Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
File: sk_loZnHVDnFJkkEVLSr1UAhN6k.mft (raw, json)
Hash identifier: ZIvkftOPiEZJA2TjrL/5ADGxKyQNe7mvxexF4WPeAJM=
Subject key identifier: B3:10:98:2A:CA:27:CC:08:D8:05:D3:C5:09:EB:AC:8F:FE:FC:2C:15
Authority key identifier: B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
Certificate issuer: /CN=b24fe5a199c75439c526490454b4abd5402137a9
Certificate serial: 019CDD69C166807C3426D2B58AB5873C0969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
Manifest number: 7F
Signing time: Wed 11 Mar 2026 15:00:21 +0000
Manifest this update: Wed 11 Mar 2026 15:00:21 +0000
Manifest next update: Thu 12 Mar 2026 15:00:21 +0000
Files and hashes: 1: 1X-M9-Ob8zn_AUbRkQ52E-fkDj8.asa (hash: A9QlGHiSL6cJZrCCASWffcD/70Opt2l0qntImDeMQKw=)
2: sk_loZnHVDnFJkkEVLSr1UAhN6k.crl (hash: nPWYh+t3M6+hfhCFnK/I5dkeV0+VLn2D1hKqpxdW804=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dd:69:c1:66:80:7c:34:26:d2:b5:8a:b5:87:3c:09:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24fe5a199c75439c526490454b4abd5402137a9
Validity
Not Before: Mar 11 15:00:21 2026 GMT
Not After : Mar 12 15:00:21 2026 GMT
Subject: CN=b310982aca27cc08d805d3c509ebac8ffefc2c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:15:b9:42:fb:b4:d5:9d:fa:e4:b8:66:f2:
1c:ab:a3:93:d0:96:64:26:94:f0:10:6c:83:31:82:
01:a1:08:73:37:b2:36:a9:ca:98:48:be:bc:80:d3:
4e:6c:70:fd:6a:fb:fc:5f:34:8d:e5:19:22:00:e7:
0c:3b:27:58:38:aa:75:8e:7f:07:b0:46:1c:a1:b0:
f9:e1:fd:54:aa:31:62:8e:c7:27:95:2f:86:30:0a:
d7:15:09:fe:1e:a0:e1:c7:c4:a1:86:77:16:48:ff:
c9:c4:f3:56:48:2d:ff:94:1a:3b:60:d3:9d:a1:98:
cb:53:2f:31:cd:34:54:e2:ea:c3:46:56:78:10:5e:
96:1d:b5:76:b4:5c:4c:96:11:44:05:e0:1f:12:80:
52:1f:eb:17:09:89:a7:82:e7:8f:f9:34:76:f1:a2:
64:c4:0e:5e:f1:9a:fb:49:8c:91:d1:55:9b:44:7b:
07:34:ea:74:be:8c:40:cf:2f:c4:5c:1a:0a:70:29:
88:d8:fc:a6:2f:e7:5a:59:bf:1d:47:a4:3e:5d:76:
43:ba:61:8b:4b:79:7a:d8:8d:ae:ff:00:6b:f7:d6:
29:ae:09:49:9f:89:ab:cf:06:34:38:ef:d2:f3:2a:
fa:6e:38:e7:16:bd:8e:84:c0:62:04:ce:9b:a1:1a:
b2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:10:98:2A:CA:27:CC:08:D8:05:D3:C5:09:EB:AC:8F:FE:FC:2C:15
X509v3 Authority Key Identifier:
keyid:B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0e:0e:77:2c:78:a3:6c:ee:f3:d7:f8:db:d0:1e:4e:a3:9c:
42:75:f5:45:2e:1a:75:09:85:16:51:fd:ed:32:87:e8:58:76:
3e:be:12:4a:d7:c7:c1:77:43:63:66:4d:5c:09:89:90:d6:0d:
d6:d1:1c:b7:a2:c7:b2:82:3c:58:f0:89:95:a2:ae:f9:f0:04:
b1:5f:ca:08:80:0f:0a:95:70:95:6c:1f:e7:47:84:55:d1:8d:
96:5b:ea:90:cc:ac:c5:21:d4:37:5a:7d:45:c3:f0:09:0a:a5:
8b:22:3d:54:8f:f5:99:17:3f:c6:36:e2:af:f9:79:f6:86:d1:
28:57:fe:d5:b6:fe:28:ce:b2:c9:38:7c:74:8c:f0:52:ff:87:
fc:df:29:bb:44:db:f7:db:67:24:da:d3:18:ce:3d:a1:f4:68:
69:3c:5c:1b:09:d4:b3:90:43:38:31:03:b4:c6:16:8c:a9:35:
0c:e8:88:c6:2e:49:32:ac:5b:2b:cf:4c:3b:05:a6:e3:06:ee:
54:40:4a:a0:ab:5b:a8:f3:5c:dd:49:1f:0c:4f:93:e4:c5:9a:
e7:f7:94:9b:4f:d1:77:d9:41:77:49:16:ce:a0:32:3d:2c:d1:
d1:a1:19:ef:dd:18:4c:84:16:df:f1:0d:bf:73:41:6e:af:c8:
bd:a0:f4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 21:03:24 2026 by rpki-client