Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
File: Lokc9xG_fhxC4ILWoviaBL7rldE.mft (raw, json)
Hash identifier: CtVlPcLhSpSaZHbvuNl3ngmDnuCcCbuEzMgI7D9I2LM=
Subject key identifier: B6:77:CF:DF:52:4E:67:5B:B9:92:E5:AA:8C:55:6E:BD:75:19:2B:FF
Authority key identifier: 2E:89:1C:F7:11:BF:7E:1C:42:E0:82:D6:A2:F8:9A:04:BE:EB:95:D1
Certificate issuer: /CN=2e891cf711bf7e1c42e082d6a2f89a04beeb95d1
Certificate serial: 01A1306A837BEF42D61E6FF934640FBD3FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
Manifest number: 06A2
Signing time: Mon 12 Oct 2026 14:00:49 +0000
Manifest this update: Mon 12 Oct 2026 14:00:49 +0000
Manifest next update: Tue 13 Oct 2026 14:00:49 +0000
Files and hashes: 1: Lokc9xG_fhxC4ILWoviaBL7rldE.crl (hash: ji+2Ve4csw5dEjlOXtQlkikAc9V54J742A2dTpUEl8w=)
2: OFL0pfnWQKyP_vdNpruCki1Xn3o.roa (hash: N72V/YW8dr+6ZHypwJat0/c3Tm+0yEOrcJpyLdW7Gso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:6a:83:7b:ef:42:d6:1e:6f:f9:34:64:0f:bd:3f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e891cf711bf7e1c42e082d6a2f89a04beeb95d1
Validity
Not Before: Oct 12 14:00:49 2026 GMT
Not After : Oct 13 14:00:49 2026 GMT
Subject: CN=b677cfdf524e675bb992e5aa8c556ebd75192bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:67:92:8e:47:33:4b:71:23:85:0e:6e:9d:2e:
bf:da:42:f9:76:01:03:ba:ac:4e:36:ed:51:61:5c:
b9:75:1b:e0:11:67:6f:89:c1:fd:7a:fe:37:21:32:
9f:41:0c:d3:bc:10:43:0c:c8:23:6f:13:07:e7:37:
63:49:d8:df:ad:c7:d2:03:1a:e5:7d:f7:4e:ed:1a:
9d:5f:6e:dc:41:b3:0f:a5:4f:6e:a5:65:ed:fd:cc:
5c:e2:e9:cd:74:e9:5f:b2:53:5d:c5:e3:04:3d:5c:
39:91:37:6d:cb:45:db:8e:8f:0d:45:59:08:76:49:
75:3c:e9:21:e7:d8:96:cd:df:f2:70:a9:27:bf:97:
b2:37:c1:87:63:44:01:c4:63:f7:db:ce:23:34:09:
c6:6a:0b:0b:62:ec:f0:c6:87:4b:c8:38:80:ab:7e:
84:50:c2:c9:68:90:4a:0f:d9:ec:51:92:7c:79:c7:
d4:a0:a0:f1:71:96:70:d1:28:7c:97:a8:8c:f8:1a:
2f:8a:68:99:11:7a:8d:b8:0c:6d:74:e6:1d:30:cc:
3c:c7:08:74:24:23:2a:fd:15:61:01:1f:0f:41:37:
54:33:e3:32:5e:ea:8f:e1:b8:3b:78:64:44:d9:7b:
75:da:e1:b6:68:6e:ef:1b:10:dc:17:d8:4a:5c:74:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:77:CF:DF:52:4E:67:5B:B9:92:E5:AA:8C:55:6E:BD:75:19:2B:FF
X509v3 Authority Key Identifier:
keyid:2E:89:1C:F7:11:BF:7E:1C:42:E0:82:D6:A2:F8:9A:04:BE:EB:95:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a0:6e:af:32:9d:78:8e:76:99:44:af:33:78:29:bb:d0:68:
6a:42:42:4c:02:b3:2c:26:a2:4b:44:2a:f1:b5:3a:f6:8a:67:
fb:22:59:ec:a5:81:dc:4b:a5:ce:db:c3:3d:21:8b:9c:02:71:
fa:b7:18:be:48:10:06:65:41:9c:9a:da:f7:0a:1b:a0:35:8f:
30:ff:03:b5:23:3b:24:bf:b6:62:4d:76:2c:b5:5f:84:90:5b:
fc:19:8b:9a:aa:2c:aa:c8:7f:93:2e:e6:98:2b:02:c3:84:a9:
45:1e:bc:1b:e8:ff:57:4b:0f:39:40:d0:64:39:7c:cd:c4:30:
a4:19:4c:d3:6a:91:f3:89:bd:41:94:b5:be:23:d5:38:99:73:
eb:7a:14:6c:5d:62:23:b7:23:ac:25:80:e1:1e:ab:8d:53:27:
06:63:2c:e6:e6:a9:2f:4d:7e:a9:8b:29:fa:75:92:d7:d4:9f:
ed:30:9e:d3:fe:4c:df:5a:9d:4f:81:a9:18:9f:b2:d7:ea:94:
a2:0c:d1:d0:c6:e1:a6:92:2b:4b:66:ac:13:1c:2e:d3:d0:b7:
77:dc:56:2b:1d:5e:a6:5f:c5:09:fb:cb:65:2a:7a:23:36:58:
78:45:11:4d:c5:82:40:37:da:05:cc:3c:cf:41:71:98:15:67:
7d:7d:3b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 21:04:10 2026 by rpki-client