Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: E5zt+ezaToLLfmjJx+9iey7w/Br+N+0O38hLeVceXRA=
Subject key identifier: 75:71:FD:BF:A7:DE:01:82:31:39:F7:EF:F9:66:38:70:F9:BE:26:B7
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 01A11F4044113930AF94A8FD8AD5946378A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 09AA
Signing time: Fri 09 Oct 2026 06:01:07 +0000
Manifest this update: Fri 09 Oct 2026 06:01:07 +0000
Manifest next update: Sat 10 Oct 2026 06:01:07 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: wxRKuou6J1RlGA0qGmZFrglF778JqPz2ck1T447bEBQ=)
2: no40MMxKtGazjrQJuK_hKTX_kQ4.roa (hash: ZQzvJpr6epq0Aai6epv/lFRS0bDsbahhA2A50WGodXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:40:44:11:39:30:af:94:a8:fd:8a:d5:94:63:78:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Oct 9 06:01:07 2026 GMT
Not After : Oct 10 06:01:07 2026 GMT
Subject: CN=7571fdbfa7de01823139f7eff9663870f9be26b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:be:ac:b1:a5:b2:c3:ca:62:06:db:62:ad:6d:
43:a7:aa:8d:d6:ab:e2:b5:3c:b4:7b:27:bc:d4:e9:
08:58:67:db:b2:b6:ab:22:0d:5f:39:49:12:23:e5:
47:d5:79:46:7f:31:24:aa:f7:76:34:19:18:b7:fb:
85:79:bc:0d:32:3d:be:ec:25:8c:08:7f:f5:6c:94:
4b:e9:29:7b:7a:65:21:9a:82:92:88:5d:a0:e9:f1:
2c:00:d6:5c:b1:b7:98:e9:58:50:b0:66:70:b2:9d:
1e:c7:ea:e6:62:3f:7f:aa:18:ce:c2:d3:f7:d4:bb:
2f:fd:61:b8:a1:c4:01:ac:58:c5:77:76:01:22:3f:
03:f6:62:12:03:7e:b6:91:86:82:36:26:37:38:27:
13:5e:46:98:42:d6:00:84:6f:e4:41:a6:75:fd:ba:
17:41:e6:c4:15:ff:df:8e:2e:23:58:bb:65:8a:1a:
4e:ae:e2:b0:1a:db:52:cb:4b:54:c5:bc:09:18:a1:
15:e0:52:44:95:b0:db:0f:aa:93:64:97:b4:83:5b:
fb:b3:fd:40:1d:10:92:98:41:c9:82:41:37:04:1a:
2a:2c:44:61:c0:9c:1f:33:e1:ba:e7:77:0f:b7:f4:
c7:8d:60:cf:49:d0:f3:d3:0c:20:51:20:05:29:2c:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:71:FD:BF:A7:DE:01:82:31:39:F7:EF:F9:66:38:70:F9:BE:26:B7
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:a3:3d:09:6e:c7:f2:4d:2e:41:4c:2a:8b:42:a1:52:c8:ce:
3d:88:e8:e6:21:64:85:d5:2d:c0:ea:cf:7c:35:dc:c8:b1:c7:
30:49:d7:9e:89:75:ce:12:82:6a:1d:02:09:34:ef:ad:50:aa:
6a:cb:57:57:ce:e6:26:43:ea:1e:92:0b:b7:52:c6:a3:d8:00:
c8:26:f7:31:97:e7:9b:32:3a:83:7d:8e:0f:b2:a5:0c:08:e4:
15:c8:73:dd:ce:fd:93:88:7a:91:7b:8b:f1:fe:1d:79:32:01:
8b:e4:ac:6d:40:ef:52:5d:e9:18:b9:3d:0f:4c:d4:a5:d3:dd:
4a:30:45:a0:9d:7f:7c:d2:73:58:89:8a:ef:1b:10:61:de:f1:
ac:70:68:eb:40:fc:eb:53:e8:80:84:f4:a2:de:65:3e:a8:f7:
43:e0:04:a4:56:ae:ac:cb:8a:99:c8:50:a0:63:4b:25:10:31:
dd:89:ae:b1:74:73:94:2c:a1:ad:f9:1d:6f:03:01:56:3c:68:
88:05:ad:42:37:0d:97:60:f7:43:44:ad:86:52:11:43:d8:91:
46:aa:22:5f:b2:a2:4d:13:38:7e:10:da:21:1a:37:ba:f0:d2:
a7:ce:4e:0e:75:e0:5b:a6:41:11:84:54:2a:23:6a:4c:a7:53:
4c:bb:cb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:43:54 2026 by rpki-client