Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
File: LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json)
Hash identifier: HsswGkNjeVrX8l+X/N5dSXGmCAvioZ/gaFmKaJMbma8=
Subject key identifier: 0F:98:54:AA:2E:FE:CA:95:5A:65:5A:3F:AB:58:39:37:B4:47:5F:B9
Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
Certificate issuer: /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Certificate serial: 019D2695DC744C7935FA1FFDE104CF1B47C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:00:48 +0000
Manifest this update: Wed 25 Mar 2026 20:00:48 +0000
Manifest next update: Thu 26 Mar 2026 20:00:48 +0000
Files and hashes: 1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: 2YV0qstMcivWeK16VWcTe1Eaz8Vw8ZqWUTjXF/pGDtg=)
2: z82FEt3pcMufgW4WCxzJHceETKc.roa (hash: 5ZwxV3wn8Z4Xkli1EfsKloCex1LXSENEzKtm05iJtlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:dc:74:4c:79:35:fa:1f:fd:e1:04:cf:1b:47:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Validity
Not Before: Mar 25 20:00:48 2026 GMT
Not After : Mar 26 20:00:48 2026 GMT
Subject: CN=0f9854aa2efeca955a655a3fab583937b4475fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:6e:8c:03:77:e8:2a:53:8b:5c:ab:32:f3:
50:1d:e0:bf:8c:a7:d1:ea:ea:52:29:0c:2c:7e:b2:
3f:3b:bf:b0:e1:d7:05:0a:de:44:e8:39:5e:af:13:
a8:24:58:05:84:a1:ea:df:21:74:ca:f8:62:e3:39:
a5:d4:11:48:46:3b:0b:6d:7b:d9:ef:62:0e:7b:3a:
a5:d2:b6:cd:3e:6b:a3:4e:76:8b:d6:c2:6b:55:c0:
b5:6a:15:01:52:a6:63:b6:1a:f9:84:0b:39:98:e4:
eb:70:5d:88:55:02:56:5b:ae:a1:e2:f4:92:00:f4:
0a:67:61:fe:6b:33:15:b4:a5:52:ec:c0:5d:ea:02:
8e:d1:52:77:d1:a5:8c:a6:7e:5f:9c:bf:08:2a:d5:
e7:0b:45:6b:4d:d1:c8:ea:30:1c:c8:44:8a:e6:81:
14:d8:02:17:df:17:3f:d6:f1:b4:5c:bd:23:b4:2b:
78:18:8a:ab:9a:73:7a:f1:06:ef:95:23:81:5f:68:
ab:a6:1b:4a:a5:4e:2e:d4:04:66:8a:a8:24:6e:08:
07:81:ec:87:71:91:f3:0d:1a:be:87:ad:d7:eb:41:
f2:74:80:89:39:10:2f:5f:98:94:98:38:c8:ed:a2:
f9:c4:24:e1:04:98:20:d8:b2:76:14:32:8d:b1:9d:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:98:54:AA:2E:FE:CA:95:5A:65:5A:3F:AB:58:39:37:B4:47:5F:B9
X509v3 Authority Key Identifier:
keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6d:a4:b2:87:c8:e2:72:7a:7d:fc:fc:cb:81:d6:38:dd:5a:
e4:2b:73:1d:9d:6c:54:c2:fe:ee:a4:9b:06:b4:32:f2:c5:db:
c7:c5:62:18:6d:88:a7:6f:2e:f3:8c:ab:39:79:ce:f3:e6:1d:
51:78:0f:4e:6d:11:5b:4a:5f:70:02:f6:07:19:ce:b5:86:f2:
bd:13:ea:53:3e:35:f6:11:76:82:b7:da:f4:88:a8:d5:f0:12:
60:35:49:c2:3c:c0:1d:01:61:28:c1:b0:51:1b:80:18:e5:25:
4f:31:f2:ff:93:fe:b6:74:02:ad:11:40:69:13:72:2d:05:e9:
b9:42:7c:56:d4:3e:ed:f7:84:bb:ab:84:a8:66:54:2a:45:75:
72:87:7f:c8:62:f1:97:7e:a0:8a:60:f0:77:a5:5e:79:99:a4:
b5:10:db:14:c7:61:3b:4a:53:ca:2a:18:b4:b1:b5:b8:c4:2a:
e2:eb:de:53:82:8a:0b:cd:52:4f:22:f9:25:db:ad:d0:08:96:
c7:8b:d5:24:cb:16:14:56:7e:ab:a5:4e:f7:32:39:44:0f:7c:
a1:be:3b:84:ee:f1:bd:26:6d:25:76:a9:e7:d0:fb:2c:94:f3:
e5:e4:e6:e2:1f:b2:08:61:0c:46:9f:c6:44:bd:d5:0c:f4:76:
6d:0a:3c:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mldx0THk1+h/94QTPG0fGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZWZkZTMwYjhhNThiMzIyYTQzMWYwODI5ZWQ0ZmYzM2I1
YWFjMTgwHhcNMjYwMzI1MjAwMDQ4WhcNMjYwMzI2MjAwMDQ4WjAzMTEwLwYDVQQD
EygwZjk4NTRhYTJlZmVjYTk1NWE2NTVhM2ZhYjU4MzkzN2I0NDc1ZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEVujAN36CpTi1yrMvNQHeC/jKfR
6upSKQwsfrI/O7+w4dcFCt5E6DlerxOoJFgFhKHq3yF0yvhi4zml1BFIRjsLbXvZ
72IOezql0rbNPmujTnaL1sJrVcC1ahUBUqZjthr5hAs5mOTrcF2IVQJWW66h4vSS
APQKZ2H+azMVtKVS7MBd6gKO0VJ30aWMpn5fnL8IKtXnC0VrTdHI6jAcyESK5oEU
2AIX3xc/1vG0XL0jtCt4GIqrmnN68QbvlSOBX2irphtKpU4u1ARmiqgkbggHgeyH
cZHzDRq+h63X60HydICJORAvX5iUmDjI7aL5xCThBJgg2LJ2FDKNsZ3d4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+YVKou/sqVWmVaP6tYOTe0R1+5MB8GA1UdIwQY
MBaAFCzv3jC4pYsyKkMfCCntT/M7WqwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zM2EwZjktMTE3OC00YTZkLWI5NjQt
ZmY3NjVmODUzMWQ1LzEvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zM2EwZjktMTE3OC00YTZkLWI5NjQtZmY3NjVmODUzMWQ1
LzEvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh22ksofI
4nJ6ffz8y4HWON1a5CtzHZ1sVML+7qSbBrQy8sXbx8ViGG2Ip28u84yrOXnO8+Yd
UXgPTm0RW0pfcAL2BxnOtYbyvRPqUz419hF2grfa9Iio1fASYDVJwjzAHQFhKMGw
URuAGOUlTzHy/5P+tnQCrRFAaRNyLQXpuUJ8VtQ+7feEu6uEqGZUKkV1cod/yGLx
l36gimDwd6VeeZmktRDbFMdhO0pTyioYtLG1uMQq4uveU4KKC81STyL5Jdut0AiW
x4vVJMsWFFZ+q6VO9zI5RA98ob47hO7xvSZtJXap59D7LJTz5eTm4h+yCGEMRp/G
RL3VDPR2bQo8SQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:08 2026 by rpki-client