Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: N/iJBHdQVwkVgNbUoq5y83jFK0gG059EoVPrd7KZLWo=
Subject key identifier: CD:10:B3:4F:F7:C9:B3:A1:11:87:6B:4F:B6:10:DB:89:2A:DD:F9:78
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 019D2772D39403AF9089800D8CD3767246EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 079C
Signing time: Thu 26 Mar 2026 00:02:09 +0000
Manifest this update: Thu 26 Mar 2026 00:02:09 +0000
Manifest next update: Fri 27 Mar 2026 00:02:09 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: uIPEIpSHybGqwJiNcy04PWJTFoN8GRbXBdEFES7PzJ8=)
2: no40MMxKtGazjrQJuK_hKTX_kQ4.roa (hash: ZQzvJpr6epq0Aai6epv/lFRS0bDsbahhA2A50WGodXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d3:94:03:af:90:89:80:0d:8c:d3:76:72:46:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Mar 26 00:02:09 2026 GMT
Not After : Mar 27 00:02:09 2026 GMT
Subject: CN=cd10b34ff7c9b3a111876b4fb610db892addf978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6d:c4:fc:7a:02:4f:63:a0:18:da:3c:7c:b7:
4c:53:b5:92:98:13:15:33:e4:49:26:b0:1a:a8:7c:
48:f4:cf:3d:0d:80:7d:4e:ed:25:a9:35:e3:76:03:
82:bb:ab:76:4f:e8:6f:c2:ec:f4:b5:12:3c:22:98:
4e:ef:73:bd:52:6c:bc:a4:01:97:19:ae:65:32:49:
9f:60:d5:a5:9d:7b:1d:20:95:f1:66:56:d1:40:c5:
fe:83:01:db:9a:5e:2e:5a:2c:08:80:b7:16:dd:83:
69:93:ab:3c:06:1e:f6:1d:07:4c:09:b9:b6:a8:b7:
0e:ba:36:fc:70:d2:5d:10:70:b2:a7:e7:63:49:45:
94:16:a3:8b:a3:76:c6:a3:c9:f6:60:56:0d:a9:37:
fe:37:2d:b3:9c:4c:82:03:1e:2c:e0:a6:2b:fd:6a:
69:e8:db:6e:2c:fd:d4:d8:cd:27:aa:07:a4:ca:d1:
ee:e5:d7:0b:f7:8e:c5:70:0f:c6:dd:40:d7:57:31:
7d:12:2d:f7:50:82:67:ac:99:f6:69:0b:74:c3:7d:
24:0d:f0:14:81:44:cf:68:7c:8d:6b:0d:fa:28:a2:
86:7b:3c:f4:58:04:42:bd:90:1c:e0:ec:2b:6f:9d:
af:ec:02:13:89:5a:4e:31:9f:48:72:d1:0e:7a:20:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:10:B3:4F:F7:C9:B3:A1:11:87:6B:4F:B6:10:DB:89:2A:DD:F9:78
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3f:ee:cc:1c:0f:84:2e:3b:2b:52:ae:f4:5c:bb:2c:ac:54:
8e:5e:71:cb:7e:60:f1:1c:43:12:e8:55:c1:9f:8b:b8:06:b5:
cb:c7:72:b1:3e:e6:e3:d2:ef:44:78:6e:70:a7:99:3d:65:b1:
a9:6d:b1:42:c2:c3:de:d6:8c:84:2b:a9:df:35:83:9d:dc:6f:
7c:e4:0e:b1:e4:85:25:8b:b9:e0:0a:aa:85:21:fb:f2:eb:fc:
fe:ca:52:3e:3a:47:93:c8:d2:dd:20:80:8e:18:df:61:79:22:
ff:b7:b8:50:8a:5d:f1:00:c9:ca:4b:02:02:17:87:a0:09:46:
e4:62:07:f6:cd:e7:d3:d1:38:7e:9a:06:02:8b:39:ea:b3:0e:
27:a9:f0:49:fb:99:7f:f5:b1:96:c4:8c:a9:05:50:b3:47:e6:
88:3b:60:cd:14:71:8d:a3:4e:6e:6a:6b:83:08:85:c4:82:65:
5f:06:a3:05:b4:e8:9a:a8:21:0a:6a:08:d0:37:6f:46:42:62:
9b:72:7a:78:d4:cb:8d:40:a4:0b:cb:9a:f0:38:d9:d5:6e:18:
a2:dd:fc:ae:b5:18:28:bf:ae:e7:35:fb:4f:35:2d:e7:c3:e7:
8b:f2:ec:d9:e5:be:6d:bd:67:ba:b8:47:4b:be:d9:ee:3c:f5:
ef:54:bd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:15:46 2026 by rpki-client