Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
File: LokBk3Q73yTdIsPtbyizAxouyAY.mft (raw, json)
Hash identifier: 3KOFp6XKhvg8JDAZwzrNEstpUHIHDJw0TpwS2lUd0mI=
Subject key identifier: 3D:D7:A8:7C:11:07:8A:64:21:28:F1:B8:F1:5E:5F:84:A1:8E:80:F9
Authority key identifier: 2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
Certificate issuer: /CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Certificate serial: 019D28BBB4979BE777FF9995BBD03E868FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
Manifest number: 1415
Signing time: Thu 26 Mar 2026 06:01:23 +0000
Manifest this update: Thu 26 Mar 2026 06:01:23 +0000
Manifest next update: Fri 27 Mar 2026 06:01:23 +0000
Files and hashes: 1: D53jq87Ju_5W2NurMBsvi2B8EpQ.roa (hash: EUilHlQj2DNSvq/wFdSzVtzevf4M4P6120duAQtu7rI=)
2: LokBk3Q73yTdIsPtbyizAxouyAY.crl (hash: HECoH9sEoi/WLCXoi3T8RDTGxLyk38LjmpUuiQf2sYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b4:97:9b:e7:77:ff:99:95:bb:d0:3e:86:8f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Validity
Not Before: Mar 26 06:01:23 2026 GMT
Not After : Mar 27 06:01:23 2026 GMT
Subject: CN=3dd7a87c11078a642128f1b8f15e5f84a18e80f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:23:66:07:c3:cb:c5:92:20:66:1c:8e:f9:
33:fd:df:b1:cb:3c:76:12:b0:38:9b:c6:a8:c9:37:
cc:57:71:ba:ee:fe:e6:60:fa:00:b9:40:91:05:48:
9e:78:1e:ec:ca:bb:19:16:6b:a5:7d:c1:a7:92:c1:
39:47:90:12:c0:5f:30:4f:ef:2c:92:de:37:0e:bb:
bc:31:08:b8:67:60:86:be:63:46:72:19:51:fe:45:
b2:5a:70:df:99:41:e0:8d:7e:de:8f:df:02:e1:9a:
a7:e7:10:17:ed:a5:b5:ea:fb:c9:b6:9a:52:7d:d9:
ad:3d:b5:42:0e:1f:df:c6:30:b0:b4:c6:11:64:02:
a3:7c:7e:cc:a1:97:d2:06:a4:a3:12:c3:39:e0:d0:
ee:ca:9e:86:ed:98:a5:b9:9f:a4:6a:68:97:2d:8d:
21:91:6b:95:08:84:5e:24:32:28:72:27:34:9d:d2:
db:52:44:ac:b0:b8:0b:52:9a:fa:3e:eb:e4:c8:26:
52:87:1a:1b:ec:84:dd:67:b4:48:b0:4c:36:73:e8:
3c:c8:96:71:5d:04:bb:6b:2b:14:1e:97:a1:02:f2:
0e:61:e8:70:5b:1d:81:b6:76:18:60:e2:c1:03:58:
b9:f6:68:9b:ac:c1:bb:7c:a0:7a:ac:eb:5e:2f:8b:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D7:A8:7C:11:07:8A:64:21:28:F1:B8:F1:5E:5F:84:A1:8E:80:F9
X509v3 Authority Key Identifier:
keyid:2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:91:b6:12:80:4f:76:e3:7f:27:89:56:15:d4:15:0a:95:95:
2f:80:56:77:2d:43:c0:2e:27:71:76:c2:93:6d:1f:a7:80:e2:
