Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: zrLhQAmSxK65wlRwuK3blCGlVsDvCppSt29EixXB8wk=
Subject key identifier: 4C:97:21:6C:13:AE:6A:D5:56:D5:12:1C:BF:DF:3F:56:B1:F3:B0:76
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 01A1250BECF184BD2766A7F999192AA4262D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 09AD
Signing time: Sat 10 Oct 2026 09:01:40 +0000
Manifest this update: Sat 10 Oct 2026 09:01:40 +0000
Manifest next update: Sun 11 Oct 2026 09:01:40 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: WWSG24TYh0sR4ygw5suA6Z2Wq6YdCgkw5+rkIrWsQbM=)
2: no40MMxKtGazjrQJuK_hKTX_kQ4.roa (hash: ZQzvJpr6epq0Aai6epv/lFRS0bDsbahhA2A50WGodXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:ec:f1:84:bd:27:66:a7:f9:99:19:2a:a4:26:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Oct 10 09:01:40 2026 GMT
Not After : Oct 11 09:01:40 2026 GMT
Subject: CN=4c97216c13ae6ad556d5121cbfdf3f56b1f3b076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:ab:3d:b5:51:54:64:56:ed:ff:5c:78:1c:
f8:2a:f2:88:0a:28:9c:30:a2:3f:e0:2a:37:fb:3b:
e8:1a:ca:12:3a:12:5d:bf:c7:df:6d:ea:4b:bb:3e:
d5:27:7d:d1:3d:11:0b:2a:8b:96:f0:88:4f:b2:8d:
f1:09:df:ed:40:89:d6:33:3b:b3:05:f2:bf:d6:ab:
0e:31:e2:16:6b:6e:59:b1:b3:c3:c9:d7:81:72:dd:
6e:42:cc:6c:34:fd:93:5a:15:b2:25:ca:9d:80:e3:
ff:b3:05:2a:6e:f5:01:dc:12:76:c2:bd:75:c6:9e:
d0:05:80:4f:63:97:32:37:82:ee:20:dc:5a:0d:93:
69:f9:7f:88:4d:5f:42:12:ea:a5:67:c2:8d:d1:d6:
b7:55:b6:c8:15:ba:5d:20:23:3f:bb:46:43:5d:9d:
da:70:93:b2:c9:1f:f9:b3:76:b2:a4:4d:b1:c8:d9:
0c:d7:f7:8e:1e:31:51:96:03:de:f8:33:cb:4d:20:
05:7f:b6:48:07:86:10:46:f8:e5:2f:89:a3:7b:b1:
e5:9e:21:d9:8a:4b:0f:00:78:94:30:85:61:0c:1e:
3f:1d:45:86:5c:19:d3:ee:12:26:07:d0:9f:01:e9:
c6:30:c9:46:68:e0:c1:c0:2e:a0:8a:43:03:5b:8a:
d0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:97:21:6C:13:AE:6A:D5:56:D5:12:1C:BF:DF:3F:56:B1:F3:B0:76
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:99:98:39:21:19:3a:6f:28:f0:1d:d3:d4:de:f7:a3:3e:61:
30:d3:73:99:04:12:f9:86:ab:65:6e:e0:82:95:d6:9e:a6:bc:
68:a4:a5:89:77:ea:2d:50:ba:b4:e9:69:d7:7c:45:62:a4:f9:
b9:6b:e7:14:27:7a:49:a0:5e:81:c5:e3:c9:86:c1:11:c3:fa:
aa:65:a0:d4:fb:15:8f:96:2b:3e:dd:f9:b8:81:f1:3d:b1:9a:
3d:1b:3e:61:aa:81:86:d2:db:2e:03:d3:52:84:8d:0e:25:fc:
66:b1:1c:3c:76:1a:cf:1b:df:49:31:86:e4:a6:40:45:90:1b:
1a:4f:f1:37:01:ca:3b:89:07:42:54:8a:73:a6:76:92:91:2f:
de:a7:05:05:47:32:8a:d2:e6:cb:02:18:29:e8:28:a4:36:5c:
ac:63:c7:86:53:15:09:9a:4b:e8:99:32:68:e6:39:c0:8e:36:
5d:4c:03:f1:f2:74:64:b9:3a:80:78:5a:fe:eb:63:db:1e:1d:
78:bf:d2:b2:9d:76:1b:83:b4:3e:4c:f1:9f:ea:a9:04:2a:f9:
ec:94:9e:99:cf:7c:57:de:cc:db:96:40:61:4d:a8:d0:3c:8c:
24:f7:b0:44:0d:5a:fb:6c:29:41:10:d8:47:fb:ea:88:9f:b8:
f3:44:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:37:20 2026 by rpki-client