Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
File: sk_loZnHVDnFJkkEVLSr1UAhN6k.mft (raw, json)
Hash identifier: Z92aTfqJyQNgmJC/DMnBlp82yoBS3lZ+cOrbQh9LgqM=
Subject key identifier: B4:22:1F:53:E8:79:43:5F:D4:D7:4E:92:37:0B:15:DD:5D:C3:D5:D5
Authority key identifier: B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
Certificate issuer: /CN=b24fe5a199c75439c526490454b4abd5402137a9
Certificate serial: 019DCED09AC9D8E7C66F2AE5EE67E9192BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
Manifest number: FC
Signing time: Mon 27 Apr 2026 12:01:10 +0000
Manifest this update: Mon 27 Apr 2026 12:01:10 +0000
Manifest next update: Tue 28 Apr 2026 12:01:10 +0000
Files and hashes: 1: 1X-M9-Ob8zn_AUbRkQ52E-fkDj8.asa (hash: A9QlGHiSL6cJZrCCASWffcD/70Opt2l0qntImDeMQKw=)
2: sk_loZnHVDnFJkkEVLSr1UAhN6k.crl (hash: 9hETgmpq4ZUiT/aMTlB+pPKfmZYaLFbbWyanIPTrDx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:9a:c9:d8:e7:c6:6f:2a:e5:ee:67:e9:19:2b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24fe5a199c75439c526490454b4abd5402137a9
Validity
Not Before: Apr 27 12:01:10 2026 GMT
Not After : Apr 28 12:01:10 2026 GMT
Subject: CN=b4221f53e879435fd4d74e92370b15dd5dc3d5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:97:99:f6:97:07:c4:5b:c9:ac:c2:ee:c1:
b1:50:3b:80:d7:38:79:c6:37:53:b2:f2:0f:64:5d:
68:aa:ff:df:41:fe:7d:f3:7d:c6:79:40:d6:08:bc:
e8:b2:a2:b2:00:42:8a:74:4c:5a:60:26:49:9d:00:
8e:0f:5f:15:d6:c3:e1:a5:b8:20:96:ce:ed:92:00:
8a:a3:4b:76:08:3f:22:66:e8:9e:80:67:70:3a:6d:
1d:fc:c6:09:56:da:92:ed:f8:c8:5f:16:07:dc:b8:
90:08:69:21:90:8a:3c:31:8f:6b:b5:5f:25:c7:5d:
4e:39:7c:a4:94:a9:3e:c1:88:50:59:d0:a7:54:fd:
4d:76:db:10:85:0f:56:dd:6f:16:21:b8:a3:0e:04:
7a:a3:27:4e:ba:08:77:78:9d:27:07:1b:5d:80:34:
b0:a6:08:f0:d0:87:b3:0e:72:10:f6:94:16:74:78:
9f:92:f2:e7:93:31:4b:f2:74:4b:b0:af:f9:1f:6f:
68:9a:50:8b:ea:fa:09:ac:5e:15:cb:4f:7b:84:18:
33:52:0f:76:25:48:e6:f0:f4:2d:1c:98:45:74:cc:
7a:a6:1c:84:8d:83:8c:82:e7:9c:fc:f6:b5:49:21:
f1:71:af:f3:4f:be:77:fa:6d:3b:fb:53:dd:7c:c2:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:22:1F:53:E8:79:43:5F:D4:D7:4E:92:37:0B:15:DD:5D:C3:D5:D5
X509v3 Authority Key Identifier:
keyid:B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:95:8b:ab:2d:b0:15:a0:0e:93:83:65:e0:3e:54:cc:2e:94:
25:70:2d:08:a4:20:ac:35:7d:c2:86:7e:b7:52:6f:9d:f7:ac:
94:a5:aa:cd:ce:b6:9c:15:0f:f6:22:80:2b:29:db:51:c2:c0:
ec:fa:d7:be:c8:9e:a6:18:4c:c6:e5:a7:7c:26:c7:96:63:3e:
75:77:08:a0:51:58:22:b2:ad:fd:44:d8:75:6c:f9:94:5b:91:
90:2d:cf:7a:e0:e3:52:4c:d1:da:72:d3:5f:fb:13:99:50:88:
38:fb:f6:87:8f:c3:61:5d:06:64:3b:06:85:6c:9a:24:c1:ed:
50:09:dc:28:b9:41:8a:f6:52:e9:9d:52:0a:a7:a1:64:66:4c:
16:49:fe:d8:6b:10:cc:89:fb:6b:8a:c5:2d:da:96:ef:bc:45:
60:3f:40:88:90:e9:fa:e0:d0:9c:4b:41:db:8a:86:1e:41:3d:
11:47:6e:af:6a:63:2b:2b:30:79:89:95:73:d8:a7:8d:18:24:
8f:63:f6:5e:58:04:e9:e7:9e:e5:4e:89:7c:61:5e:dd:59:5e:
af:49:1f:7e:dc:e1:34:4b:d7:7e:d4:b1:4e:e1:d7:bb:d6:b1:
a7:e9:97:43:d0:c5:73:01:a5:86:c4:b2:90:da:a7:4a:a7:51:
5e:fe:ed:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:37 2026 by rpki-client