3f:72:55:e5:12:b7:76:21:31:d6:d2:67:5f:1d:ab:21:8e:4b:
7a:b1:22:0f:21:3b:4e:d7:b0:4e:37:52:c3:10:90:09:13:69:
0d:d8:6d:71:14:89:c6:4f:d9:67:44:aa:26:53:34:32:dc:e3:
c1:7c:c1:c7:cf:1b:0b:0f:7c:b1:3f:80:de:60:05:16:be:17:
27:a2:6c:2f:9b:f3:14:eb:63:a2:c3:b3:44:04:b3:45:00:46:
a8:b2:1d:57:25:fa:99:31:3a:f0:8d:6a:05:b9:c9:93:69:c6:
fb:ad:11:5c:09:c5:db:ec:ca:10:cd:4b:79:cc:c7:45:c4:a3:
da:82:a4:53:0f:da:da:a4:f8:b5:2c:a5:9d:01:50:2a:0f:fa:
20:f3:c5:c2:83:59:d1:00:68:ee:98:38:1f:ab:3b:c0:7d:2e:
eb:fe:61:60:06:09:8c:75:ca:44:26:22:90:58:cf:67:69:4d:
f0:72:ca:d4:86:71:be:c7:f7:13:e7:1c:d0:42:2d:ad:15:1a:
d8:72:49:cc:82:4a:2b:78:e1:23:f0:43:6d:4f:ef:b9:7a:02:
e3:d1:59:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou7SXm+d3/5mVu9A+ho/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODkwMTkzNzQzYmRmMjRkZDIyYzNlZDZmMjhiMzAzMWEy
ZWM4MDYwHhcNMjYwMzI2MDYwMTIzWhcNMjYwMzI3MDYwMTIzWjAzMTEwLwYDVQQD
EygzZGQ3YTg3YzExMDc4YTY0MjEyOGYxYjhmMTVlNWY4NGExOGU4MGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nwjZgfDy8WSIGYcjvkz/d+xyzx2
ErA4m8aoyTfMV3G67v7mYPoAuUCRBUieeB7syrsZFmulfcGnksE5R5ASwF8wT+8s
kt43Dru8MQi4Z2CGvmNGchlR/kWyWnDfmUHgjX7ej98C4Zqn5xAX7aW16vvJtppS
fdmtPbVCDh/fxjCwtMYRZAKjfH7MoZfSBqSjEsM54NDuyp6G7ZiluZ+kamiXLY0h
kWuVCIReJDIocic0ndLbUkSssLgLUpr6PuvkyCZShxob7ITdZ7RIsEw2c+g8yJZx
XQS7aysUHpehAvIOYehwWx2BtnYYYOLBA1i59mibrMG7fKB6rOteL4tu2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3XqHwRB4pkISjxuPFeX4ShjoD5MB8GA1UdIwQY
MBaAFC6JAZN0O98k3SLD7W8oswMaLsgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9rQmszUTczeVRkSXNQdGJ5aXpBeG91eUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy84YzI3YWEtYjUwMC00Yzk2LTg0ZWMt
ZjhiZTQ5NTI1MmIwLzEvTG9rQmszUTczeVRkSXNQdGJ5aXpBeG91eUFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy84YzI3YWEtYjUwMC00Yzk2LTg0ZWMtZjhiZTQ5NTI1MmIw
LzEvTG9rQmszUTczeVRkSXNQdGJ5aXpBeG91eUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4pG2EoBP
duN/J4lWFdQVCpWVL4BWdy1DwC4ncXbCk20fp4DiP3JV5RK3diEx1tJnXx2rIY5L
erEiDyE7TtewTjdSwxCQCRNpDdhtcRSJxk/ZZ0SqJlM0MtzjwXzBx88bCw98sT+A
3mAFFr4XJ6JsL5vzFOtjosOzRASzRQBGqLIdVyX6mTE68I1qBbnJk2nG+60RXAnF
2+zKEM1LeczHRcSj2oKkUw/a2qT4tSylnQFQKg/6IPPFwoNZ0QBo7pg4H6s7wH0u
6/5hYAYJjHXKRCYikFjPZ2lN8HLK1IZxvsf3E+cc0EItrRUa2HJJzIJKK3jhI/BD
bU/vuXoC49FZ4A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:46 2026 by rpki-client