Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
File: looX4WGWu3qGcY5rK9agfje0DGU.mft (raw, json)
Hash identifier: 56qevaRvT95ZMrGuyl0cF58ijR+0pZFzh7/h/Y/5f5c=
Subject key identifier: 95:B2:88:3E:37:10:E1:0A:5C:2F:49:6F:2E:C8:70:67:92:B9:65:5A
Authority key identifier: 96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
Certificate issuer: /CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Certificate serial: 019D28BBF83917A721F07F24D015E6C4308A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 06:01:40 +0000
Manifest this update: Thu 26 Mar 2026 06:01:40 +0000
Manifest next update: Fri 27 Mar 2026 06:01:40 +0000
Files and hashes: 1: gXHddRiNrKN7zjSp-aiQxBvxK2Q.roa (hash: zkwsVo06oDWwHRS+sP6oB04zQIFU4FpZFrl3lEY5wwg=)
2: looX4WGWu3qGcY5rK9agfje0DGU.crl (hash: yZ7ClHHUkuCttM1RTySnsIfomIt0CATi78iY1XV2X70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:f8:39:17:a7:21:f0:7f:24:d0:15:e6:c4:30:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Validity
Not Before: Mar 26 06:01:40 2026 GMT
Not After : Mar 27 06:01:40 2026 GMT
Subject: CN=95b2883e3710e10a5c2f496f2ec8706792b9655a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:6b:01:16:5f:be:06:d6:9e:19:f4:3e:c0:
a9:83:c0:4d:91:87:e1:02:a5:e3:74:2a:bc:2f:bd:
80:77:6c:21:bf:91:83:20:b7:98:4a:64:53:c7:3c:
00:82:bd:0a:e7:27:6a:65:aa:68:27:48:75:3d:71:
2a:47:c6:60:39:46:e6:c6:6d:1a:d8:7c:0f:67:d8:
1e:0c:a5:e9:0c:a8:85:2b:2a:f7:cd:ee:45:de:43:
04:7a:08:9a:29:98:0f:a2:c5:89:d4:c3:c9:ca:cd:
9d:fd:32:c4:e8:ae:43:5c:dc:29:53:2e:30:44:53:
dd:e9:22:5e:02:76:23:3e:11:bd:87:11:91:ef:e3:
f6:18:d7:51:e8:aa:c6:e4:d0:bf:f4:2b:50:74:df:
db:30:4e:7d:09:99:c3:78:be:cb:f3:19:39:ed:92:
ab:ff:90:a6:50:e1:62:a3:12:f2:04:4e:9a:f2:44:
e4:4e:8e:bc:12:42:0c:4f:79:94:21:9f:e9:66:3b:
57:f7:29:76:a7:7d:36:4f:c8:59:b4:e8:ff:0b:45:
d6:2c:75:58:17:54:5b:7a:da:d7:7e:6c:be:fc:49:
de:3c:55:32:a2:d2:a5:48:37:a4:31:51:93:f6:52:
70:dd:c3:bb:ba:49:6a:e6:ac:ab:e0:c8:c2:9c:e3:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B2:88:3E:37:10:E1:0A:5C:2F:49:6F:2E:C8:70:67:92:B9:65:5A
X509v3 Authority Key Identifier:
keyid:96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:46:a9:67:62:f5:27:a6:ce:84:31:0c:ef:83:c7:63:99:bb:
47:9b:8b:f0:cb:65:7f:b3:31:19:ae:70:d2:5b:ca:60:77:7f:
c0:29:6d:19:f6:f4:4a:cb:2a:04:e6:36:d1:1f:0f:bc:57:a3:
30:c7:b2:26:9c:4e:52:21:8a:db:39:ea:08:94:16:c2:88:8f:
0b:e0:af:6e:e3:55:ab:11:c1:26:f1:ae:8e:08:16:98:5a:84:
74:f4:95:7b:ba:da:57:ba:84:a2:20:fb:8a:b9:c6:a8:b2:f8:
3d:41:ce:0a:fd:d3:e5:72:cd:45:09:0b:30:a1:da:ea:f9:9a:
47:68:00:bc:ac:03:82:99:02:e8:f0:3a:2c:1c:21:9f:f8:22:
58:e8:25:31:ec:e6:4c:d2:97:39:89:75:5e:05:92:13:78:a8:
7d:76:30:f0:78:86:03:60:4f:68:17:41:82:7f:f3:cc:96:e3:
81:79:d9:12:c4:03:45:93:8b:1e:96:96:58:9b:7b:8b:08:cc:
fa:44:3b:3a:95:4c:08:e7:e8:e7:1c:d7:39:ba:cd:f9:b8:4c:
3d:c1:57:1e:51:c5:e6:18:11:97:9c:a3:c4:e6:f5:6f:7b:ed:
12:d2:70:2f:78:15:50:4d:8f:9b:a5:1f:fd:94:fa:fb:45:1e:
14:7d:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:37 2026 by rpki-client