Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier: 1iZee5KqkWIBNxL206UQBspKDLAhOaVZCwsxj0zJfEs=
Subject key identifier: 89:0F:88:8D:8A:69:79:86:10:C3:AF:F6:2F:A9:9E:D4:33:AC:23:6E
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 019D270427A7594471AB06897E620C4741B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number: 141F
Signing time: Wed 25 Mar 2026 22:01:16 +0000
Manifest this update: Wed 25 Mar 2026 22:01:16 +0000
Manifest next update: Thu 26 Mar 2026 22:01:16 +0000
Files and hashes: 1: VYI9qa8JCE6VkIqD0V54pQu3Jdo.roa (hash: pJTrpDe7OIckvsF3AmZnqqPmgPvtyMz/7jk3tJQykek=)
2: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: 6X/t3diCbMQvr14jEZNqbqliwCT/oCHLrW/2yvnDjZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:27:a7:59:44:71:ab:06:89:7e:62:0c:47:41:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: Mar 25 22:01:16 2026 GMT
Not After : Mar 26 22:01:16 2026 GMT
Subject: CN=890f888d8a69798610c3aff62fa99ed433ac236e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:e3:4f:5d:79:f9:e1:21:9b:d6:33:40:df:
e8:8a:30:b8:bb:08:3a:a0:bb:fb:eb:4e:d8:b2:53:
a5:d5:db:13:19:2d:f4:d4:60:e1:74:26:a8:45:97:
bd:87:cb:ad:a2:42:9d:1e:70:b2:f1:29:05:4e:1e:
1e:c0:9f:5a:58:b7:f6:ee:50:9b:bf:18:34:33:0f:
90:a4:d4:27:c3:a1:26:d4:c3:55:21:9d:77:bb:06:
95:df:02:51:ca:07:95:f6:de:94:ef:99:4a:11:16:
38:46:23:a9:c5:68:e5:c6:1a:0c:6e:dd:25:dc:f6:
61:b3:b7:ce:58:52:60:d7:1f:35:4d:38:8f:bb:7b:
1c:51:b9:66:33:72:4f:79:57:7d:7a:14:2f:59:53:
b0:6c:55:d3:78:15:3d:99:e9:09:89:5f:2a:25:18:
31:77:d6:9a:56:65:0d:b9:15:f8:4b:e3:83:20:12:
f7:49:62:d1:47:a0:01:0c:5f:e2:19:fb:4c:c3:e6:
56:6d:44:00:ff:ce:18:4a:40:db:61:f8:e1:f1:51:
5b:68:7d:d2:96:87:d2:d2:a4:43:3c:77:f7:8c:6f:
ef:dd:5c:2c:5d:a6:c6:70:2e:a8:00:b4:a2:cb:d4:
10:32:36:13:a2:5c:d7:3c:4f:b3:6f:01:91:65:27:
f9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0F:88:8D:8A:69:79:86:10:C3:AF:F6:2F:A9:9E:D4:33:AC:23:6E
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:79:ef:61:d8:19:57:18:e8:90:7f:c7:e4:42:da:ea:70:6c:
25:01:e8:e3:1b:37:2a:2f:ab:fa:51:eb:a0:e1:07:04:91:12:
88:34:b3:67:c2:3d:ff:25:65:03:3c:e7:c0:b7:78:4f:63:68:
ad:e5:58:34:25:3f:85:6e:66:b8:62:2d:52:97:9f:9e:ef:d1:
96:44:68:a3:b4:e0:35:36:6f:e9:e9:b2:8f:b2:d1:9d:56:bc:
39:b7:a5:2d:2f:d4:cd:d5:44:50:af:4c:5a:ce:f4:09:c8:07:
f2:96:d4:fe:51:b2:69:40:0c:c2:02:1c:77:5c:1d:f4:31:78:
a0:6c:01:32:5b:dd:c6:ea:23:9f:6d:13:6d:91:bc:14:39:2c:
32:e2:8d:15:23:22:14:1c:8a:38:2d:93:17:d4:10:4a:76:c9:
74:82:eb:ea:1b:3e:0a:6c:ca:15:33:39:09:eb:ae:90:f0:ec:
a9:69:5e:29:19:d9:a7:cd:e8:3c:a4:75:89:8c:52:62:cb:04:
ff:57:d3:e4:d8:87:7b:03:bf:bb:6c:fa:2a:bf:72:e0:39:60:
81:8c:10:29:4b:d5:3f:e4:87:5c:67:4c:89:18:87:8f:22:11:
df:38:e6:3c:83:17:f0:8e:96:42:68:0c:aa:e3:48:e5:85:a7:
cc:de:3f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:37 2026 by rpki-client