Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
File: LOlVOpsse8oStoG8CmMF4z-2QMg.mft (raw, json)
Hash identifier: UMq7u8drpkeu4yIPeaZFtPfNAjvObil1329/cK1Ecic=
Subject key identifier: 4D:E5:91:A7:13:53:61:50:60:A5:31:31:14:C3:98:89:E6:A8:C1:D9
Authority key identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
Certificate issuer: /CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Certificate serial: 019D265F366D40A01E80152BED4F579B803C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
Manifest number: 1002
Signing time: Wed 25 Mar 2026 19:01:07 +0000
Manifest this update: Wed 25 Mar 2026 19:01:07 +0000
Manifest next update: Thu 26 Mar 2026 19:01:07 +0000
Files and hashes: 1: LOlVOpsse8oStoG8CmMF4z-2QMg.crl (hash: cz9OyJSC66avWYIbjq1mmyNAgQhF7uETMA53fPqeql4=)
2: e_3edax3nVApnXX6Ql-HaBUFYsk.roa (hash: plfv9lLAOWXkEtBe+nkrBg1kl1yDXbUCwGhl2Bs8lcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:36:6d:40:a0:1e:80:15:2b:ed:4f:57:9b:80:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Validity
Not Before: Mar 25 19:01:07 2026 GMT
Not After : Mar 26 19:01:07 2026 GMT
Subject: CN=4de591a71353615060a5313114c39889e6a8c1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:0a:79:b7:f6:01:24:9c:c3:97:70:33:39:
86:70:02:60:69:5c:1d:c4:fc:f1:73:74:d6:6f:95:
06:6b:07:56:eb:43:4a:ea:a0:9a:bb:4a:49:74:62:
fb:27:5f:f1:e1:ec:bf:e2:0c:fb:71:b0:0e:2f:da:
9e:d3:6f:e8:37:38:ff:14:1b:d4:c7:04:33:87:9f:
57:07:e9:7f:52:d3:41:9c:b7:17:12:f9:b8:62:38:
47:53:e2:c7:e1:6d:61:59:94:4b:1c:87:e7:36:f3:
7a:20:e4:99:1d:3f:26:3d:02:20:5e:77:a9:46:3d:
fb:b4:f1:fe:62:b7:f5:b1:0a:73:44:d4:01:4e:d5:
20:64:69:1d:ee:e0:5c:55:58:1c:aa:34:d5:8c:eb:
dc:ff:42:b1:6f:75:7f:8c:08:28:a8:28:1f:80:4d:
78:0e:a2:01:f4:84:cc:93:fc:1d:87:fb:ad:7c:5a:
57:99:61:a3:4b:d4:0f:6a:a2:9d:65:fe:b8:62:4b:
65:9e:e5:5b:28:2f:f0:d1:38:d2:09:f2:ec:f9:de:
66:fb:bc:ad:a1:58:96:e4:07:46:7b:3d:d6:68:47:
24:c4:65:1b:41:45:d0:0c:a8:09:fc:3a:9f:0a:eb:
f1:cf:6f:85:43:47:54:a8:fa:d9:35:5a:a3:d7:0b:
d7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E5:91:A7:13:53:61:50:60:A5:31:31:14:C3:98:89:E6:A8:C1:D9
X509v3 Authority Key Identifier:
keyid:2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:83:88:63:48:06:47:05:3c:d0:50:74:f8:7e:1f:68:59:4e:
fc:48:7f:21:bf:29:51:8b:98:ab:56:64:ef:3d:af:2b:77:c0:
