Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier: SJSrciiS4BkSm5cVZhuFkJtiG+KIhJqKHUMxR5PLl7E=
Subject key identifier: 81:9F:8C:99:D4:D3:E3:81:5F:AA:34:28:2F:EC:87:C5:0B:EC:17:55
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 01A0E8C0BE2FD0B4FC79A51AB9C2980BC5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number: 1611
Signing time: Mon 28 Sep 2026 16:02:20 +0000
Manifest this update: Mon 28 Sep 2026 16:02:20 +0000
Manifest next update: Tue 29 Sep 2026 16:02:20 +0000
Files and hashes: 1: VYI9qa8JCE6VkIqD0V54pQu3Jdo.roa (hash: pJTrpDe7OIckvsF3AmZnqqPmgPvtyMz/7jk3tJQykek=)
2: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: uWv7B8hbXPpc/3RWxYY4uKk2sdOZquwBAa4vgvNC9h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 16:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c0:be:2f:d0:b4:fc:79:a5:1a:b9:c2:98:0b:c5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: Sep 28 16:02:20 2026 GMT
Not After : Sep 29 16:02:20 2026 GMT
Subject: CN=819f8c99d4d3e3815faa34282fec87c50bec1755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:58:dc:c8:70:5d:d5:ec:eb:37:e7:39:26:
45:d0:c2:f1:69:fb:f0:0d:36:73:d4:0f:df:ce:02:
9d:31:a1:f7:23:95:b6:df:63:af:31:b2:1e:1a:71:
96:3a:26:21:e6:dc:96:c4:b7:af:b0:29:c4:c8:40:
aa:4c:b7:3b:a6:50:e0:85:f8:ef:08:54:de:fa:db:
88:04:3e:16:5b:ac:55:48:b8:3d:a0:e0:44:54:01:
f2:ff:e8:b1:86:3c:dc:83:c5:cc:14:ed:5e:c5:8a:
e1:39:fd:64:82:51:27:c4:9d:25:37:19:64:23:b6:
fd:e5:7d:45:5b:6a:a5:11:a2:70:18:55:96:78:f0:
a0:67:1a:2b:8f:b7:3e:55:7c:90:23:a1:ac:f6:fd:
36:3d:71:8c:4d:e9:bb:a1:fe:15:d8:2e:f5:98:a5:
66:e3:f0:d4:fe:67:72:0f:c1:15:7e:2a:ae:b1:68:
3e:c4:4c:1d:0b:ce:8d:07:e0:08:93:e7:84:37:4b:
49:5a:aa:b1:7f:3d:4a:32:ea:01:d5:22:3f:9f:7d:
02:90:39:5e:92:00:c3:cd:8f:71:a6:e1:db:0b:a1:
8c:67:11:dc:cc:7a:e1:ef:84:95:da:10:eb:8c:95:
18:21:ec:79:7b:a2:ca:6f:d3:99:7e:d2:2a:c9:85:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9F:8C:99:D4:D3:E3:81:5F:AA:34:28:2F:EC:87:C5:0B:EC:17:55
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:62:7d:d4:d4:98:9c:da:3f:71:c2:3b:c9:21:e8:09:8c:89:
68:67:8a:94:67:bf:94:25:38:ab:4a:6a:f1:a8:75:6e:31:33:
0c:80:c7:47:f8:3b:a7:f8:f8:9f:29:ee:9b:a9:1e:17:84:8a:
e4:48:16:60:ff:01:ae:eb:85:a8:3f:d8:60:3a:89:be:86:6c:
99:d2:ce:6d:44:00:27:a9:5b:00:00:10:8c:e2:8d:a1:f6:1e:
36:05:18:17:94:fb:00:20:00:65:bd:93:1d:0c:1d:88:1e:88:
f0:2b:8f:13:45:41:bc:e8:c7:a5:e8:3a:e1:e6:fc:e2:e5:c7:
3d:07:89:4c:45:97:75:5e:3b:4b:39:1b:89:09:02:f8:a4:37:
dc:11:95:bb:47:67:36:2e:56:80:a0:10:4f:f3:89:41:80:ce:
26:05:f7:dc:51:6e:04:b7:14:32:62:b1:67:82:42:a8:19:bb:
1a:91:7f:6d:c9:08:1e:2d:2d:a7:10:ff:58:14:f6:ad:34:b1:
8b:13:62:c3:cb:11:a8:81:84:85:20:f6:2c:fd:24:cd:5e:d6:
08:0a:a3:49:93:30:ad:df:2f:94:a7:04:16:ef:d7:cc:23:40:
d2:cb:0e:1b:e6:18:b7:61:f7:54:2f:bb:df:a0:5e:bf:93:f1:
79:55:5b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:20:54 2026 by rpki-client