Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier: fKFDHPusDhmspmgsSCnWMRlDmMgD7ASz6qDPb0NW08I=
Subject key identifier: 30:4C:D8:14:4C:15:3B:FE:46:C9:4E:1B:34:5F:2E:DC:02:DE:60:11
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial: 019D265F1C070B6CBAB4287F4AD34EACE2AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number: 12B8
Signing time: Wed 25 Mar 2026 19:01:00 +0000
Manifest this update: Wed 25 Mar 2026 19:01:00 +0000
Manifest next update: Thu 26 Mar 2026 19:01:00 +0000
Files and hashes: 1: MxY3wYjJf-HzpELgQOqWr-CuO5k.roa (hash: esg/AqYi4A1ugA5X6Pi57Y+6AvgsMKQZF7yVPFwOVOY=)
2: ha3A5YiON6pwuQbKycX4Nu-iCJU.roa (hash: /mkj5tkVuu0LcdOKt7MFz4DExlQhsM54fwEEAhXdQGE=)
3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: /JDFeeEYgxmwl0dBLZ7bMzyK9Hi9qoMpmsmhCz33dxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:1c:07:0b:6c:ba:b4:28:7f:4a:d3:4e:ac:e2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Validity
Not Before: Mar 25 19:01:00 2026 GMT
Not After : Mar 26 19:01:00 2026 GMT
Subject: CN=304cd8144c153bfe46c94e1b345f2edc02de6011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:46:3c:df:1f:95:93:4b:0c:f7:c0:68:92:
6c:21:75:68:9c:67:4c:14:e9:16:b3:97:cb:97:02:
68:b2:8c:25:9e:17:b9:a5:ac:89:93:ad:ef:95:3e:
3a:41:1c:45:f6:f7:12:36:ba:69:67:91:93:49:fa:
f5:05:d4:8d:8d:7d:f2:29:19:42:a6:69:4a:9c:af:
bd:4c:7c:e9:27:7b:f1:c4:49:00:e0:b4:02:29:8c:
cc:0a:40:49:cc:87:0f:76:3b:a3:52:4a:1b:72:8c:
c2:4a:18:a2:b0:e5:7e:24:13:27:25:85:9a:65:ef:
71:1b:82:35:7e:50:04:36:cb:0d:f2:6a:43:ef:a7:
d4:b1:39:44:6a:3b:87:58:28:54:24:ea:2b:79:0a:
ed:5a:1c:a6:3d:e7:e6:1b:e9:4c:64:93:ea:5b:88:
4d:26:93:3b:49:0e:fb:14:4e:07:a5:db:33:76:f2:
05:88:bf:cf:f6:7e:bb:51:fa:fa:c9:27:78:13:f8:
e6:b9:38:c6:01:40:20:64:3c:c0:bc:39:21:2d:b9:
19:b0:87:7f:10:9f:7a:40:9e:6a:cf:8f:8d:18:60:
1a:40:0f:4a:59:2b:d1:cc:84:33:08:e1:26:b1:b0:
ac:d5:c4:bd:f3:90:3e:f2:3c:39:33:ee:76:c6:13:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4C:D8:14:4C:15:3B:FE:46:C9:4E:1B:34:5F:2E:DC:02:DE:60:11
X509v3 Authority Key Identifier:
keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0c:c8:6e:fb:47:ab:58:b0:3b:c1:25:d2:24:77:09:4b:30:
0d:13:56:00:b5:fd:b7:68:1b:80:25:5a:2b:0e:6a:0e:3b:1f:
ed:52:3a:ea:81:c5:7b:0b:ab:3d:82:43:bd:fa:d9:15:95:73:
be:99:7a:64:5c:60:88:da:b2:cb:48:e2:e1:1e:9a:9a:59:89:
97:18:44:32:93:76:84:fa:7c:3a:b1:7c:e4:97:93:c7:cc:63:
67:42:94:6e:05:15:92:cc:76:16:fe:24:1a:60:ed:44:e8:50:
97:d6:ff:92:37:50:6b:da:a4:55:43:21:f4:bb:b3:87:77:82:
f7:26:39:ce:0d:d3:24:1a:3d:da:23:62:7f:ab:c4:7c:22:8b:
1d:e5:c4:7c:04:07:af:dd:68:3c:59:e9:b4:7a:50:26:7a:91:
5e:a4:5f:e9:12:8a:75:f3:3b:c0:91:78:32:dd:ca:c8:37:1d:
63:78:bb:f4:d9:7d:7f:82:cc:9e:a2:02:0c:1d:95:cc:36:9a:
09:70:59:16:a0:39:f5:a1:84:85:be:3a:4c:c7:cf:a8:cc:51:
71:4e:71:aa:e3:6f:60:0e:f8:ca:68:a1:16:1b:db:a3:c7:36:
f8:e0:dd:da:0f:fe:71:db:2a:94:b8:48:68:9e:ca:15:6b:b1:
21:cd:46:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXxwHC2y6tCh/StNOrOKqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZjcxYjIyNzNhYjM0ZWQ0YTU0ODExNzZlZjcwZmFkODY3
ZWYxNjYwHhcNMjYwMzI1MTkwMTAwWhcNMjYwMzI2MTkwMTAwWjAzMTEwLwYDVQQD
EygzMDRjZDgxNDRjMTUzYmZlNDZjOTRlMWIzNDVmMmVkYzAyZGU2MDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiFGPN8flZNLDPfAaJJsIXVonGdM
FOkWs5fLlwJosowlnhe5payJk63vlT46QRxF9vcSNrppZ5GTSfr1BdSNjX3yKRlC
pmlKnK+9THzpJ3vxxEkA4LQCKYzMCkBJzIcPdjujUkobcozCShiisOV+JBMnJYWa
Ze9xG4I1flAENssN8mpD76fUsTlEajuHWChUJOoreQrtWhymPefmG+lMZJPqW4hN
JpM7SQ77FE4HpdszdvIFiL/P9n67Ufr6ySd4E/jmuTjGAUAgZDzAvDkhLbkZsId/
EJ96QJ5qz4+NGGAaQA9KWSvRzIQzCOEmsbCs1cS985A+8jw5M+52xhN4pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBM2BRMFTv+RslOGzRfLtwC3mARMB8GA1UdIwQY
MBaAFJb3GyJzqzTtSlSBF273D62GfvFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wN2FlOWUtM2QwNC00NWI2LTlkYjAt
NDY5MzVmY2M4NTVlLzEvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wN2FlOWUtM2QwNC00NWI2LTlkYjAtNDY5MzVmY2M4NTVl
LzEvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQzIbvtH
q1iwO8El0iR3CUswDRNWALX9t2gbgCVaKw5qDjsf7VI66oHFewurPYJDvfrZFZVz
vpl6ZFxgiNqyy0ji4R6amlmJlxhEMpN2hPp8OrF85JeTx8xjZ0KUbgUVksx2Fv4k
GmDtROhQl9b/kjdQa9qkVUMh9Luzh3eC9yY5zg3TJBo92iNif6vEfCKLHeXEfAQH
r91oPFnptHpQJnqRXqRf6RKKdfM7wJF4Mt3KyDcdY3i79Nl9f4LMnqICDB2VzDaa
CXBZFqA59aGEhb46TMfPqMxRcU5xquNvYA74ymihFhvbo8c2+ODd2g/+cdsqlLhI
aJ7KFWuxIc1GwA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:05 2026 by rpki-client