Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
File: sk_loZnHVDnFJkkEVLSr1UAhN6k.mft (raw, json)
Hash identifier: XLTJHaUG1k/RzwpTgpTVTSU8I+UXAcwS644EKOQnBNY=
Subject key identifier: D7:37:D7:6D:26:E7:C2:46:CC:D5:A6:D1:94:B2:DA:F2:33:EF:8E:03
Authority key identifier: B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
Certificate issuer: /CN=b24fe5a199c75439c526490454b4abd5402137a9
Certificate serial: 01A1016CD6C7D9751876646815A5CCC92DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
Manifest number: 02A4
Signing time: Sat 03 Oct 2026 11:01:12 +0000
Manifest this update: Sat 03 Oct 2026 11:01:12 +0000
Manifest next update: Sun 04 Oct 2026 11:01:12 +0000
Files and hashes: 1: 1X-M9-Ob8zn_AUbRkQ52E-fkDj8.asa (hash: A9QlGHiSL6cJZrCCASWffcD/70Opt2l0qntImDeMQKw=)
2: sk_loZnHVDnFJkkEVLSr1UAhN6k.crl (hash: gLt3b9DFxbYaXqJTI1Ti2mEIEp8fIAfpELaH7Elt5GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:6c:d6:c7:d9:75:18:76:64:68:15:a5:cc:c9:2d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24fe5a199c75439c526490454b4abd5402137a9
Validity
Not Before: Oct 3 11:01:12 2026 GMT
Not After : Oct 4 11:01:12 2026 GMT
Subject: CN=d737d76d26e7c246ccd5a6d194b2daf233ef8e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:38:c0:26:64:90:f3:9b:83:54:a2:4f:94:f6:
37:55:0d:57:1a:a9:7a:77:87:77:57:00:21:26:af:
f7:a8:f3:35:30:92:c3:fd:f7:d8:ab:e4:63:5b:5e:
86:93:10:dc:78:a4:96:ec:01:9e:55:5b:fd:b8:f4:
7a:f4:3c:f4:6f:e0:b5:70:05:00:d3:09:26:2c:cd:
0b:ba:e8:c8:b9:3c:3f:2f:67:dd:80:71:d2:ea:a1:
44:7a:78:89:00:71:3d:0d:1c:91:91:16:19:d5:c9:
30:91:97:bb:6a:24:27:50:a0:7c:27:f2:4f:e0:7c:
81:30:37:ef:07:72:26:61:61:c3:fe:fc:b6:97:6a:
a7:79:03:2b:c5:92:c8:8b:c8:fc:fd:56:b3:62:9c:
42:57:03:49:74:07:7b:d9:a4:14:49:a3:84:c9:b5:
0f:10:f1:4b:42:a8:18:d9:ae:19:8d:8d:4e:eb:28:
d6:32:08:d3:2e:5b:87:ef:76:38:52:b6:31:07:75:
e9:c8:ce:1c:35:ae:4e:c6:5d:9c:38:9e:17:a7:4f:
df:a1:a0:a2:12:44:20:21:e8:4a:94:fd:cc:64:b2:
b4:63:ab:a8:b2:fc:29:0b:ad:f2:62:fc:75:b0:02:
09:41:57:3f:f4:aa:4c:56:8a:0e:83:42:cd:a2:23:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:37:D7:6D:26:E7:C2:46:CC:D5:A6:D1:94:B2:DA:F2:33:EF:8E:03
X509v3 Authority Key Identifier:
keyid:B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:d8:29:88:51:3a:4c:86:c5:27:e9:18:84:5e:00:a7:15:8f:
13:f9:7a:a7:ac:8b:73:2f:c4:62:03:87:26:7e:31:c4:c6:cf:
ee:47:10:e2:f3:42:e8:4f:5e:3e:70:f4:85:03:cf:2f:32:d9:
33:f9:62:14:71:9b:18:71:cc:50:3d:53:4c:de:78:93:21:a1:
ff:c9:c7:e7:95:f6:36:46:c9:e1:6f:29:99:df:0a:d7:34:91:
6a:2b:f2:f6:18:ff:84:66:6c:36:49:f6:12:e4:98:d3:f8:f5:
3e:15:07:49:56:aa:ae:b0:f8:d4:82:80:20:41:ea:64:b4:03:
43:bf:2e:77:82:73:ab:5f:26:bd:61:13:70:0c:5c:95:4f:46:
9c:0b:01:3d:b5:86:22:af:33:9d:93:2d:e3:cd:ae:6f:3b:7e:
13:e0:95:88:92:32:52:33:bc:4f:68:ff:9a:4d:11:b1:0c:b7:
ab:a9:7e:23:ad:e1:07:17:96:ba:a1:0c:28:bb:b7:44:3f:5e:
24:c5:1d:be:f4:58:d9:a6:3d:3a:c8:5f:ae:f0:33:06:8f:dd:
9b:94:29:63:ce:13:37:41:45:e7:ee:81:05:7a:61:fb:21:6f:
20:4f:cc:70:b4:c0:4a:c5:9e:41:e5:ff:47:e2:ce:a6:ca:bf:
e8:20:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:42:43 2026 by rpki-client