Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
File: Lo7asSIV4pvTjB2pteOWvQyWvgk.mft (raw, json)
Hash identifier: ToS0EKD/gSKFL7qnbqAOGeWzjkbCEbHCsYiv8hGB6nM=
Subject key identifier: 76:7E:8D:05:58:F2:14:CC:46:16:CB:BA:95:79:54:8E:2C:67:8F:D8
Authority key identifier: 2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
Certificate issuer: /CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Certificate serial: 019D2704AC6D92643781F54E1FE3CED46C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:01:50 +0000
Manifest this update: Wed 25 Mar 2026 22:01:50 +0000
Manifest next update: Thu 26 Mar 2026 22:01:50 +0000
Files and hashes: 1: 1gwDv9GtN9mNcBWLOCsB7VQGHmM.roa (hash: GhIPKfB66xl/U3CpScF6j5w7weYfFaK0TgCynT83hYQ=)
2: Lo7asSIV4pvTjB2pteOWvQyWvgk.crl (hash: jQAOfyS0Je61ouNAEdv5DtcWZKKjAt6dBvGmTzyd5kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ac:6d:92:64:37:81:f5:4e:1f:e3:ce:d4:6c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Validity
Not Before: Mar 25 22:01:50 2026 GMT
Not After : Mar 26 22:01:50 2026 GMT
Subject: CN=767e8d0558f214cc4616cbba9579548e2c678fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:60:7d:62:28:39:3d:47:52:e6:70:7f:ff:21:
11:d9:19:82:67:fd:e9:fa:49:9d:50:e5:1c:57:c7:
40:ec:7c:6a:18:8f:11:d7:8c:54:f6:a0:26:7d:50:
24:8e:d7:79:7a:b4:87:18:e2:57:a4:f3:5f:c8:43:
62:b2:70:d3:d5:b7:76:a5:f1:51:2b:31:1a:ab:92:
f3:a2:27:1d:bf:61:f3:9e:3b:a3:61:d8:a4:ab:37:
44:cd:ca:e3:34:b9:6b:c3:d1:2e:1d:13:17:00:41:
21:03:7c:72:42:3e:60:0d:ee:dc:0f:cf:3d:b5:aa:
a1:3c:0a:d1:fb:c2:6b:f2:5e:3c:ff:18:5a:f9:95:
00:87:a5:49:ab:10:93:72:4f:9c:78:a2:9c:7a:1d:
a1:99:3f:ad:7b:3c:72:00:2e:71:0d:54:fb:24:3d:
01:f0:8e:b2:2a:dd:4a:7b:66:6d:f1:3f:45:58:f6:
66:42:9d:a0:39:47:c6:b4:33:73:af:35:8a:62:c9:
d6:64:de:5f:dd:ae:a4:16:9f:8e:aa:07:0d:8a:4b:
05:5c:6c:66:99:82:0b:37:08:e4:d0:d2:44:52:11:
17:a0:ff:53:72:b1:29:8e:8c:22:4e:b8:e4:35:d2:
e0:e7:6a:37:13:c2:e3:53:f3:1d:d7:d1:79:2a:8b:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7E:8D:05:58:F2:14:CC:46:16:CB:BA:95:79:54:8E:2C:67:8F:D8
X509v3 Authority Key Identifier:
keyid:2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:92:ed:1d:f9:66:95:e8:4e:84:40:a9:81:6b:0b:b5:18:a6:
7a:bf:38:88:86:83:78:54:96:8d:28:76:3a:e3:70:8d:9b:04:
ce:f5:3f:b3:76:a9:12:23:da:17:e0:76:e7:f4:e0:c5:b3:53:
5a:8a:4f:b0:47:75:79:ee:c5:ac:b2:91:06:9e:40:6a:fb:a4:
7d:dd:ba:31:31:40:47:16:c6:d1:54:17:87:29:26:41:f5:67:
9a:19:5f:20:b8:cc:b1:5b:03:c7:c6:d7:75:ce:ba:59:96:e5:
ac:3e:80:50:31:ac:a8:d6:75:b3:6e:d5:3a:13:26:ff:5c:ba:
e9:52:02:38:59:d3:8c:52:a2:7d:66:f1:57:3e:d7:44:fa:76:
1d:e5:d9:d6:14:a0:4b:4c:4d:86:54:b3:d6:85:ff:6e:d5:c4:
8e:9a:75:64:15:52:d0:98:5c:e5:40:e6:98:75:21:e5:b2:be:
ce:f5:ea:7a:12:bc:7f:4c:93:a7:ae:2e:c2:ab:b6:00:4a:1d:
2f:93:a2:6f:14:58:70:d2:77:8c:f8:c3:86:dd:96:05:0c:5b:
62:30:e8:bc:b4:56:36:34:0b:5f:86:b5:c2:27:16:69:b3:07:
58:d6:a3:f4:1b:d3:98:7f:d5:59:89:d7:f2:b4:57:99:eb:14:
62:78:1e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:55 2026 by rpki-client