Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
File: LosErWkLczj3wP51zzs6eFabquU.mft (raw, json)
Hash identifier: 97oizy+dZ90ohQxyxzMHZxKd6CZuHDkvOj/0nPgxzB8=
Subject key identifier: 5B:C7:FC:0A:01:8A:F6:B4:86:62:0C:96:AC:FC:CB:DF:A2:65:4E:F6
Authority key identifier: 2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
Certificate issuer: /CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Certificate serial: 019D2704E60AC2438ECF45AE2B9D2B54F343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
Manifest number: 1314
Signing time: Wed 25 Mar 2026 22:02:05 +0000
Manifest this update: Wed 25 Mar 2026 22:02:05 +0000
Manifest next update: Thu 26 Mar 2026 22:02:05 +0000
Files and hashes: 1: LosErWkLczj3wP51zzs6eFabquU.crl (hash: S4XwctDNzFKm8/5+56gqYQxVdA4pYUl+X2gK/AG/xMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:e6:0a:c2:43:8e:cf:45:ae:2b:9d:2b:54:f3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Validity
Not Before: Mar 25 22:02:05 2026 GMT
Not After : Mar 26 22:02:05 2026 GMT
Subject: CN=5bc7fc0a018af6b486620c96acfccbdfa2654ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:9e:90:fe:3d:1a:97:1a:9d:34:4f:6d:fc:ad:
4f:d9:ae:5d:34:6e:58:c8:03:b3:d9:ae:57:ea:aa:
9f:ca:49:94:66:74:f1:69:24:f5:ae:15:4b:a8:cb:
2c:92:6a:13:36:30:bf:b5:0f:4f:ff:a7:e3:81:4f:
c7:60:da:14:d1:cb:17:78:11:ac:c3:82:c8:aa:ac:
82:e8:18:82:d7:b4:ce:b4:fb:ce:b1:0e:f6:26:73:
58:96:eb:71:33:27:2f:8c:6f:b9:4e:5b:32:e2:a9:
86:54:9e:1f:ea:7d:d9:87:94:90:ef:db:35:89:bb:
b7:1d:1f:20:0f:0d:c9:07:f8:1c:ae:d8:bc:9b:d9:
76:ab:46:9e:7b:b3:8c:0e:49:bb:e1:83:4e:ca:fe:
63:10:50:bf:c1:2e:b6:83:4d:3c:eb:15:a7:04:62:
3e:34:ba:a8:d9:f3:5d:ef:4b:e2:f5:ca:36:dd:21:
66:e6:e8:90:11:6f:14:f7:b5:97:55:78:32:3e:a9:
50:d9:be:e0:f0:cf:2b:7b:f2:6b:26:f4:02:ff:05:
28:c5:0c:b0:72:52:32:c1:a0:4d:9b:33:fa:c9:67:
d0:88:58:dd:ef:21:cb:bc:ca:7f:7e:67:96:d3:76:
69:b0:89:2b:c3:17:24:49:89:9e:ac:99:29:b4:7e:
5c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C7:FC:0A:01:8A:F6:B4:86:62:0C:96:AC:FC:CB:DF:A2:65:4E:F6
X509v3 Authority Key Identifier:
keyid:2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:96:b1:76:69:68:65:a4:2a:31:54:7c:9b:7b:e7:24:46:b6:
66:f8:43:e6:74:5e:ab:a6:93:94:cf:fb:a5:ff:82:55:52:9e:
13:78:89:1c:e1:da:27:a6:2c:14:28:41:46:b3:9e:39:bd:bd:
06:a3:20:0f:9c:f2:b2:41:7c:d7:6b:cd:0e:b3:18:70:b9:8d:
68:42:dc:12:ff:bc:6a:32:11:17:9a:e2:e3:20:47:24:52:60:
8b:3c:9b:89:69:b7:8e:d7:54:81:db:44:d5:d3:7c:a3:b0:7a:
5c:72:68:2c:be:6f:e9:17:d6:75:06:b9:75:3e:13:03:98:1a:
57:f7:b9:48:9f:9f:9f:56:4a:3f:ac:2d:d4:05:47:c3:51:57:
b9:85:d8:49:29:7b:a7:d6:67:72:d6:35:d0:7f:1f:94:04:7e:
f4:00:63:91:49:77:f0:01:ca:cb:6d:53:32:9a:b3:97:44:23:
0e:1f:ea:a7:4e:0a:d5:0a:5a:76:77:32:d9:f9:92:5b:27:c7:
d3:62:da:11:f7:49:ae:51:5d:ad:93:61:35:e8:a0:86:40:df:
de:82:dc:bf:6e:ed:61:b4:7b:18:94:5e:a3:43:07:36:6e:d3:
5f:8c:ef:fe:f1:0b:32:08:f6:f4:f6:9d:ec:42:aa:62:8f:64:
23:6d:d3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:41 2026 by rpki-client