Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: LBoNxmKszHeb4aO9/6fTgIAc7R4ZQsjiWUVxmbF1hzc=
Subject key identifier: D5:29:2A:8F:7D:FD:26:40:B1:4D:96:5D:B8:7F:4E:52:C5:07:0B:48
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 01A0E1E2AD169B4B0CD161A26C5AEB3DF945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1A92
Signing time: Sun 27 Sep 2026 08:02:04 +0000
Manifest this update: Sun 27 Sep 2026 08:02:04 +0000
Manifest next update: Mon 28 Sep 2026 08:02:04 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: JvRtfTppUocXxdWai8nIQh3V+P0LNqnxULHes8cZo0w=)
2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
3: a4RVALqt3vHeDDskNW3A5CdGc-U.roa (hash: TGxk49hSl+fpcglkMzdXiM6aB3O9APTDcKaAiPFnS+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:ad:16:9b:4b:0c:d1:61:a2:6c:5a:eb:3d:f9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Sep 27 08:02:04 2026 GMT
Not After : Sep 28 08:02:04 2026 GMT
Subject: CN=d5292a8f7dfd2640b14d965db87f4e52c5070b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:c1:1c:9c:53:8f:97:17:0a:bf:16:28:63:
5a:a7:30:26:ae:5e:25:9a:21:53:63:76:8f:2c:81:
d3:f2:91:36:d2:96:13:9d:bc:05:c6:2b:8f:49:17:
84:52:c5:ef:ae:74:2d:ee:ea:b5:6c:27:e2:d8:6b:
86:9b:0b:ba:c3:8d:20:fd:f5:8f:c3:c9:29:7c:6e:
0a:0d:b0:0c:71:c5:f9:1f:41:03:4c:66:23:79:53:
44:30:1a:31:14:c0:84:c6:77:3a:26:33:28:37:d1:
d1:1b:23:bc:6a:7a:87:b3:c3:7b:9f:1d:a6:6a:b5:
05:58:3a:1c:40:15:f8:14:02:c0:6d:04:3f:b6:6d:
22:13:0a:2f:f9:c5:99:10:25:d1:1f:8a:83:1b:c9:
87:c2:89:d9:96:36:f5:cb:a4:91:2d:b8:de:77:c7:
02:54:6d:23:1d:97:27:04:34:b7:0f:01:38:8c:46:
c5:6b:5c:e0:fa:40:37:c0:73:3c:2f:54:da:de:0a:
ef:d3:fa:e0:f1:4b:a3:59:bc:65:02:0f:ab:fc:fa:
24:1c:e0:30:f5:9e:41:39:06:14:fe:30:d0:07:e1:
69:67:fa:d5:58:9a:d7:59:98:69:81:cc:99:02:d5:
fe:bf:0d:44:c4:ac:67:43:b4:38:ed:06:3a:40:8f:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:29:2A:8F:7D:FD:26:40:B1:4D:96:5D:B8:7F:4E:52:C5:07:0B:48
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:46:34:14:0d:5c:76:b6:f8:96:5d:b6:29:a7:9b:d9:25:a5:
cb:1e:5e:7a:ef:62:cf:8f:92:f8:c9:02:3c:ca:b2:88:a9:e7:
e9:c7:42:a9:9f:4d:27:43:5f:c3:d8:c4:7c:d7:d9:1b:bf:59:
e8:f0:01:df:c8:c7:71:1c:75:a2:1b:0e:92:9e:52:38:70:93:
2d:41:b7:04:8c:80:3b:42:76:6b:82:0e:bc:00:3f:bf:26:34:
fb:f8:1a:29:d8:26:3e:50:da:2c:85:c8:c1:2d:e5:f4:68:0c:
9e:15:9e:34:1d:40:68:77:45:b8:73:11:8e:81:fb:65:68:f0:
3a:bd:01:1f:3b:29:81:d0:b7:4c:5e:ad:14:7b:7b:43:02:63:
91:74:67:c2:9e:b9:5c:f5:4b:25:61:c8:92:27:ac:9c:51:ae:
58:10:8d:40:17:e0:1a:e7:c9:74:56:50:91:f3:06:00:96:7b:
52:22:87:2e:d3:d0:94:a0:da:51:af:04:a5:1f:ea:10:4f:12:
fa:4c:5e:c5:ec:f3:3c:46:9b:b9:ce:3d:f7:4f:ee:d5:84:5c:
2f:af:68:6f:34:06:8c:9d:40:95:51:2b:ad:b2:df:80:46:6b:
6a:d1:f9:bc:ee:03:07:79:26:0e:0b:67:58:74:99:41:4f:b0:
30:91:90:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:14:35 2026 by rpki-client