Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
File: looX4WGWu3qGcY5rK9agfje0DGU.mft (raw, json)
Hash identifier: 3JdPzlg3+HnXctSO+LK/Y7doHXL9TAiEFSOXQr0Ehlo=
Subject key identifier: 48:A4:3B:CD:C1:96:07:34:42:39:F0:36:AC:48:7B:A0:88:14:2D:BA
Authority key identifier: 96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
Certificate issuer: /CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Certificate serial: 01A12BB291CE00E823688D690D2F176E099C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 16:01:25 +0000
Manifest this update: Sun 11 Oct 2026 16:01:25 +0000
Manifest next update: Mon 12 Oct 2026 16:01:25 +0000
Files and hashes: 1: 1-fbqUSS1kPwLmHgUc948G9nLk74.roa (hash: 6NIeRWpjtcmAve+ttAm4K5c+uV1/s3aliAY3xDkkj3A=)
2: gXHddRiNrKN7zjSp-aiQxBvxK2Q.roa (hash: zkwsVo06oDWwHRS+sP6oB04zQIFU4FpZFrl3lEY5wwg=)
3: looX4WGWu3qGcY5rK9agfje0DGU.crl (hash: d7MtU8tgNzKUj4IrAvkZiSR57bAYAsf84aUFQC+kTAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:91:ce:00:e8:23:68:8d:69:0d:2f:17:6e:09:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Validity
Not Before: Oct 11 16:01:25 2026 GMT
Not After : Oct 12 16:01:25 2026 GMT
Subject: CN=48a43bcdc19607344239f036ac487ba088142dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cb:c3:0e:27:54:21:7e:2a:00:3b:2f:7b:88:
49:71:ed:45:d3:ed:ae:9e:a5:24:34:be:31:d1:83:
d9:ba:62:6d:8b:39:45:6c:47:d3:9b:01:d2:a2:bf:
d7:ab:e6:88:b7:6d:f2:b5:89:22:22:6e:f9:d6:0c:
0d:d6:39:df:c2:ef:34:a5:06:9e:6f:2f:ad:c2:65:
3f:49:13:df:8b:07:9d:6f:39:e7:10:04:73:ed:72:
13:8e:a1:ee:24:2d:50:7d:a7:3b:64:ba:08:6e:db:
3d:eb:59:2d:b9:eb:6b:79:5d:ea:c8:30:69:ec:43:
c6:a3:54:5b:52:d2:e0:c8:c5:1d:e3:33:08:cd:f2:
2f:40:bd:37:d6:90:b6:39:b2:58:5b:4c:b6:6c:01:
ea:ae:ba:a7:a9:0c:cc:1b:14:6f:f0:24:14:05:3a:
38:6d:d7:0f:f1:a1:31:4a:9a:43:59:08:be:25:8e:
9c:e9:99:20:01:74:e5:a0:af:1e:c9:6c:df:75:9f:
58:c9:5d:ae:ca:c2:0a:7e:02:b8:28:16:83:7a:2e:
9b:cf:92:a6:bb:9a:e1:4b:49:98:5d:48:4f:81:c7:
fd:0e:e5:79:ef:58:da:3f:a8:d0:67:48:ee:e4:a0:
e6:43:d4:f1:aa:bf:63:7f:2e:d9:5e:35:01:71:fb:
45:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A4:3B:CD:C1:96:07:34:42:39:F0:36:AC:48:7B:A0:88:14:2D:BA
X509v3 Authority Key Identifier:
keyid:96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:24:8c:56:fa:7c:b6:cf:ca:2e:90:fe:42:7c:31:8e:cf:0f:
34:27:3b:a7:83:dd:8d:56:83:13:b0:42:07:e9:68:b5:88:3f:
ef:40:c1:ea:3c:b6:66:1d:20:ac:87:82:f2:78:8f:73:bd:85:
a8:99:ca:84:66:f7:3e:99:0c:eb:cb:8e:28:45:67:95:4d:3d:
5b:80:94:b2:93:8d:99:ba:9b:19:b8:37:cc:a5:e9:8b:b3:8f:
a2:8c:c6:75:61:83:49:b1:ee:02:a0:88:ca:7f:3e:9d:64:6a:
8f:33:88:76:e2:3d:00:dd:62:ff:30:1a:04:ae:b5:29:56:13:
ac:94:4f:e0:e9:4c:7f:df:ad:47:34:05:7b:0b:10:3b:71:6c:
f7:58:e6:ae:a0:4e:fa:82:50:8c:71:24:40:6d:21:11:e6:e7:
4b:2e:b5:98:53:81:ed:e3:94:51:4e:3c:bd:cd:7c:0e:03:63:
44:a7:ca:44:fd:b7:9c:ea:e2:4c:48:42:bd:63:df:67:1f:2b:
29:d3:57:1c:71:06:e6:72:5b:ce:9b:98:45:e3:e0:29:e0:f0:
55:bd:12:8e:12:a9:7f:f8:70:dd:79:48:c5:49:95:ad:47:9d:
54:47:40:2b:c0:95:a1:13:22:99:31:c6:91:cb:3a:bd:21:aa:
5e:81:f0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:41:22 2026 by rpki-client