Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
File: LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft (raw, json)
Hash identifier: WrDPuXGV+pHOQ0SR7+0Ncfh/3FUk4jaxuhIv9qh74Zs=
Subject key identifier: 9C:2A:87:3F:F2:3C:0E:16:50:A3:80:ED:D9:85:CA:0A:00:48:B4:8E
Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
Certificate issuer: /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Certificate serial: 019D33ACD6795C132E6B0AF260E484BC9723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
Manifest number: 17A0
Signing time: Sat 28 Mar 2026 09:00:58 +0000
Manifest this update: Sat 28 Mar 2026 09:00:58 +0000
Manifest next update: Sun 29 Mar 2026 09:00:58 +0000
Files and hashes: 1: 9JptdLDcntQOv_LPrBMUCpvGPBk.roa (hash: 73iAqO8mI3K+RtQqfMbur8DNuJybJKZQrci5eZb7C2c=)
2: LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl (hash: ZfD53s2/+PLh9yJdukBpYXUIuNMonkKyFmjX9d9CT6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:d6:79:5c:13:2e:6b:0a:f2:60:e4:84:bc:97:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Validity
Not Before: Mar 28 09:00:58 2026 GMT
Not After : Mar 29 09:00:58 2026 GMT
Subject: CN=9c2a873ff23c0e1650a380edd985ca0a0048b48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e4:a7:c8:6c:cb:51:52:6b:5e:33:40:ce:23:
a3:b7:39:98:34:f9:9c:d7:16:bc:4f:3a:1a:62:de:
9c:e9:27:f3:da:3c:e2:9d:26:3a:b4:ad:aa:1c:5b:
c7:19:82:01:5e:8f:29:0e:ff:e0:be:e1:fa:16:bf:
ae:cb:0a:dd:52:14:74:51:24:91:c1:41:55:3f:0e:
20:e9:ed:98:45:42:ea:15:45:6e:36:08:db:fd:ea:
b0:99:c3:65:c4:12:52:e9:07:10:7f:45:ed:2e:c6:
14:85:af:ce:37:e3:ea:16:a6:2d:e3:08:bd:cd:79:
5f:fd:10:81:9d:ee:39:88:e1:9d:8a:5c:12:67:da:
b2:4b:78:c8:e1:31:3f:70:61:5b:b5:99:8f:7b:91:
f3:7e:29:92:ac:98:9c:40:96:3d:86:28:6a:50:f7:
31:a0:8d:d3:59:da:77:d3:09:d8:56:ac:d5:fd:10:
11:d9:37:35:51:84:4d:5b:51:4d:d6:33:51:24:38:
57:ed:25:fa:e5:62:6d:b6:f5:04:ff:ba:7e:f3:ab:
00:7e:73:78:15:9b:19:da:25:2d:5a:a7:77:b2:f6:
3e:fd:48:4e:1b:5f:50:1a:af:58:2b:7c:0f:dd:c1:
0e:a9:a5:84:60:97:15:af:79:6f:5b:ee:c4:94:f1:
55:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2A:87:3F:F2:3C:0E:16:50:A3:80:ED:D9:85:CA:0A:00:48:B4:8E
X509v3 Authority Key Identifier:
keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b8:08:85:67:a5:59:9e:6a:a4:d0:55:b7:02:c9:84:6a:56:
eb:e5:7e:df:83:0b:5c:cc:d3:22:43:c3:1e:00:8a:30:da:aa:
06:b4:99:21:c3:a3:07:2b:ad:5e:bb:56:7c:19:44:ff:93:3b:
4f:60:61:05:97:48:50:6c:ed:2a:04:e6:fb:f8:24:3e:4a:9c:
54:ba:cf:8b:89:50:54:6d:5d:f5:bc:41:75:8a:49:43:a9:32:
8a:f4:f2:e6:45:b4:bc:a6:8e:b0:db:bf:e5:55:7c:7c:17:26:
4f:38:ee:c5:62:e1:d0:29:0b:6c:e7:ac:23:5f:02:fc:1c:47:
aa:da:98:1c:fa:62:79:7c:dd:aa:04:3c:0a:a3:23:ec:ec:2f:
b4:63:79:c2:6e:8a:b5:51:f5:5f:3d:d1:7c:1d:5b:b0:88:17:
8c:f1:e0:3f:a4:e3:b1:f1:91:20:25:af:c1:9f:66:3f:c0:4b:
6c:ec:9e:f4:f8:15:d1:1c:15:94:4a:af:8f:68:cf:20:d1:b5:
d0:f5:e8:f5:54:99:3e:1c:e3:64:6c:f2:98:c1:ed:02:50:7e:
41:37:e9:f5:88:7f:0d:92:05:89:e8:ec:ca:4b:7d:b5:af:2b:
ec:50:7d:8f:4e:05:e8:3f:83:21:72:b6:08:48:15:c2:97:5b:
67:09:a5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 18:24:19 2026 by rpki-client