Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
File: LOKZUFiz3prtI6Yff7e1t7GTmEo.mft (raw, json)
Hash identifier: AGKhMCUWs9Uw8wT0/gOdQD8jqpC4YJJXLmGcPPcC5SM=
Subject key identifier: A3:44:C8:3D:F5:1D:11:EB:AB:7C:88:3F:D1:3E:5B:F7:EF:E6:BF:18
Authority key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
Certificate issuer: /CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Certificate serial: 019D34510893E549B038B6CDBAACC77E46FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
Manifest number: 0F84
Signing time: Sat 28 Mar 2026 12:00:18 +0000
Manifest this update: Sat 28 Mar 2026 12:00:18 +0000
Manifest next update: Sun 29 Mar 2026 12:00:18 +0000
Files and hashes: 1: LOKZUFiz3prtI6Yff7e1t7GTmEo.crl (hash: WB3mSBy4po9IzqkwsO7bhGyYOG1l0Gu7PqjnaykeyUc=)
2: ka7aLk420YTBj2lWDkHarAVtbD0.roa (hash: mbAETTjg/QXgcUSNvJYoLhzkdNjTzmiAhVEDDUMk/LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:08:93:e5:49:b0:38:b6:cd:ba:ac:c7:7e:46:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Validity
Not Before: Mar 28 12:00:18 2026 GMT
Not After : Mar 29 12:00:18 2026 GMT
Subject: CN=a344c83df51d11ebab7c883fd13e5bf7efe6bf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ff:90:d1:5f:18:3a:41:6f:31:ab:11:bc:60:
96:7d:91:b7:a7:bc:34:a0:a9:74:d2:c6:8a:4e:cc:
42:28:f6:53:ed:aa:37:4b:13:21:7e:7d:59:b3:bf:
62:f9:16:7b:94:28:94:46:c7:7c:d9:3a:f3:78:da:
3f:fc:8a:e4:06:01:0c:5a:6d:df:22:4c:d4:8c:97:
20:ad:3c:4a:42:5d:52:ef:43:e2:a6:70:53:84:55:
f4:4e:b6:c9:ab:32:24:25:d3:0b:17:c4:d3:ec:e5:
e3:93:20:10:cf:ed:e7:9e:b4:9a:a5:0e:9f:d5:f2:
e2:59:5d:19:c7:93:40:7e:ac:9c:e8:46:dd:c4:8e:
5b:ae:c7:32:94:42:c8:4a:4f:90:f7:0e:2a:9f:a8:
86:f4:1d:a9:8b:13:af:0e:79:f2:55:f4:a3:5d:22:
2d:72:bc:89:da:c3:08:e6:b6:93:f7:ae:71:12:49:
5f:a0:d8:87:bf:d9:88:be:83:fe:8e:bc:7b:89:07:
f6:b2:95:ec:3d:6f:eb:29:84:8b:ed:d3:54:a0:65:
6e:b5:46:c4:b0:ca:4b:26:93:52:84:6b:16:e9:48:
0b:9f:f0:22:5a:2e:65:89:60:ba:e3:5b:ab:35:85:
93:3b:4e:45:e5:3d:4a:69:85:f9:7f:82:eb:0a:cb:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:44:C8:3D:F5:1D:11:EB:AB:7C:88:3F:D1:3E:5B:F7:EF:E6:BF:18
X509v3 Authority Key Identifier:
keyid:2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0b:96:ea:8c:a2:03:ec:40:7e:06:4d:01:e1:e6:68:4d:4d:
0d:7d:ea:f8:9f:f3:ff:74:6e:ea:f3:94:a7:72:0a:f4:91:94:
