Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: zSGdij/H7SimUFzFeleoP/Mm1dv0MjBk2TRpUPYBAQk=
Subject key identifier: 4F:BE:26:E1:F7:36:B9:05:DB:9D:0E:10:9C:96:90:DE:8A:67:C0:9D
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 019D284DFC578D02559F5CF8D16CC6A7253B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 18A3
Signing time: Thu 26 Mar 2026 04:01:32 +0000
Manifest this update: Thu 26 Mar 2026 04:01:32 +0000
Manifest next update: Fri 27 Mar 2026 04:01:32 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: oRXh0zczevXam5mPN0pa39tiaVoqDQTKuhZTD2TekCw=)
2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
3: kjwAci0-xsN-FW2yHLM0zLU2az4.roa (hash: ZKpTRPaiSMpihhfsD4iTWrJFTjTfyomHoD/xRGDDVIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:fc:57:8d:02:55:9f:5c:f8:d1:6c:c6:a7:25:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Mar 26 04:01:32 2026 GMT
Not After : Mar 27 04:01:32 2026 GMT
Subject: CN=4fbe26e1f736b905db9d0e109c9690de8a67c09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:50:7f:0c:b1:68:d4:e3:b0:c3:a4:8d:ec:
7f:ef:73:68:0d:55:47:2e:42:c6:e7:3c:cd:0f:02:
36:85:b6:ae:af:4a:7a:cd:71:e3:b9:c5:85:7d:39:
41:9a:9b:69:b2:23:27:8e:85:29:00:3a:45:8b:0c:
c5:91:18:39:8e:98:ef:99:ae:68:56:50:f9:c2:54:
af:db:63:98:ec:4c:f7:7a:1d:df:cc:21:5d:f9:1e:
88:1a:a2:49:2c:66:dc:f8:10:00:db:02:3d:a7:5f:
e4:8a:65:04:f2:19:20:a2:09:a6:d3:b0:27:13:35:
ff:57:35:76:03:6b:23:e1:47:68:d5:d9:86:e9:16:
86:aa:d8:9f:9d:86:55:73:0f:d7:5b:6f:e6:3b:cc:
cc:18:67:c2:a0:c0:20:cc:3f:9f:8e:46:0b:66:f6:
f9:6f:67:02:c3:f1:21:42:00:08:e9:f3:70:b7:2a:
22:db:c0:2f:e2:d8:03:9f:64:cb:a6:8f:d8:9d:84:
05:96:9f:a0:d8:f6:4a:1f:f6:b9:d4:b0:ae:be:f7:
6c:24:3b:8e:06:63:98:25:b4:9a:71:04:f2:04:e6:
88:13:19:19:2d:a4:cb:6f:a3:d1:dd:6a:33:23:dd:
ae:a6:ac:6e:0e:cd:d6:a2:52:68:30:44:8e:17:33:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BE:26:E1:F7:36:B9:05:DB:9D:0E:10:9C:96:90:DE:8A:67:C0:9D
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0c:8e:ef:ef:4b:25:51:96:23:c0:94:ce:37:21:bf:b0:c0:
3d:b7:bf:11:d9:70:12:36:47:87:39:02:ee:21:6d:e4:cf:f7:
67:36:51:a0:f2:fe:79:7f:d0:a6:41:59:93:44:30:ec:b5:10:
32:cc:60:f7:d5:cb:d7:51:d5:68:f2:92:35:bf:74:8f:ba:59:
90:d8:66:d9:d7:74:f2:9b:e2:31:36:55:85:ef:68:9c:d4:09:
2b:da:5b:f8:aa:1b:ca:9e:14:fc:b1:a7:f3:bb:f3:e3:eb:89:
7f:30:05:a7:5c:1e:6a:1b:45:3d:25:a7:2e:e4:ec:68:f7:e0:
1f:33:3a:0d:fe:ab:4d:4c:0d:2e:f2:a7:5c:78:ac:db:9d:87:
a7:64:25:1c:8d:ee:2e:8d:80:12:72:75:12:78:7c:fc:20:d5:
9c:f7:99:7a:ce:4a:85:d8:84:1c:25:4d:a3:12:17:99:17:47:
f0:dc:bf:7b:9f:c6:aa:21:d7:99:d4:bc:5b:ae:39:16:e8:df:
44:bb:75:63:a3:70:ae:5a:39:24:b2:ea:53:f6:3e:4f:55:51:
c5:aa:dc:10:7e:14:45:5e:ab:dc:aa:be:8e:1a:24:9e:2c:d3:
59:07:68:e9:b7:38:51:20:c8:e5:d5:e4:47:e8:38:43:cd:82:
d2:f8:9f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:24:33 2026 by rpki-client