Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: JevXra+5rCl193AZ8jRdyRaO1HhqvNOCKN/jU5EItqk=
Subject key identifier: 1D:B2:6F:A1:94:6F:C9:2F:30:68:C4:C2:1D:B0:82:74:16:47:4C:61
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 019D2583A8251DB339B959E40B005D8645AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 079B
Signing time: Wed 25 Mar 2026 15:01:18 +0000
Manifest this update: Wed 25 Mar 2026 15:01:18 +0000
Manifest next update: Thu 26 Mar 2026 15:01:18 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: 1bzRA5pNzyM/Z7t56pW1cdWLPb7Yq3Tsz8sBBKK5PeI=)
2: no40MMxKtGazjrQJuK_hKTX_kQ4.roa (hash: ZQzvJpr6epq0Aai6epv/lFRS0bDsbahhA2A50WGodXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:a8:25:1d:b3:39:b9:59:e4:0b:00:5d:86:45:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Mar 25 15:01:18 2026 GMT
Not After : Mar 26 15:01:18 2026 GMT
Subject: CN=1db26fa1946fc92f3068c4c21db0827416474c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:e1:f9:2a:74:46:91:6c:d9:6e:14:e8:9d:
a6:94:66:fe:ac:d0:5d:ae:bf:c2:c9:4c:35:e4:8d:
04:58:3b:d9:79:88:8b:e0:db:34:68:ee:e0:3e:f5:
b6:aa:af:9f:92:70:8b:f8:a0:79:78:9e:41:e4:6b:
77:6e:e3:ce:87:e3:ee:9b:ea:d7:a3:50:40:36:45:
5a:34:bd:f8:1a:c1:1e:03:6c:0c:70:7d:82:1c:58:
1b:7a:ac:31:3c:12:bf:a7:6b:58:53:19:26:e0:08:
92:e0:c3:af:d4:ac:04:7c:8f:d2:17:4b:60:91:9c:
f9:77:6a:81:a0:2b:13:c7:fa:a2:5d:cf:c9:f0:87:
d9:a4:09:1e:3a:9b:70:d5:7e:5b:34:18:a5:bf:35:
b8:46:d9:c7:02:e3:47:17:72:dc:72:2e:4e:6e:b8:
93:1d:dc:60:59:89:8e:31:24:24:b3:25:7f:33:0c:
62:96:e2:69:f6:98:d4:40:a3:b2:3d:c6:5d:85:da:
ac:88:fe:f8:8b:5f:5b:67:a2:55:39:09:59:42:a2:
41:0d:e0:d7:87:00:45:e5:86:23:92:c9:dc:c6:84:
ba:b8:b0:68:3b:d1:42:00:07:36:a3:69:9f:cb:28:
d5:cd:7b:3d:44:ba:ed:13:bc:8b:2c:48:1e:a8:56:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B2:6F:A1:94:6F:C9:2F:30:68:C4:C2:1D:B0:82:74:16:47:4C:61
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:77:f4:3e:ea:96:b6:0e:59:ce:49:e1:96:45:32:19:53:8e:
71:78:79:58:b1:dd:cf:e4:2d:fd:7f:70:b3:d8:3a:72:97:0b:
ee:a7:12:3c:9b:aa:7e:4a:6f:f6:f3:da:bc:a4:c0:ba:d2:cc:
49:d6:da:1e:af:e5:6f:40:d0:b3:04:37:4b:57:18:2e:85:54:
50:eb:91:1e:44:82:40:3b:c9:59:a2:65:b4:99:b0:19:65:19:
31:42:8b:e4:1e:2a:74:2d:b9:dd:f4:7b:40:5c:2e:70:36:cf:
6b:73:27:6e:5b:f8:6c:ac:f6:0e:ff:c7:18:84:3e:36:90:52:
39:be:af:69:fd:33:4e:01:21:78:1f:1c:71:23:7c:6b:cd:33:
04:7d:21:5e:5f:23:cb:d9:fb:c6:6f:25:a7:8a:fa:44:6d:6c:
df:9f:2b:34:59:75:a5:0a:2c:12:64:21:8f:a3:34:4e:53:0d:
2f:15:0b:3a:87:d4:04:db:6c:74:64:f6:c1:31:f6:af:99:85:
e5:6e:3e:96:d9:78:4c:3d:4b:76:8e:e7:9f:a9:8a:2a:34:0b:
3a:7d:bf:34:e3:2a:2c:9f:37:1a:1e:24:bf:ac:86:b9:48:2e:
e3:ed:b6:77:e5:6e:71:90:52:ce:50:4d:00:91:02:0b:d7:6a:
d3:6c:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:57 2026 by rpki-client