93:c6:b8:
5a:9d:5c:5e:5a:17:df:20:41:d2:1d:d6:31:f1:75:
1d:8f:87:60:1f:eb:81:4b:bd:4f:bf:b4:54:a9:4c:
e9:6b:14:3c:a7:1c:44:96:99:4b:6a:01:1e:17:b3:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2F:DC:C1:E7:A6:82:AB:1D:A9:BC:5F:67:6C:DB:FB:6B:2B:B7:AE
X509v3 Authority Key Identifier:
keyid:96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0e:35:de:99:7d:ec:18:11:0b:4d:f2:59:f6:3d:de:a6:37:
0e:0b:a2:83:19:bb:18:c9:38:56:fc:2b:c2:ed:83:7b:23:6f:
fb:09:aa:a8:ab:6a:16:dc:d6:39:93:ad:05:6d:ee:24:0f:ef:
d6:37:91:cb:31:02:00:9d:1a:0c:f3:7e:3d:5c:e1:2c:dc:9c:
d8:0e:65:fc:c2:87:06:2a:80:b3:9a:8c:4c:69:2f:c3:76:e9:
83:05:d3:11:59:1b:01:de:e3:52:00:5e:a3:49:eb:40:8e:2c:
03:9d:c0:ee:bf:d1:e7:ef:da:a5:7a:25:74:d5:c9:36:b4:a0:
8f:26:b5:9e:d6:5e:43:fd:e7:c4:60:d6:a3:bf:50:a1:85:17:
a5:bd:1c:09:2b:c0:05:af:8a:89:7e:db:99:3c:50:88:45:48:
20:17:d0:fa:cc:d7:94:6e:2e:82:8a:53:e5:3f:3b:e8:65:f8:
9c:41:05:11:38:e4:9d:6c:86:2c:5e:22:eb:c2:b8:0a:46:3e:
d1:c9:78:70:47:16:6f:a4:f1:70:60:7d:a1:0d:a3:35:35:65:
59:8c:60:9a:97:64:6a:6c:58:91:10:0a:eb:be:28:02:92:b1:
b7:12:b8:51:a1:5b:c1:8e:39:51:55:32:47:ab:93:29:81:79:
ba:87:83:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:01 2026 by rpki-client