
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: uUrtPhwANguUU6B7Z+8LFECuNsonLOkxCoiTLugDWr0=
Subject key identifier: 74:C2:4A:BF:CF:C0:B3:D6:98:9C:E2:C5:E8:AE:23:1C:8D:B0:D6:74
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 01A11D516AB7A3B9ECD8B02315131CCB1D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 09A9
Signing time: Thu 08 Oct 2026 21:00:37 +0000
Manifest this update: Thu 08 Oct 2026 21:00:37 +0000
Manifest next update: Fri 09 Oct 2026 21:00:37 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: Ro+nVn7V1ULORoYDZgHxXrn+xdJaAj5Kqc/AoV8cbes=)
2: no40MMxKtGazjrQJuK_hKTX_kQ4.roa (hash: ZQzvJpr6epq0Aai6epv/lFRS0bDsbahhA2A50WGodXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:51:6a:b7:a3:b9:ec:d8:b0:23:15:13:1c:cb:1d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Oct 8 21:00:37 2026 GMT
Not After : Oct 9 21:00:37 2026 GMT
Subject: CN=74c24abfcfc0b3d6989ce2c5e8ae231c8db0d674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:ba:b3:66:e5:09:9a:eb:e9:10:43:7e:15:
8e:ce:31:d9:82:03:b0:29:73:cf:b2:2b:31:0a:7e:
7c:71:5e:b7:0c:d6:39:9f:0c:29:9d:33:10:f8:0c:
dc:84:d5:0a:60:6d:08:10:d4:43:00:53:3a:8c:36:
83:2c:39:86:2d:19:05:31:0b:a9:9f:61:61:df:08:
5e:02:12:a8:14:76:70:81:dc:54:f4:3c:37:ef:3c:
69:20:59:31:01:85:c5:ad:27:01:22:a7:8a:c3:18:
1b:a9:20:05:83:71:aa:5a:d6:88:ba:5e:2f:4f:ff:
80:65:f2:df:e8:c5:8a:14:33:d2:92:91:bf:88:c7:
4c:8f:6f:67:ad:1b:7e:a0:4b:d5:d6:57:12:35:34:
b3:f9:0c:51:7e:04:2b:56:ec:28:f6:86:bf:36:19:
3b:d6:b3:4b:e8:43:93:1c:e4:f7:e4:65:8f:14:bd:
e8:35:38:28:1f:ee:f0:ad:01:7c:e7:16:20:a0:2e:
de:eb:ce:68:32:79:1c:5a:f6:5e:fb:e6:95:3b:ae:
90:a0:9b:75:93:24:b3:48:02:81:c3:de:f3:b0:97:
93:ce:f1:c2:c0:7c:bc:33:ff:81:30:a6:67:b7:9c:
92:e5:98:f6:3c:b3:9d:50:02:a8:3c:8d:9a:35:62:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C2:4A:BF:CF:C0:B3:D6:98:9C:E2:C5:E8:AE:23:1C:8D:B0:D6:74
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:2c:3c:38:6e:47:05:83:e5:ec:c8:d1:15:ef:14:78:87:e3:
74:84:73:ea:b9:0b:33:11:ac:dd:75:8a:62:0c:c2:ce:6f:58:
06:b9:53:93:ee:3b:12:09:4c:fd:30:7b:40:e0:36:59:69:75:
85:d3:f9:cf:f0:03:e9:49:b1:20:e6:a9:3c:45:6d:78:72:c5:
d6:67:b5:01:89:00:31:0a:9c:08:aa:65:94:dd:72:2a:3f:18:
70:e4:29:a7:20:71:c0:70:4a:bf:d2:ce:bc:47:6c:66:75:01:
f2:9b:ba:06:04:e6:f2:c7:7b:79:f2:c0:4b:4b:38:67:ec:ca:
5a:72:00:fc:e7:29:2b:14:fd:6a:e4:37:61:0c:e1:e6:30:aa:
13:04:82:3d:66:c0:f2:78:4d:4f:03:2a:97:af:e5:94:aa:77:
1e:2b:8b:29:14:c5:17:0f:ec:ec:1e:69:da:1e:bf:31:cb:36:
a1:e5:7d:0f:12:4f:98:78:26:a0:79:70:b9:bd:00:6d:63:14:
52:61:e5:99:b8:52:a6:8e:2c:b1:8d:17:b9:1b:2a:bf:51:55:
20:f6:70:41:bf:a9:fc:f3:f4:4c:26:e0:97:46:08:ed:13:6e:
38:06:47:34:15:54:dc:e5:9c:85:3e:80:f0:02:b1:24:80:8e:
9f:a8:e9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:27:58 2026 by rpki-client