Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.mft
File: loXHKCpFG6Lamf1RF8VFrXor3hM.mft (raw, json)
Hash identifier: 0fcpfk94dlSYJ9bX6e27BtDR85DX6RRWrCxjMGpT80k=
Subject key identifier: BE:AE:68:4B:50:4F:83:71:DA:22:40:69:AA:CE:62:22:81:8F:84:A4
Authority key identifier: 96:85:C7:28:2A:45:1B:A2:DA:99:FD:51:17:C5:45:AD:7A:2B:DE:13
Certificate issuer: /CN=9685c7282a451ba2da99fd5117c545ad7a2bde13
Certificate serial: 01A136A37FDF9837C0B3CAFF09AD9939190D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/loXHKCpFG6Lamf1RF8VFrXor3hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.mft
Manifest number: 01AA
Signing time: Tue 13 Oct 2026 19:00:47 +0000
Manifest this update: Tue 13 Oct 2026 19:00:47 +0000
Manifest next update: Wed 14 Oct 2026 19:00:47 +0000
Files and hashes: 1: 29UCqWlrNh5jbs3TTO-NOpURpdQ.roa (hash: 0gL17gOZz0TzmploQY6uAf9PHcOaGIU8JFgYgCSZums=)
2: loXHKCpFG6Lamf1RF8VFrXor3hM.crl (hash: //TWugqZzYkQ0cNPW3v9S+WjHYeuTTJJSeaQT+sSdDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/loXHKCpFG6Lamf1RF8VFrXor3hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:a3:7f:df:98:37:c0:b3:ca:ff:09:ad:99:39:19:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9685c7282a451ba2da99fd5117c545ad7a2bde13
Validity
Not Before: Oct 13 19:00:47 2026 GMT
Not After : Oct 14 19:00:47 2026 GMT
Subject: CN=beae684b504f8371da224069aace6222818f84a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:0e:55:c3:92:7a:79:75:a7:47:28:e1:b4:
ea:5f:08:89:15:10:f4:a3:d4:27:f8:8a:78:9a:cb:
ed:f0:c0:66:67:d0:b0:41:3a:ab:29:a4:6a:11:70:
fe:6f:13:d2:f0:d1:ea:73:92:7b:d3:ae:f0:15:ed:
74:13:3d:df:96:f1:8b:7b:c7:6f:17:08:32:e5:98:
5a:0f:c7:40:81:bc:2f:50:b2:4d:42:6a:8b:a0:ff:
43:97:ad:51:f2:09:ed:6f:af:1c:70:dd:77:c5:e4:
e0:03:2e:98:e7:6a:04:c3:f9:da:fe:58:5c:d5:e7:
53:98:9e:62:7c:e3:41:7e:98:6d:e2:58:e3:93:51:
4e:cb:fc:6d:b3:6f:92:29:da:1b:92:3f:18:19:0d:
4e:0d:61:5f:1b:a6:88:45:e7:1b:1e:68:98:f4:ed:
fc:c4:6c:5e:cc:6b:b6:5b:4d:d1:ab:41:b2:a2:ce:
6a:5f:67:a6:e9:b1:e5:48:8c:93:a4:5d:5d:98:68:
73:dd:61:89:18:0e:a8:ce:4d:14:e7:62:9b:c8:28:
d0:d9:ac:ff:59:ef:ba:1a:67:bd:42:0a:19:96:cf:
8e:26:bd:1a:73:45:eb:be:46:6c:6c:9b:fc:30:31:
04:53:1c:ef:84:25:55:29:c1:75:2d:12:ad:bb:68:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AE:68:4B:50:4F:83:71:DA:22:40:69:AA:CE:62:22:81:8F:84:A4
X509v3 Authority Key Identifier:
keyid:96:85:C7:28:2A:45:1B:A2:DA:99:FD:51:17:C5:45:AD:7A:2B:DE:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/loXHKCpFG6Lamf1RF8VFrXor3hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a3:26:6f:29:f4:82:64:32:2c:b6:f7:24:47:85:90:81:f1:
74:b1:19:05:93:3f:ed:4f:62:e3:c6:0b:55:6b:90:18:68:ed:
43:98:c4:27:be:02:8a:2a:01:a9:8a:e2:b6:0d:bf:03:27:4d:
af:65:e0:80:fa:13:26:82:3f:80:89:6c:bd:90:47:b7:4a:5d:
83:57:c7:60:e9:b5:ad:a0:dd:d4:72:6c:4c:3e:5e:10:04:b0:
71:d6:81:3d:e7:cb:ab:ef:67:5b:63:a1:c9:e6:9d:3a:08:a4:
fb:b1:e8:3c:5c:0e:34:b8:70:e0:cb:c2:d9:79:75:7d:c5:6e:
e7:ef:83:37:f2:aa:86:24:2a:66:e8:a0:72:be:49:b2:a3:5f:
30:6e:c8:f5:f5:a8:4c:e1:a3:15:14:35:38:d7:e7:51:05:14:
4d:dd:d1:6d:2e:ac:e3:05:dc:ed:0d:d7:e8:89:f8:4f:c4:9e:
6a:ec:fe:a0:af:d6:88:2a:70:58:33:b9:fe:33:49:07:1d:5e:
07:10:bf:5f:79:3a:f3:6b:81:1b:1e:1e:e8:bf:7b:50:fc:a8:
6e:87:9a:06:53:16:3a:47:18:8b:20:0e:28:70:f6:d7:42:c6:
f9:20:d8:ae:2b:eb:d7:e5:c2:18:2c:c3:d7:70:c5:83:11:59:
8f:91:f1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:51:06 2026 by rpki-client