Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
File: sk_loZnHVDnFJkkEVLSr1UAhN6k.mft (raw, json)
Hash identifier: YpqYKMmcPi2UWDmhv88eVAiD7llvnDA4Y2FBT1knsKw=
Subject key identifier: 7E:BD:C5:F5:A9:8F:8B:55:54:9E:2D:20:23:2C:3B:5D:AC:23:FE:FD
Authority key identifier: B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
Certificate issuer: /CN=b24fe5a199c75439c526490454b4abd5402137a9
Certificate serial: 01A1792832FD66E7B3DDA34651671AFAF7E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
Manifest number: 02E2
Signing time: Mon 26 Oct 2026 17:00:39 +0000
Manifest this update: Mon 26 Oct 2026 17:00:39 +0000
Manifest next update: Tue 27 Oct 2026 17:00:39 +0000
Files and hashes: 1: 1X-M9-Ob8zn_AUbRkQ52E-fkDj8.asa (hash: A9QlGHiSL6cJZrCCASWffcD/70Opt2l0qntImDeMQKw=)
2: sk_loZnHVDnFJkkEVLSr1UAhN6k.crl (hash: YSrU/PbJZA6cmQJ+9ekP/EQpOL8Cu3y4irMmNwzjPEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:28:32:fd:66:e7:b3:dd:a3:46:51:67:1a:fa:f7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24fe5a199c75439c526490454b4abd5402137a9
Validity
Not Before: Oct 26 17:00:39 2026 GMT
Not After : Oct 27 17:00:39 2026 GMT
Subject: CN=7ebdc5f5a98f8b55549e2d20232c3b5dac23fefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:a1:fb:ed:47:32:8c:ed:6b:ef:24:4a:d5:
37:97:7a:2f:0f:a7:0f:2f:67:9c:f3:b9:b2:73:45:
44:db:ad:ba:f9:d5:49:a5:a8:7e:8b:06:11:72:03:
79:dc:ad:9e:8d:eb:42:c7:fd:79:2a:d3:19:b7:33:
4a:eb:9b:99:7b:4a:4a:6b:cd:41:e5:90:fa:00:f3:
95:3f:77:42:4e:e6:2d:62:b9:ba:32:28:79:e9:7e:
c3:4b:51:e9:40:15:6e:86:ef:3b:57:8a:28:c0:d5:
2d:0e:b3:58:12:80:3f:3a:60:71:2e:a0:34:e2:25:
b0:33:c9:77:e2:09:70:5c:c4:80:5f:2a:88:67:69:
5f:ff:e9:b4:5c:8c:c5:49:a8:7e:5e:68:1e:ec:a1:
b1:6c:51:5e:b9:4e:dd:fe:20:ed:e5:09:60:f8:68:
ec:c7:8b:26:3d:68:49:51:d0:37:3c:2a:21:75:63:
b3:79:c0:31:bd:96:f0:1e:8b:83:dc:e5:e9:8a:b0:
9d:93:26:20:95:8d:08:f3:9a:0f:aa:72:eb:f9:58:
0d:47:db:96:a4:76:ed:0a:75:87:a2:28:d1:9c:de:
dd:70:5d:31:16:ee:30:72:df:64:36:e8:3c:51:fa:
d6:8f:1c:fe:9f:fa:74:a7:c6:02:38:ec:dc:3d:5a:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BD:C5:F5:A9:8F:8B:55:54:9E:2D:20:23:2C:3B:5D:AC:23:FE:FD
X509v3 Authority Key Identifier:
keyid:B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0d:9f:86:bd:d7:51:49:58:0d:a7:68:e0:95:03:4a:e4:f9:
ea:2f:eb:47:db:5d:f3:d4:43:f5:95:f9:ed:c6:8c:21:9d:89:
08:a1:2e:2c:64:52:50:00:a6:e7:ae:55:fd:b9:9f:f7:bb:fb:
3b:20:9c:9e:bd:05:a7:22:90:67:5f:58:c1:c4:12:fc:66:81:
0e:24:07:1a:0a:37:97:5a:68:30:51:07:d1:73:e5:b7:64:ae:
13:1b:7d:86:56:96:1a:2c:61:2e:0c:f2:49:f4:39:5f:66:94:
98:f0:8d:dd:dd:48:a3:ee:02:7e:2a:2b:fb:cc:a0:63:ad:15:
77:29:74:cb:c2:ba:e9:2c:4a:56:23:a1:26:9d:fb:61:a4:46:
d4:51:9e:95:92:24:eb:b9:b1:a7:03:20:01:19:c6:57:8f:4e:
32:23:fe:9f:e4:84:be:c7:dd:88:e4:6e:8d:86:65:64:33:dd:
71:02:d1:53:71:72:05:a0:89:4a:b1:a7:50:f3:ad:99:b9:80:
54:92:cb:71:1e:79:17:df:cd:31:f4:3b:67:af:4a:07:25:fc:
7d:38:ce:f0:17:95:02:57:96:06:a3:05:01:37:24:c9:cd:85:
dd:19:4a:6f:08:22:d1:5a:50:1e:5d:48:0c:2c:a5:fd:08:2b:
98:67:cc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:50:44 2026 by rpki-client