Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier: btGBV9xhRh+wVnPL9o2Hy+ew6zNp0AEJfIYl6AA7Gfs=
Subject key identifier: C1:8E:7A:D3:87:76:D7:E9:80:8D:FF:37:03:E9:BD:A3:7D:1E:F0:C9
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial: 01A0E43F067E8449E3A5EFC8D94EE0639940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number: 14A8
Signing time: Sun 27 Sep 2026 19:02:10 +0000
Manifest this update: Sun 27 Sep 2026 19:02:10 +0000
Manifest next update: Mon 28 Sep 2026 19:02:10 +0000
Files and hashes: 1: MxY3wYjJf-HzpELgQOqWr-CuO5k.roa (hash: esg/AqYi4A1ugA5X6Pi57Y+6AvgsMKQZF7yVPFwOVOY=)
2: ha3A5YiON6pwuQbKycX4Nu-iCJU.roa (hash: /mkj5tkVuu0LcdOKt7MFz4DExlQhsM54fwEEAhXdQGE=)
3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: SGctFXA5rFyBb6WTgVejNQusrUcU7iExvB3Mvie8t24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3f:06:7e:84:49:e3:a5:ef:c8:d9:4e:e0:63:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Validity
Not Before: Sep 27 19:02:10 2026 GMT
Not After : Sep 28 19:02:10 2026 GMT
Subject: CN=c18e7ad38776d7e9808dff3703e9bda37d1ef0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:5b:68:79:32:f8:4c:2f:f2:2d:e5:7d:2b:
60:c1:af:41:81:7e:04:92:5d:88:87:b6:d4:4a:53:
18:95:1b:d6:76:4c:c5:06:93:19:fb:56:91:aa:1c:
bb:3b:97:f8:45:9d:53:3f:f2:7e:ce:85:aa:52:01:
52:1f:39:4d:ee:54:b5:29:3b:b6:4e:13:b5:90:89:
4f:01:3d:31:46:41:23:76:c6:e7:13:c4:51:c2:41:
c4:4d:a6:7b:2d:17:d7:bf:58:7e:d2:ab:11:c4:93:
d8:b4:3e:7d:f6:db:5e:eb:60:2a:71:c7:ba:78:df:
43:a8:ad:ce:c1:47:2d:9d:1d:35:d7:1f:c1:01:77:
cd:df:18:65:50:dc:16:ee:6f:68:f6:da:ec:47:12:
e3:e5:bd:2d:39:1e:a6:d2:f0:ac:36:fb:2c:26:a5:
bc:12:e9:c8:8d:f5:b8:da:f8:86:81:6e:69:e2:0c:
f7:4b:a4:9d:a1:23:ac:64:e3:8b:6c:3e:10:0b:13:
40:99:d5:36:8d:95:4c:09:db:d8:73:b1:75:fd:06:
e3:6f:a0:5c:64:c6:a9:d1:a9:81:59:85:ad:01:e8:
6b:0f:73:81:a4:97:27:fd:e3:6e:2a:88:90:ea:4e:
74:61:6d:3e:89:da:ac:9b:6a:f9:3d:44:86:9f:14:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8E:7A:D3:87:76:D7:E9:80:8D:FF:37:03:E9:BD:A3:7D:1E:F0:C9
X509v3 Authority Key Identifier:
keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:44:6d:e9:80:d3:29:9f:8a:5f:55:3f:e1:c2:ba:5a:95:4d:
20:0b:24:96:0f:a7:1f:49:5c:24:4d:ac:1e:49:4f:1c:81:e8:
f7:4d:50:cf:4f:93:d1:69:a2:0c:9e:ab:d6:d3:d3:57:b1:16:
9f:27:64:c1:48:eb:ed:8a:3b:c2:35:23:bd:cf:f5:59:f5:26:
7e:43:63:3a:06:eb:de:23:29:7f:98:a3:16:f1:6e:58:b6:ae:
3a:99:2f:74:55:01:f4:1b:bd:13:87:e5:b9:97:b1:e3:11:0d:
c2:28:a6:ae:7c:d2:28:bd:da:3e:5b:ce:fd:a2:7f:fd:00:c0:
8d:40:1e:4f:04:ca:23:24:99:cf:18:54:ec:42:9d:58:f7:fb:
28:60:38:1d:d7:e9:b1:06:b0:31:17:4d:a1:bc:05:ab:c8:56:
5b:d9:64:d5:d2:a7:81:3d:a3:98:cc:fd:65:b3:1c:a1:1d:95:
99:08:7c:12:e9:1a:c3:35:79:f9:17:a9:1b:79:2f:fa:60:ce:
9b:ca:2c:2e:4d:48:6b:06:48:7e:6a:a6:0c:b0:f1:5a:c8:51:
a0:19:b5:70:50:46:8a:46:d1:88:bd:da:63:55:09:d8:47:10:
c3:b0:69:46:2e:b6:f3:91:7f:d2:4a:b7:f0:85:52:d3:44:7b:
ba:19:02:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:35:13 2026 by rpki-client