77:27:7c:d7:db:0b:f3:d4:76:23:5c:c2:bd:aa:fe:6a:0a:31:
09:6d:ee:3e:f7:6c:ab:06:69:e7:64:1c:79:ef:ae:de:05:cc:
f8:98:ba:ce:fd:4c:7c:f4:cc:58:e1:a4:f0:81:68:23:c4:b3:
ac:8e:3e:34:45:0b:8a:4d:9b:5a:11:30:e5:2e:de:c8:d6:79:
99:d9:25:49:0f:73:db:eb:ab:08:8e:92:43:dd:24:39:e7:6b:
a8:f2:6e:1f:96:d5:46:3b:96:d8:be:04:1c:21:82:36:36:23:
87:0d:97:c7:f8:f0:d2:18:ac:2b:48:67:cc:ec:80:e1:9e:72:
7c:b5:c2:32:de:8f:e8:bc:de:a4:b3:6a:11:9f:25:8b:30:26:
21:54:f7:7b:76:d3:ba:fd:17:60:0b:fb:1a:53:d7:0a:91:f5:
a8:e4:f7:17:58:e5:73:d2:62:51:2f:65:83:0b:d7:5b:d8:0a:
00:5b:d6:e9:c1:a2:dd:0e:ec:2c:ae:4f:2b:fc:72:f3:94:8d:
a9:7e:71:15:d6:a5:df:c9:8c:3d:16:f4:7b:b1:06:c4:b2:28:
b5:c4:a3:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXzZtQKAegBUr7U9Xm4A8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZTk1NTNhOWIyYzdiY2ExMmI2ODFiYzBhNjMwNWUzM2Zi
NjQwYzgwHhcNMjYwMzI1MTkwMTA3WhcNMjYwMzI2MTkwMTA3WjAzMTEwLwYDVQQD
Eyg0ZGU1OTFhNzEzNTM2MTUwNjBhNTMxMzExNGMzOTg4OWU2YThjMWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAAKebf2ASScw5dwMzmGcAJgaVwd
xPzxc3TWb5UGawdW60NK6qCau0pJdGL7J1/x4ey/4gz7cbAOL9qe02/oNzj/FBvU
xwQzh59XB+l/UtNBnLcXEvm4YjhHU+LH4W1hWZRLHIfnNvN6IOSZHT8mPQIgXnep
Rj37tPH+Yrf1sQpzRNQBTtUgZGkd7uBcVVgcqjTVjOvc/0Kxb3V/jAgoqCgfgE14
DqIB9ITMk/wdh/utfFpXmWGjS9QPaqKdZf64YktlnuVbKC/w0TjSCfLs+d5m+7yt
oViW5AdGez3WaEckxGUbQUXQDKgJ/DqfCuvxz2+FQ0dUqPrZNVqj1wvXFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3lkacTU2FQYKUxMRTDmInmqMHZMB8GA1UdIwQY
MBaAFCzpVTqbLHvKEraBvApjBeM/tkDIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE9sVk9wc3NlOG9TdG9HOENtTUY0ei0yUU1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8yYzA1NGUtY2VmMC00YWY2LTk4MGUt
OGJhYmFjOGE0NjVhLzEvTE9sVk9wc3NlOG9TdG9HOENtTUY0ei0yUU1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8yYzA1NGUtY2VmMC00YWY2LTk4MGUtOGJhYmFjOGE0NjVh
LzEvTE9sVk9wc3NlOG9TdG9HOENtTUY0ei0yUU1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYOIY0gG
RwU80FB0+H4faFlO/Eh/Ib8pUYuYq1Zk7z2vK3fAdyd819sL89R2I1zCvar+agox
CW3uPvdsqwZp52Qcee+u3gXM+Ji6zv1MfPTMWOGk8IFoI8SzrI4+NEULik2bWhEw
5S7eyNZ5mdklSQ9z2+urCI6SQ90kOedrqPJuH5bVRjuW2L4EHCGCNjYjhw2Xx/jw
0hisK0hnzOyA4Z5yfLXCMt6P6LzepLNqEZ8lizAmIVT3e3bTuv0XYAv7GlPXCpH1
qOT3F1jlc9JiUS9lgwvXW9gKAFvW6cGi3Q7sLK5PK/xy85SNqX5xFdal38mMPRb0
e7EGxLIotcSjxQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:10 2026 by rpki-client