Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
File: LofD1fRf7zjBBbk91E3ST1vuYOc.mft (raw, json)
Hash identifier: ZQbV+MInewxeFRdI0fY0FZpQReF4c2JSKn7Sn4pssuQ=
Subject key identifier: D6:23:64:68:FC:EA:70:A7:13:4F:AF:24:89:0F:5D:24:9E:08:3A:82
Authority key identifier: 2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7
Certificate issuer: /CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7
Certificate serial: 019D382E7D59CFE4DDF528E0DE9BFBE322D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
Manifest number: 10DF
Signing time: Sun 29 Mar 2026 06:01:04 +0000
Manifest this update: Sun 29 Mar 2026 06:01:04 +0000
Manifest next update: Mon 30 Mar 2026 06:01:04 +0000
Files and hashes: 1: LofD1fRf7zjBBbk91E3ST1vuYOc.crl (hash: 90i9+F5CEOtgAuMriYL8fwzYiTTtgmu3buV3NNvWhmY=)
2: vOnxOMMrfpwbYLXufIu9cPksSy4.roa (hash: IsBbUWUF1mmSkEzKlpo4wlrGY8DDapfkAU0NxfyEIwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7d:59:cf:e4:dd:f5:28:e0:de:9b:fb:e3:22:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7
Validity
Not Before: Mar 29 06:01:04 2026 GMT
Not After : Mar 30 06:01:04 2026 GMT
Subject: CN=d6236468fcea70a7134faf24890f5d249e083a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:4d:65:8c:43:2f:89:3a:5f:45:5a:d4:95:
58:87:c7:be:d1:7a:40:6f:43:19:8a:d1:51:f6:80:
1a:5c:55:dc:02:10:a2:fd:ac:4f:7f:d9:ee:1b:7e:
58:7a:89:74:bf:1b:9d:14:c9:7c:8a:a5:ce:6e:50:
cc:16:61:7e:58:71:65:98:aa:bc:75:bf:ba:80:94:
31:de:a9:8f:a2:ec:0f:44:18:d6:2c:0c:1f:ca:f6:
7c:10:51:d5:3d:b6:18:79:ff:b1:d1:2d:c8:96:56:
05:a3:d0:82:e8:4a:52:c8:25:76:78:c8:92:23:c8:
aa:09:ec:85:37:12:5c:d4:ba:e5:c1:5e:60:28:f3:
7b:b3:4b:b9:91:a3:aa:6c:5b:1b:a9:9c:29:1f:a3:
a1:16:73:e8:8f:6b:98:9c:a9:5c:3a:cf:56:38:cb:
1b:17:d8:0b:7b:90:8d:a5:a5:f4:86:89:59:fe:df:
68:f3:51:fb:20:64:d1:74:d0:ed:ef:e2:a3:8d:79:
6b:90:5c:34:7f:4e:80:b0:07:b9:28:27:21:f9:64:
b4:4c:50:b9:25:f9:12:22:36:0a:7b:b0:12:29:88:
69:6d:02:3c:bb:c2:9e:13:71:f6:3b:9b:0f:c0:02:
90:24:ea:08:44:84:4e:fa:be:da:e7:b3:5e:d9:37:
b9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:23:64:68:FC:EA:70:A7:13:4F:AF:24:89:0F:5D:24:9E:08:3A:82
X509v3 Authority Key Identifier:
keyid:2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:84:38:d4:f7:6c:c0:7c:da:03:f4:89:20:ae:0b:a0:9a:59:
51:bc:f2:65:c9:16:01:e4:57:78:7c:aa:ea:fc:5c:c8:b5:36:
d1:7d:dd:83:89:bc:61:17:0c:8c:8d:e0:b4:d1:d2:a4:ec:ad:
a8:dc:4b:b2:46:5f:4f:7e:20:a4:5a:48:80:c6:25:b3:57:4e:
f5:5a:a4:35:88:b9:85:74:b1:2e:2e:28:18:2c:ca:94:67:8b:
d7:d5:98:ea:6b:aa:37:a8:99:fe:30:77:d8:ca:87:4c:86:bc:
a0:a1:e5:64:32:0e:43:63:b9:af:ab:b7:61:57:f9:07:70:08:
f6:43:3b:f1:be:43:9d:e6:b3:18:db:a5:68:94:d2:37:0e:24:
ef:74:ad:af:af:44:b3:c7:a6:c4:27:6a:c9:d1:24:25:55:b8:
fb:92:69:e4:20:8e:82:40:50:69:49:b2:92:34:3a:87:1a:40:
df:9b:50:e3:7b:41:ec:83:bd:42:ee:47:99:17:8e:03:39:8e:
49:87:9e:ea:f6:60:a7:42:c6:bf:ef:c1:02:9b:2b:4d:ea:31:
a5:a3:d9:2d:1c:d5:f4:4b:1e:cc:b7:95:d9:09:37:b9:41:e2:
6a:91:06:ca:46:00:2a:98:9c:84:20:59:8a:97:68:12:10:15:
85:b6:4e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:03 2026 by rpki-client