Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
File: sk_loZnHVDnFJkkEVLSr1UAhN6k.mft (raw, json)
Hash identifier: qP5zCCoPraikd0oVgnkpgMDHfEX7D/QPrs9UscdRu8Y=
Subject key identifier: 7F:C4:2F:FC:72:F8:F7:09:96:8F:05:F0:DE:4F:C1:9E:CB:C7:36:91
Authority key identifier: B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
Certificate issuer: /CN=b24fe5a199c75439c526490454b4abd5402137a9
Certificate serial: 019E1DFDF3F4FBAAC05C4200F8F4AC77A26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
Manifest number: 0125
Signing time: Tue 12 May 2026 21:00:42 +0000
Manifest this update: Tue 12 May 2026 21:00:42 +0000
Manifest next update: Wed 13 May 2026 21:00:42 +0000
Files and hashes: 1: 1X-M9-Ob8zn_AUbRkQ52E-fkDj8.asa (hash: A9QlGHiSL6cJZrCCASWffcD/70Opt2l0qntImDeMQKw=)
2: sk_loZnHVDnFJkkEVLSr1UAhN6k.crl (hash: qxY+hFTPhjgGep8KyGS8aMPrQKnsKyYAQPe2mMbF1Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:f3:f4:fb:aa:c0:5c:42:00:f8:f4:ac:77:a2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24fe5a199c75439c526490454b4abd5402137a9
Validity
Not Before: May 12 21:00:42 2026 GMT
Not After : May 13 21:00:42 2026 GMT
Subject: CN=7fc42ffc72f8f709968f05f0de4fc19ecbc73691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d7:c9:30:27:aa:35:16:47:04:b9:02:29:29:
0f:3b:34:39:53:d1:35:9b:fb:95:80:71:c5:96:e1:
98:b1:5b:76:5c:08:43:5e:1b:a7:1f:fb:f6:a2:e6:
7c:c7:68:6a:e0:e1:b1:8e:6e:d6:6e:cf:d4:8d:e9:
a4:6e:ed:4d:76:98:15:2c:71:2f:a0:1f:6c:84:57:
ae:48:61:05:a2:8e:a0:39:ef:67:31:5a:4e:8c:e3:
f2:58:ca:43:77:53:99:5f:ce:a8:e0:28:01:60:17:
15:bc:af:79:3b:27:53:8f:4b:46:dc:ce:b0:d6:3a:
77:ea:29:8a:ae:2d:ad:b4:bf:5c:f1:fd:d7:01:b0:
ae:eb:70:55:04:3a:93:83:e5:ad:5d:b7:37:d2:8a:
cb:76:71:10:72:54:b8:ac:38:cb:5d:62:b9:0f:59:
94:ba:61:a6:b8:2a:af:30:f2:ad:d3:4a:28:a4:fb:
aa:3c:15:ef:1d:4d:ad:a2:14:4c:cb:d8:ae:23:66:
d1:db:84:a6:0a:81:95:02:c6:ce:65:62:a6:5a:43:
37:82:cf:ca:1a:4e:1a:da:05:76:53:0c:d3:58:28:
a9:24:01:2e:5e:be:bf:73:1d:2c:29:ba:ae:cd:6a:
8c:9a:28:34:a6:e5:f9:c0:b2:11:00:40:b1:0f:74:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C4:2F:FC:72:F8:F7:09:96:8F:05:F0:DE:4F:C1:9E:CB:C7:36:91
X509v3 Authority Key Identifier:
keyid:B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e4:a9:a8:ee:23:f2:3f:c0:7f:24:fe:f2:84:30:8e:2a:d6:
9b:51:e3:95:fc:c6:0a:c0:e7:a7:b3:71:6c:02:06:3d:14:54:
98:62:5c:eb:12:55:4d:9e:33:9f:fc:fc:ee:42:95:5a:b6:df:
2d:35:e9:51:0c:17:ce:f2:7e:d9:d9:e1:4f:be:ef:26:f4:d8:
cb:27:30:34:75:73:ea:10:80:bb:b6:9b:a6:89:6c:c2:36:f6:
41:78:5e:f7:40:c4:52:22:f1:b4:51:4f:30:11:82:0f:90:9e:
24:4c:a0:ea:54:21:1a:82:0d:93:f8:de:3c:4f:03:90:1b:49:
7d:68:8c:ad:85:f9:30:28:d8:ae:4f:d2:18:a7:25:65:22:b9:
a6:d8:2f:83:1c:28:69:42:2e:fc:e0:fb:dd:30:f0:6c:2a:5b:
69:32:5e:44:bb:fe:7f:bd:9d:87:06:dd:dd:90:85:67:44:d9:
c2:62:cd:2c:4e:0f:6d:4a:49:f9:8b:f1:27:48:5a:63:ad:1d:
d7:9e:e1:bd:dc:39:92:1f:b1:68:ec:e4:6d:49:d8:fc:58:06:
c0:e2:20:76:ae:fa:93:cd:32:4c:e9:d9:89:78:be:f9:9d:99:
88:c7:c3:aa:e7:3a:11:ed:60:dd:05:cf:22:d2:cb:b8:43:67:
f8:cb:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:08:55 2026 by rpki-client