Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
File: sk_loZnHVDnFJkkEVLSr1UAhN6k.mft (raw, json)
Hash identifier: mHFF3vxfFKCGEvGf4eWF+hiwGY/RLozjJJU0L65F25s=
Subject key identifier: 8A:E2:99:C3:73:0E:DF:33:31:C5:C0:56:7F:15:03:46:FA:26:41:37
Authority key identifier: B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
Certificate issuer: /CN=b24fe5a199c75439c526490454b4abd5402137a9
Certificate serial: 019FA003C1EF92F36402DECFBD3B1747CCD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
Manifest number: 01ED
Signing time: Sun 26 Jul 2026 20:00:28 +0000
Manifest this update: Sun 26 Jul 2026 20:00:28 +0000
Manifest next update: Mon 27 Jul 2026 20:00:28 +0000
Files and hashes: 1: 1X-M9-Ob8zn_AUbRkQ52E-fkDj8.asa (hash: A9QlGHiSL6cJZrCCASWffcD/70Opt2l0qntImDeMQKw=)
2: sk_loZnHVDnFJkkEVLSr1UAhN6k.crl (hash: HBEp4xImvsKaZO9FOOSu988CLwfL4iOWp7ZNvURWiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:03:c1:ef:92:f3:64:02:de:cf:bd:3b:17:47:cc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24fe5a199c75439c526490454b4abd5402137a9
Validity
Not Before: Jul 26 20:00:28 2026 GMT
Not After : Jul 27 20:00:28 2026 GMT
Subject: CN=8ae299c3730edf3331c5c0567f150346fa264137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:6a:4d:fc:b3:2a:8f:8a:cf:21:59:92:c4:
bb:39:95:79:36:0a:9e:15:b9:f9:34:33:15:2a:a4:
2e:21:31:59:40:f5:18:f7:8f:22:75:87:70:dc:9a:
74:32:0a:ae:ab:d3:05:4a:d9:1d:91:31:be:62:3f:
39:8f:07:99:68:ea:14:a0:e5:66:31:84:e7:77:ff:
89:d2:4b:b3:e1:ab:b6:c8:cf:5b:19:51:d0:bc:b5:
b2:d2:4e:47:55:ad:e4:72:2e:f4:7c:c4:e8:66:7c:
c3:1d:c0:58:82:a1:fc:04:4b:02:9e:a5:f9:d6:52:
3b:98:be:ab:63:ae:ed:0b:fa:7c:d4:f8:59:6f:c6:
f2:39:e7:7d:a3:67:f4:d6:f8:48:53:47:76:ab:2d:
46:cf:26:9c:cd:7e:11:22:e8:0d:42:f6:3a:c0:9f:
bf:dd:b7:a0:0d:5b:9e:5d:f4:e1:87:21:61:26:41:
0a:01:6c:62:eb:aa:f2:ea:05:c0:ca:06:4f:ed:be:
00:c1:3d:19:11:00:12:2c:a7:45:8c:8f:67:c6:ba:
ff:56:96:42:7b:56:e4:d7:26:de:e1:2a:5a:e1:49:
80:86:8c:8b:fe:6e:f4:5a:7e:c4:70:41:9a:45:b8:
40:56:f4:b4:d9:91:45:17:d1:40:8b:71:20:7d:1c:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E2:99:C3:73:0E:DF:33:31:C5:C0:56:7F:15:03:46:FA:26:41:37
X509v3 Authority Key Identifier:
keyid:B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4b:da:00:0d:37:e9:d3:36:1d:66:74:c1:75:f1:c0:6d:8b:
dd:a4:f5:81:f4:62:8b:81:2e:4e:b1:ae:81:48:7a:17:f7:0a:
8f:e1:af:54:21:d9:f3:fe:37:4f:c1:b9:28:41:53:4d:a9:f5:
8b:88:fc:e5:de:d3:8b:51:43:24:6c:56:0a:19:2f:53:f5:fa:
ed:16:21:d1:ac:42:ce:f1:8b:0e:59:09:f2:b3:fc:57:38:f2:
62:ec:ca:0a:26:e5:2a:36:a2:95:9f:7d:7e:c6:42:ee:0a:09:
db:8e:61:57:eb:9b:ac:ce:04:ba:d6:9f:82:4f:1b:9b:e1:27:
fb:82:72:93:94:b0:a6:e9:46:c3:d8:ac:5e:ef:bb:f5:f8:28:
06:ba:4b:47:25:e0:ac:d2:49:f8:31:5c:f9:bc:d1:c0:91:a5:
14:54:39:e4:8a:2e:73:ec:70:d2:69:40:66:c8:82:54:34:36:
c1:71:d2:78:af:8c:d2:14:93:78:40:53:c4:0f:94:da:7f:96:
1f:f4:71:c6:54:cd:73:bd:31:2d:e8:c4:4e:0f:eb:5e:80:7f:
60:7b:a7:e8:48:f6:61:73:1b:5e:16:4b:27:47:a2:d8:36:1d:
d3:05:ae:de:c7:68:c1:db:8c:9b:14:2d:f1:1b:c4:ad:f8:68:
cb:05:0d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:36:27 2026 by rpki-client