Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: azpZZegwypXtuJdTaOLgpr6/4Y2WHolNKbOwUEpOTks=
Subject key identifier: AE:C7:BA:F9:8F:B3:F6:31:6F:A8:4C:2A:73:AC:3A:83:31:84:6B:4E
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 019F8FEBE44C9527F7A85B356C2F53845D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 19E3
Signing time: Thu 23 Jul 2026 17:00:28 +0000
Manifest this update: Thu 23 Jul 2026 17:00:28 +0000
Manifest next update: Fri 24 Jul 2026 17:00:28 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: TrijKdCxlqJkwO2Wd5Uvprzco5Advx1/rY0mbozwM1g=)
2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
3: a4RVALqt3vHeDDskNW3A5CdGc-U.roa (hash: TGxk49hSl+fpcglkMzdXiM6aB3O9APTDcKaAiPFnS+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:e4:4c:95:27:f7:a8:5b:35:6c:2f:53:84:5d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Jul 23 17:00:28 2026 GMT
Not After : Jul 24 17:00:28 2026 GMT
Subject: CN=aec7baf98fb3f6316fa84c2a73ac3a8331846b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:85:0f:ed:7a:ff:27:96:56:f0:6e:d8:59:
cc:2d:87:5c:e2:5e:72:8d:16:51:b8:6c:5a:0f:50:
7a:ef:73:69:2a:d4:9f:6a:27:b1:5c:83:64:64:f0:
f9:8c:82:c1:ae:88:0c:eb:94:02:13:f4:3b:e8:a0:
c6:8f:20:f6:6a:3f:56:a4:ec:32:41:78:26:61:21:
32:83:0e:b9:45:a4:94:30:68:1c:73:c9:eb:c0:5d:
7c:3f:d4:92:87:c7:84:af:e9:24:ca:ad:35:9d:b1:
89:e3:24:be:93:bb:5a:5b:d4:d3:f8:94:c1:1c:28:
2f:95:59:af:bb:36:01:19:35:7a:9c:0a:79:9d:d4:
0e:23:b6:f9:1f:e7:4a:b2:a2:59:6d:8c:fe:93:0b:
e7:6b:92:67:3b:5a:ef:43:a3:79:95:ea:32:68:ac:
e9:f4:77:ff:4b:ea:46:e2:06:66:ec:32:13:97:27:
5d:12:85:ec:ab:52:96:ab:c1:bf:49:b1:bf:8d:cb:
10:e8:43:28:76:e0:68:58:9a:c0:16:f2:dc:37:b7:
1d:cf:55:be:29:ce:03:34:0b:78:f0:92:08:5d:4b:
ef:1f:3d:1b:27:22:a1:2d:14:20:b6:a9:31:d6:fe:
59:b7:7f:01:56:45:e4:66:b5:ff:a6:b6:83:ea:f8:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C7:BA:F9:8F:B3:F6:31:6F:A8:4C:2A:73:AC:3A:83:31:84:6B:4E
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:36:87:fe:82:72:4a:fe:9f:9d:b6:e8:5f:b3:49:45:b3:6b:
2d:8a:96:8c:c4:28:6d:d4:6b:12:05:bc:2c:8a:c1:e0:e4:27:
97:05:73:c4:96:67:13:35:50:fa:6f:1e:2d:44:1d:55:3b:d8:
13:aa:04:4c:30:46:ad:c6:31:bf:2e:f7:ff:58:82:b5:4c:9d:
b2:87:cb:d1:38:9e:3b:e1:9b:db:3b:04:0e:3a:95:fc:cd:dc:
d6:04:4e:6e:59:a4:5d:32:c5:a7:2a:94:83:fd:38:50:ed:19:
6a:71:9f:c2:11:12:8c:6c:98:60:a2:9c:f7:2c:9f:29:3f:b2:
13:d0:f4:5b:5c:b9:d7:be:d5:e9:df:4a:12:64:81:ae:71:cd:
e2:24:ff:c4:67:15:5b:e4:2f:eb:bf:42:be:c8:81:d5:bc:2b:
e0:69:1a:d6:b3:43:b1:19:7f:19:87:97:c0:0d:07:59:e5:01:
64:e9:d6:30:fc:1e:8b:a9:1b:a8:13:45:7f:dd:d4:4a:69:71:
13:7c:e5:15:e4:1e:32:3f:10:86:46:8c:29:bb:86:d9:bf:3d:
46:96:b2:b9:bc:06:db:66:d6:af:a4:85:c1:29:5c:d1:e3:11:
3a:f0:2b:12:2c:77:8e:69:c4:41:98:5f:bd:09:63:ca:05:2d:
f7:ac:92:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:25 2026 by rpki-client