4b:2b:4c:6c:00:cf:9d:bf:3a:b9:47:84:55:31:bb:ee:d6:cc:
95:b8:0b:09:18:f3:1a:9b:a4:a5:7b:46:85:35:80:72:50:24:
43:73:a7:10:92:2f:ba:d9:5c:0b:fe:0e:2a:fd:1c:06:f9:c9:
d0:38:57:04:0b:39:ad:d7:d3:d9:8c:0d:04:7d:0e:3e:e6:7d:
80:1b:8b:6d:af:6c:57:5d:76:ab:ef:9f:cf:dc:04:9b:c0:5f:
13:8b:25:cf:7c:bc:5a:4d:e4:d8:ec:62:9b:37:4b:db:2c:4f:
1c:fa:51:7e:6d:51:f0:4e:07:82:d9:33:5b:11:79:2b:76:5f:
8b:e5:d7:49:ad:c5:1b:be:f1:2c:b0:11:cb:73:e4:86:25:b3:
f4:d2:16:5e:49:c5:0c:96:16:fe:57:97:54:72:cb:fc:2b:dc:
45:39:e8:20:d1:06:8c:0c:c1:c4:5f:d3:d2:cd:58:21:8a:6c:
57:0f:60:93:2f:0b:99:c2:95:dc:94:03:b6:14:e0:91:f0:dc:
98:6b:94:ac:4d:0f:c0:58:7c:b0:4a:ca:d0:96:8b:f3:44:0b:
fc:13:c0:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00UQiT5UmwOLbNuqzHfkb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZTI5OTUwNThiM2RlOWFlZDIzYTYxZjdmYjdiNWI3YjE5
Mzk4NGEwHhcNMjYwMzI4MTIwMDE4WhcNMjYwMzI5MTIwMDE4WjAzMTEwLwYDVQQD
EyhhMzQ0YzgzZGY1MWQxMWViYWI3Yzg4M2ZkMTNlNWJmN2VmZTZiZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/+Q0V8YOkFvMasRvGCWfZG3p7w0
oKl00saKTsxCKPZT7ao3SxMhfn1Zs79i+RZ7lCiURsd82TrzeNo//IrkBgEMWm3f
IkzUjJcgrTxKQl1S70PipnBThFX0TrbJqzIkJdMLF8TT7OXjkyAQz+3nnrSapQ6f
1fLiWV0Zx5NAfqyc6EbdxI5brscylELISk+Q9w4qn6iG9B2pixOvDnnyVfSjXSIt
cryJ2sMI5raT965xEklfoNiHv9mIvoP+jrx7iQf2spXsPW/rKYSL7dNUoGVutUbE
sMpLJpNShGsW6UgLn/AiWi5liWC641urNYWTO05F5T1KaYX5f4LrCsvOWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNEyD31HRHrq3yIP9E+W/fv5r8YMB8GA1UdIwQY
MBaAFCzimVBYs96a7SOmH3+3tbexk5hKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE9LWlVGaXozcHJ0STZZZmY3ZTF0N0dUbUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9kNTIwZGItYmRmOC00ZjI3LThkZmYt
OGMxMzBlNjg0MWRiLzEvTE9LWlVGaXozcHJ0STZZZmY3ZTF0N0dUbUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9kNTIwZGItYmRmOC00ZjI3LThkZmYtOGMxMzBlNjg0MWRi
LzEvTE9LWlVGaXozcHJ0STZZZmY3ZTF0N0dUbUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQuW6oyi
A+xAfgZNAeHmaE1NDX3q+J/z/3Ru6vOUp3IK9JGUSytMbADPnb86uUeEVTG77tbM
lbgLCRjzGpukpXtGhTWAclAkQ3OnEJIvutlcC/4OKv0cBvnJ0DhXBAs5rdfT2YwN
BH0OPuZ9gBuLba9sV112q++fz9wEm8BfE4slz3y8Wk3k2OximzdL2yxPHPpRfm1R
8E4HgtkzWxF5K3Zfi+XXSa3FG77xLLARy3PkhiWz9NIWXknFDJYW/leXVHLL/Cvc
RTnoINEGjAzBxF/T0s1YIYpsVw9gky8LmcKV3JQDthTgkfDcmGuUrE0PwFh8sErK
0JaL80QL/BPA1Q==
-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:17 2026 by rpki-client