Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
File: LOuI0A5SCtZgtBbZIInGDVyPE-E.mft (raw, json)
Hash identifier: zBweiY5hYgC8WHOypxpacHfZo53xBb8MXz1SwfB3PNs=
Subject key identifier: AE:88:EE:C3:5E:94:BE:CF:CA:0B:C8:79:2D:99:CD:57:89:70:97:DD
Authority key identifier: 2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1
Certificate issuer: /CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
Certificate serial: 019D27044BB2C409DE033FE2C12390C994E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
Manifest number: 04F7
Signing time: Wed 25 Mar 2026 22:01:26 +0000
Manifest this update: Wed 25 Mar 2026 22:01:26 +0000
Manifest next update: Thu 26 Mar 2026 22:01:26 +0000
Files and hashes: 1: LOuI0A5SCtZgtBbZIInGDVyPE-E.crl (hash: /L5s97/8ImTY9JmC+vz4TJcQlRqWCvFEjmMX9ISdE2I=)
2: t6Dl3JjTDFRGr87KzpfCohuGn5U.roa (hash: FSBoD9UFm0jDbZ/ExNYCxZ79dh00p0utbLFhl6lm96U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4b:b2:c4:09:de:03:3f:e2:c1:23:90:c9:94:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
Validity
Not Before: Mar 25 22:01:26 2026 GMT
Not After : Mar 26 22:01:26 2026 GMT
Subject: CN=ae88eec35e94becfca0bc8792d99cd57897097dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:d4:a0:13:f4:6f:9f:92:b1:ec:12:77:d9:
93:88:bd:cd:c1:0b:79:44:4e:be:f3:dd:55:bf:68:
67:a1:b8:d9:90:39:48:c5:79:5e:36:7b:4e:2b:a5:
cd:98:97:d7:5e:8f:a8:3d:c3:51:f8:22:d8:66:53:
6d:14:6b:dd:a2:45:65:cb:19:e8:97:32:e4:be:2b:
ea:bb:ca:e6:21:70:11:70:e0:6c:de:d4:d5:b1:2d:
9e:e7:6f:08:68:d7:5b:d8:25:11:09:3d:43:a4:74:
09:47:72:f1:78:a5:e3:5a:b2:8e:cd:db:3e:63:95:
42:ed:61:52:a5:ff:fc:50:82:af:59:64:2e:f2:83:
27:a5:47:09:35:24:e4:b9:a3:a3:f7:db:11:c2:72:
d0:4a:91:f1:4c:4d:20:3f:44:56:38:37:8f:2e:fd:
df:aa:e3:3a:8c:6d:78:ca:22:7d:a2:7a:6e:8d:5c:
04:83:94:1a:85:09:9a:b6:2f:e3:86:13:b3:04:21:
f1:c0:6a:32:db:8d:84:d8:78:57:f6:e2:d1:4a:24:
e7:6e:85:fd:d6:1e:c3:96:93:53:fc:1f:90:d6:20:
04:44:cb:06:51:8b:62:5f:1c:8c:ee:39:25:9f:82:
64:44:62:7c:2b:da:77:c0:65:9c:8f:05:1a:29:ff:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:88:EE:C3:5E:94:BE:CF:CA:0B:C8:79:2D:99:CD:57:89:70:97:DD
X509v3 Authority Key Identifier:
keyid:2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:56:4f:6f:76:33:9b:52:df:31:97:9b:f2:60:d2:92:fe:b5:
ae:f3:da:55:85:41:34:dd:f1:92:93:fd:69:de:66:33:71:20:
8f:1f:09:a9:b6:9a:68:34:aa:01:b3:c0:5e:0f:08:f7:73:e9:
6f:6d:ce:cd:38:6f:bf:63:93:c4:dc:9e:37:59:5e:d4:e8:a8:
4d:f9:58:24:86:21:e3:f8:0c:3a:a4:25:da:92:1e:69:08:2d:
9d:ae:35:47:6e:79:5e:e0:bf:78:a9:12:c9:42:90:f7:a5:7b:
a0:c3:21:6f:3a:98:94:d2:02:f6:f1:88:04:90:fa:9d:b5:53:
4d:27:65:3a:dc:ae:c5:79:70:23:5d:85:8b:3d:7e:e0:90:3b:
7a:71:09:24:47:44:d9:ca:d8:b1:31:34:7e:2b:55:cf:ec:2d:
27:53:e5:f3:af:9c:1c:e4:53:1b:65:c2:45:42:31:1e:02:41:
d2:d4:f8:fb:7d:98:2b:59:5e:63:8a:e8:58:0c:90:2d:65:fc:
66:13:11:f6:30:67:3a:29:f8:3e:36:b5:0f:59:ec:2a:34:9f:
26:3d:c7:f1:97:d8:ef:47:87:7d:ea:cc:fd:4d:8e:d4:ba:4a:
3f:87:81:f2:15:ca:64:7e:b8:84:ab:69:a7:5e:58:dd:13:31:
8f:71:0d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:41 2026 by rpki-client