Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json)
Hash identifier: Vsct76WgLolIRQcEzNxTySdhE0P6ZbvG3v1MjYkO7FE=
Subject key identifier: EE:B0:94:84:3E:46:69:C0:47:47:01:9A:24:16:2A:7D:11:9F:91:E4
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 019E1FB5DBD1A3226691B6E0CA790DFF0B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 05:01:12 +0000
Manifest this update: Wed 13 May 2026 05:01:12 +0000
Manifest next update: Thu 14 May 2026 05:01:12 +0000
Files and hashes: 1: FZXNAo_-RfWe2H9RHiCZ7xGUnYo.roa (hash: TDYzUGrD9meaYvgjEQfqWP3QZzAK3PuLuA6ZQryLHGU=)
2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: gtpOCDpj4Qm9MtntgtMMa485mNvG1M4Ejg3/+9/JoW4=)
3: qMQHyQ9qH1ECk7KL-kR203MB75k.roa (hash: vhQOUoORkCKEMjziW3Ye82TVpPsPBlso5nGmSCXjKmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:db:d1:a3:22:66:91:b6:e0:ca:79:0d:ff:0b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: May 13 05:01:12 2026 GMT
Not After : May 14 05:01:12 2026 GMT
Subject: CN=eeb094843e4669c04747019a24162a7d119f91e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:dc:6b:4a:02:b6:4f:ed:86:61:eb:ca:44:
d5:0c:0f:ea:8d:11:72:38:a3:e8:1e:ba:06:66:78:
ca:09:9f:8e:fc:ca:4c:37:0f:2f:88:f0:38:5d:74:
b6:e5:2c:ff:c4:7b:85:de:3f:53:6e:28:c8:80:c0:
74:bf:25:93:9b:5b:37:32:07:8f:71:a0:3e:a8:d7:
ca:41:fa:b9:dd:a5:54:b8:70:52:6f:3b:ae:a1:08:
86:76:17:48:75:de:51:e8:06:9a:ac:55:a3:a2:9f:
d9:f1:bd:c1:c0:37:fc:dc:9e:21:89:67:42:2c:d7:
c8:72:03:49:8a:17:e0:11:47:f0:82:1c:ea:0e:01:
5b:c4:cd:98:b8:ba:ee:85:7d:4e:88:0c:37:5a:2d:
07:b4:bb:1a:57:82:64:b6:94:fd:52:2b:ee:a7:73:
53:66:46:e1:fa:b2:42:f8:73:24:5f:47:3a:67:0a:
a4:77:b4:40:3d:ac:f4:ba:47:25:6b:7d:c7:a6:41:
32:56:77:3d:dc:72:27:2b:51:43:8b:13:2c:63:b8:
80:79:6f:9c:ee:78:39:02:c2:5f:6a:77:6b:f7:60:
43:e9:d1:0b:7e:05:7b:0b:30:dc:d0:33:19:e5:29:
c5:f7:77:94:2d:0d:49:46:4e:50:45:39:44:18:20:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B0:94:84:3E:46:69:C0:47:47:01:9A:24:16:2A:7D:11:9F:91:E4
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ed:72:2e:e1:e9:02:3c:47:26:32:3a:79:8f:1a:12:0d:c2:
9a:09:f8:56:0d:6e:46:ff:8c:ea:44:26:d4:ec:7d:70:2a:1b:
32:42:25:88:85:5b:ba:19:0e:4a:a8:18:09:85:b0:54:a0:86:
bb:35:48:d3:11:fc:9c:3a:01:03:4f:83:2f:cb:4a:dd:6d:1d:
e3:79:d9:f1:04:42:07:83:88:d4:ac:2a:3a:d0:48:7a:e1:29:
2f:ce:1b:5b:9e:dc:7c:ba:3f:39:a8:32:7c:4d:e7:57:50:a0:
91:8f:0b:f9:67:67:39:2a:43:7d:1b:5e:b3:19:94:b4:ba:ca:
17:06:ab:31:89:96:25:95:e1:11:0e:3b:ba:67:d9:84:47:18:
b3:fe:c6:88:33:8b:9e:a5:82:30:37:b4:e6:42:5f:22:3f:a4:
bc:67:ff:68:03:8a:c3:e7:ce:37:0c:66:44:5c:14:4d:68:36:
79:50:62:c6:eb:32:bf:c5:1e:5a:9d:7c:f9:6a:86:01:ce:86:
53:e8:88:46:d0:2a:2c:3f:80:9f:9a:ea:88:38:08:61:7d:96:
fe:2f:96:70:90:0b:c8:9a:c0:cc:30:ec:a8:93:34:6e:30:b2:
e0:3b:7a:66:67:7b:38:1b:61:0f:8a:99:4c:77:c0:92:d2:9c:
5b:51:78:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:37 2026 by rpki-client