Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: 5TiXpvQ0keQKIi2QMFAk6vRSlGJvYD3x9uaFx7CoX0s=
Subject key identifier: 54:7C:56:BA:E1:D3:42:80:0B:A0:E5:91:47:03:2B:43:D7:E9:B1:81
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 019E1EA2CEF3289AB0B8C091015E93C23BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1923
Signing time: Wed 13 May 2026 00:00:46 +0000
Manifest this update: Wed 13 May 2026 00:00:46 +0000
Manifest next update: Thu 14 May 2026 00:00:46 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: 2Lbbf3zLJ4CckY9IrZ/Qz/y/erStiIphcNPbMWDxVX8=)
2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
3: nRR7i404z5RVMJP9emF5qUhiiWQ.roa (hash: r2qRKGe5QD4+IAS1A7oJ0gKLqqHpjbTNssXN3Od+dxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:ce:f3:28:9a:b0:b8:c0:91:01:5e:93:c2:3b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: May 13 00:00:46 2026 GMT
Not After : May 14 00:00:46 2026 GMT
Subject: CN=547c56bae1d342800ba0e59147032b43d7e9b181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:15:42:8d:b1:5c:45:e3:58:f5:d9:c1:e4:
54:b1:fa:ad:74:cf:7b:a3:18:98:12:05:4a:72:fa:
a6:61:63:a3:d4:f5:df:52:fd:1c:f0:60:ee:a8:95:
c1:5b:b1:c2:fc:17:fb:5d:47:c6:10:4f:98:3b:7a:
c4:a6:3b:ba:f8:61:92:b0:09:e9:a8:fe:30:97:a2:
53:e7:4b:2a:e3:d6:d6:3c:81:04:ea:53:8e:61:6f:
3e:c5:23:53:b2:ff:f8:c2:96:bb:54:dd:e9:c8:53:
fc:3e:91:18:17:83:a0:32:0f:19:4a:a7:39:0f:f6:
13:7c:d1:8a:2c:70:4f:78:3b:f0:d7:19:b8:1f:0b:
a3:75:31:5d:09:de:58:7f:35:fb:bf:85:be:07:d8:
7d:9f:2c:95:f4:d8:d1:da:5b:12:66:ea:1f:30:a5:
12:3a:8b:35:56:f6:9b:a9:ad:7c:52:a4:a2:e5:8b:
b1:79:0c:d5:45:32:e8:2e:5b:9b:1f:c9:9f:fc:a6:
f4:af:34:d8:03:45:a5:c7:7b:85:ed:72:9b:bc:36:
50:30:0b:30:83:48:ad:f8:05:7b:95:18:65:1e:9e:
ea:9c:e9:4e:6f:fc:62:e2:05:5a:5f:d5:e9:47:72:
67:84:8d:85:99:72:38:d7:31:92:a1:76:a8:ca:ed:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7C:56:BA:E1:D3:42:80:0B:A0:E5:91:47:03:2B:43:D7:E9:B1:81
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:7e:b8:ab:b5:1c:64:ad:8e:72:72:3a:79:5e:93:15:0d:48:
f5:18:65:4b:31:78:0d:5f:f1:4a:12:0b:7d:f6:f2:9d:50:d1:
8c:c8:14:6f:31:5b:c2:a9:af:9b:fb:d8:de:61:fa:5a:6c:ff:
ce:ad:b3:00:93:d5:21:90:2f:d9:16:6f:b2:b7:1f:af:8d:01:
00:7e:95:70:3b:6f:dd:9f:f1:58:be:30:fb:c9:98:54:70:42:
c2:61:a9:67:b5:40:fe:71:ce:21:2a:41:d3:0d:e2:6a:c2:13:
94:73:ec:22:34:96:0a:40:4a:43:eb:a2:c8:83:b9:a1:6f:b7:
66:cd:b0:e6:3e:16:2a:ef:40:55:7a:21:07:7b:dc:02:e6:3c:
d5:a9:f5:f3:7e:ea:c6:36:af:84:e9:e2:db:9e:d5:34:28:9d:
54:28:08:c9:e0:e5:34:92:f7:f8:b0:39:5c:b7:a7:c6:6b:87:
20:8d:c8:1c:43:a3:2a:ee:92:86:a2:99:c8:d0:1f:8d:01:f7:
30:04:f8:c3:4a:9b:22:33:29:5e:aa:52:bd:86:66:89:de:5c:
5b:72:d9:bc:6e:79:e3:61:15:bf:fb:3a:76:61:6c:96:8d:7d:
eb:a6:be:3c:b6:93:c7:c9:81:51:25:ac:a8:68:0f:d4:0c:3a:
81:68:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:20 2026 by rpki-client