Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier: 5dluo/HFDJacz5PuRsUa9Lw0FPUSp4kEZGr3z5iDCKI=
Subject key identifier: 9C:8A:3D:B4:5B:53:2E:19:F1:EA:E6:78:64:68:01:40:BA:26:0C:B3
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial: 019E1D90B5EAAAEC018BDECDB4FAB06D6BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number: 1338
Signing time: Tue 12 May 2026 19:01:23 +0000
Manifest this update: Tue 12 May 2026 19:01:23 +0000
Manifest next update: Wed 13 May 2026 19:01:23 +0000
Files and hashes: 1: MxY3wYjJf-HzpELgQOqWr-CuO5k.roa (hash: esg/AqYi4A1ugA5X6Pi57Y+6AvgsMKQZF7yVPFwOVOY=)
2: ha3A5YiON6pwuQbKycX4Nu-iCJU.roa (hash: /mkj5tkVuu0LcdOKt7MFz4DExlQhsM54fwEEAhXdQGE=)
3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: nhxb5DwcwXtvJ0GdISXvZceEQ6TzxuRRwOGBZv2/NRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:b5:ea:aa:ec:01:8b:de:cd:b4:fa:b0:6d:6b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Validity
Not Before: May 12 19:01:23 2026 GMT
Not After : May 13 19:01:23 2026 GMT
Subject: CN=9c8a3db45b532e19f1eae67864680140ba260cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:9b:cd:cf:46:aa:03:9d:a3:7b:a1:79:d7:
70:af:6c:f9:3e:60:db:fa:ae:a2:92:33:43:07:44:
8a:58:b1:f6:5a:ad:1c:fd:dc:5a:01:bb:6c:49:b0:
1d:95:bc:dd:c1:68:3c:88:9c:25:73:07:fd:d0:bf:
9f:b0:a6:f5:8d:16:cf:77:ae:7c:2d:86:54:2d:8c:
27:d7:4d:2c:19:e2:8f:83:ad:00:3f:08:9f:ba:de:
cf:60:d0:83:d0:97:52:46:e3:b2:85:f2:03:86:d0:
09:c2:d8:b6:0b:90:64:e2:73:a9:93:82:f3:ff:aa:
7d:84:79:4e:32:ec:72:6b:28:f9:f8:77:48:17:b0:
92:18:cd:0f:92:ed:8f:9d:12:eb:67:9a:67:77:c1:
20:ea:01:75:86:1c:e9:2d:54:1d:b7:e1:61:ee:0d:
30:67:92:02:fe:01:e3:87:e7:c6:1d:07:11:dd:5a:
8e:d9:46:60:44:13:6c:90:ae:ff:5b:aa:16:c5:56:
39:9c:92:10:7e:09:33:bb:62:67:d8:d0:9d:a5:dd:
09:c8:3d:12:7f:fd:d4:45:d7:1e:44:ef:4a:9a:b9:
23:51:78:3e:dd:ca:ee:1d:2f:8a:3d:7c:6b:97:59:
7a:5f:a0:17:89:53:99:c7:13:dc:72:1f:92:b3:06:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8A:3D:B4:5B:53:2E:19:F1:EA:E6:78:64:68:01:40:BA:26:0C:B3
X509v3 Authority Key Identifier:
keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:65:52:c5:e4:1b:7e:c2:12:77:2b:ee:5e:5f:70:7c:1b:2b:
0e:01:2a:fa:61:f2:3d:29:ed:17:62:28:aa:26:73:92:f9:37:
38:20:64:c7:2b:d1:72:78:48:ff:7f:db:07:90:8d:25:74:90:
70:c1:39:ab:f1:b4:f1:a2:a3:45:a4:7e:8a:60:07:71:dc:d9:
89:6f:d7:f5:a9:c4:07:89:c2:9d:e8:a0:b2:82:02:5d:9b:5e:
14:55:c0:6a:88:08:75:90:c3:b4:0d:99:dd:4c:de:6c:8b:03:
45:fa:15:b9:1d:bc:55:21:11:40:52:53:29:c7:4e:33:63:df:
ea:27:2b:91:ff:93:bd:34:47:85:d6:a7:40:79:6e:c0:ed:dc:
b9:8c:61:7a:f9:55:ba:6c:53:b2:5f:16:7f:77:7f:f5:48:aa:
e3:44:ab:6e:e9:4e:c9:7e:55:44:00:3c:06:aa:18:42:e9:8b:
30:99:be:77:45:84:d1:a5:78:90:de:40:0e:93:fd:17:18:97:
d2:42:49:8b:3c:12:19:45:7d:57:8d:0e:63:32:fe:ad:e0:3c:
b3:8e:98:01:92:3a:98:b8:af:e5:bb:36:77:6f:81:c7:27:95:
9e:72:e3:a1:60:d4:9d:68:de:33:6d:20:5c:cf:55:bc:01:b7:
45:9c:12:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:18 2026 by rpki-client