Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: qsO3D20r4Jh+O/c7lmWdWo1cYEMW0HLWNu0vVZZsRw8=
Subject key identifier: 9D:26:2A:20:D1:46:E5:E7:DA:AA:68:15:64:28:68:59:4E:82:4C:78
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 019D28846A114D5969792B9B6909880C107D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 086D
Signing time: Thu 26 Mar 2026 05:00:59 +0000
Manifest this update: Thu 26 Mar 2026 05:00:59 +0000
Manifest next update: Fri 27 Mar 2026 05:00:59 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: LY/MhJK/z4TpspHUF4RGfr1BR1w65I0Hx8A3fN76qfk=)
2: v2HU-O26_Ox_izyEAzWjTgSDSjA.roa (hash: oL/ObQcuILx3PCIrA6iIqY8GO/MJMz6xvPpy6djgBm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6a:11:4d:59:69:79:2b:9b:69:09:88:0c:10:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Mar 26 05:00:59 2026 GMT
Not After : Mar 27 05:00:59 2026 GMT
Subject: CN=9d262a20d146e5e7daaa6815642868594e824c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:e8:42:1b:73:d7:a6:95:e7:d2:b6:25:b0:
79:23:84:ea:a3:12:f5:c9:7b:81:70:e7:fc:8a:94:
84:3c:3c:0f:cf:21:79:73:f0:87:46:b7:f0:ae:9c:
ac:d8:e2:77:81:cb:96:af:f0:d5:6a:38:fa:39:c3:
64:5d:a2:dc:d2:47:bf:db:dd:9e:7d:c7:b4:0e:c9:
cb:96:48:e3:8a:1a:0e:9f:ed:87:89:fa:cc:39:e9:
e0:a8:b1:4e:60:3f:3c:a4:d6:4d:66:bc:52:c3:b4:
06:45:28:e8:7f:e2:9e:c9:c7:de:c7:19:05:06:a6:
a6:8a:b1:fd:a7:19:8b:9f:ba:c2:c7:6b:64:4f:3c:
b2:78:54:50:f4:c6:e8:b7:f6:d0:03:81:4d:f0:df:
a1:ca:fe:10:a1:dc:49:3f:11:d7:85:57:52:5c:9c:
a5:2f:5c:db:d1:27:7c:7b:d6:04:2a:28:42:2b:a8:
3f:6f:9a:59:4d:08:10:88:15:14:f8:d8:3f:02:50:
f0:b8:56:34:28:cd:1c:98:32:92:01:c6:97:2f:34:
f2:29:25:90:1e:fe:06:a5:29:48:d5:f3:08:6f:0c:
6a:82:e7:55:39:76:4d:dd:fc:46:13:24:d5:66:cb:
9d:c7:cc:20:ee:b5:65:64:71:23:e8:9b:75:cc:49:
dd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:26:2A:20:D1:46:E5:E7:DA:AA:68:15:64:28:68:59:4E:82:4C:78
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:46:66:65:f2:36:3d:77:c3:1f:77:06:2a:be:98:9a:c6:16:
51:e5:59:73:34:2f:45:0d:76:e0:d2:d4:30:67:9b:be:0f:c3:
bb:c8:7c:ae:35:34:20:ce:4d:9c:f9:c9:03:47:39:bb:9c:5e:
b9:c8:1e:e7:1c:b5:e3:89:d5:d4:02:3a:59:b4:82:57:09:c9:
f7:ed:53:03:31:d3:57:d4:f3:7a:e0:f6:0a:28:ff:03:a1:e1:
c8:27:e1:e7:d7:51:18:54:9e:e4:01:00:ac:b4:7f:e1:12:76:
f6:b7:22:7f:aa:93:b8:ab:60:22:96:fd:94:2d:1d:48:a4:c8:
ea:05:4e:0d:4a:71:10:6b:27:2d:88:1f:22:29:fd:f9:ad:eb:
81:de:55:58:99:4f:c5:4b:bf:af:47:3e:3a:21:ce:20:31:2e:
fe:95:ac:3a:8e:d9:5c:6e:7b:1c:6e:53:27:be:49:39:a6:36:
b8:4f:8a:50:66:3f:f3:a7:f1:56:1d:43:3a:49:73:a8:7f:f4:
1c:13:29:ba:d9:0a:d5:70:d8:75:13:68:da:25:4b:c7:a1:b0:
d7:68:24:31:66:66:f2:f4:53:ef:ed:a1:a7:9b:6a:af:8a:6b:
78:ea:4c:ae:96:64:ce:91:d4:c1:d2:9a:ee:aa:d0:91:61:29:
4a:79:4b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:17 2026 by rpki-client