Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: ZP4FTg5axcdEeSV3Tc2NmNkzTPtyFKEalSHpNObu0jY=
Subject key identifier: 49:5C:6D:B4:74:4E:76:BE:CA:66:7A:7A:63:D5:82:3E:AE:6D:B3:1C
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 019F946E173DE76E781561507C020A8F46C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 09AE
Signing time: Fri 24 Jul 2026 14:01:10 +0000
Manifest this update: Fri 24 Jul 2026 14:01:10 +0000
Manifest next update: Sat 25 Jul 2026 14:01:10 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: iDzV6WJBgsNC9HOVfEjpMJlqcQqcClLr5Y5qUG1SLZc=)
2: v2HU-O26_Ox_izyEAzWjTgSDSjA.roa (hash: oL/ObQcuILx3PCIrA6iIqY8GO/MJMz6xvPpy6djgBm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:17:3d:e7:6e:78:15:61:50:7c:02:0a:8f:46:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Jul 24 14:01:10 2026 GMT
Not After : Jul 25 14:01:10 2026 GMT
Subject: CN=495c6db4744e76beca667a7a63d5823eae6db31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:56:92:23:83:00:b1:f0:c4:af:e2:f7:78:3b:
55:b4:8e:2b:27:75:d1:59:29:2b:cf:fe:74:49:a1:
3e:95:b4:5e:c0:4d:6d:9c:3f:91:45:d5:b0:d2:41:
1f:4e:52:42:07:cd:9e:37:fc:fa:1c:b9:a8:ca:70:
29:f4:d7:b0:e1:f5:d2:3e:fc:64:b7:f4:77:52:0a:
c2:1a:b8:2c:63:7c:1e:2b:d8:96:3b:0a:9e:50:fd:
5c:c1:ed:6e:7b:b7:d1:7d:b7:b2:6f:b8:3f:de:72:
c2:5e:93:34:fe:d2:b4:4a:c6:44:6e:c8:11:4f:53:
cf:2a:c6:78:21:a2:cb:85:d4:4a:b5:65:3c:ec:5b:
68:0e:ad:81:a6:2f:d1:e9:d4:72:12:65:c2:48:49:
ae:8a:eb:73:11:25:af:e2:4a:01:d5:65:94:61:d9:
fe:81:86:c9:e2:1f:54:be:41:2b:4d:75:2b:57:ff:
72:a9:eb:b8:b2:12:b7:f5:c1:00:71:e1:fc:43:ab:
18:70:e1:a3:f9:e7:44:3b:c3:ba:e7:a0:ee:5e:01:
9e:99:ee:9c:4e:77:5b:0a:e4:e0:9a:7b:c0:6e:22:
08:6d:1d:4e:51:a4:4d:48:cb:b3:55:92:98:c0:39:
cf:bd:47:56:02:77:6b:6c:fd:63:3a:34:a6:eb:37:
b6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5C:6D:B4:74:4E:76:BE:CA:66:7A:7A:63:D5:82:3E:AE:6D:B3:1C
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:95:0b:04:cb:7b:5a:78:0b:52:1f:fd:ab:67:7a:27:16:0d:
4c:55:fd:05:49:9a:28:9e:40:13:82:48:72:c7:91:4a:a3:cf:
ff:5e:59:5e:03:57:ac:5e:6c:8d:de:41:30:3d:12:fe:53:e3:
d2:f0:77:6f:c9:6d:b9:20:32:16:2c:30:7c:91:50:45:a9:fe:
80:96:13:a4:9a:3f:94:4f:b7:cb:80:07:34:c9:76:94:c3:75:
47:ba:d8:59:24:68:a6:94:16:ba:14:00:04:1a:e9:3c:ec:53:
e7:ef:48:af:69:9d:2c:bc:1d:5f:ac:2f:b7:87:f2:34:e4:51:
55:35:cc:3e:02:90:a9:1c:e1:41:43:87:c5:66:2a:5e:0e:9e:
ae:1d:6d:5c:66:cb:41:23:12:21:9a:1d:bf:4f:9d:21:3e:7f:
b2:c0:88:a8:dc:cf:df:23:36:a6:c6:3b:aa:39:2b:64:6a:f8:
14:4b:f0:a3:62:08:80:99:0f:e6:4c:e2:82:c3:a9:10:10:b0:
86:27:2c:35:f7:1a:04:e4:dc:44:c7:5f:72:83:45:5f:ea:22:
22:6c:a1:8e:4c:ff:f9:15:2c:d3:55:32:69:40:07:9b:37:5b:
93:3b:18:7a:29:72:02:05:f9:7f:82:a6:6c:36:8b:30:06:ba:
a3:f6:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:01:59 2026 by rpki-client