Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: f1JnEMBDCEB/XMEaRacJxyWQ6JcB93O8S3CRNycUnzE=
Subject key identifier: 10:A5:A6:96:DC:D9:13:CA:79:33:FE:41:B9:9E:DD:7D:28:73:8B:13
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 01A18BD3458B0A2DD7A5C2DBEAFD50D828A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1AEA
Signing time: Fri 30 Oct 2026 08:00:41 +0000
Manifest this update: Fri 30 Oct 2026 08:00:41 +0000
Manifest next update: Sat 31 Oct 2026 08:00:41 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: y9aP4ZChZrUliRFY80QkZa0FA0ip6TIeBKOypKyN/Vw=)
2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
3: a4RVALqt3vHeDDskNW3A5CdGc-U.roa (hash: TGxk49hSl+fpcglkMzdXiM6aB3O9APTDcKaAiPFnS+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:d3:45:8b:0a:2d:d7:a5:c2:db:ea:fd:50:d8:28:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Oct 30 08:00:41 2026 GMT
Not After : Oct 31 08:00:41 2026 GMT
Subject: CN=10a5a696dcd913ca7933fe41b99edd7d28738b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:42:48:c0:3b:4f:50:1f:22:e9:8c:8f:b5:5d:
78:69:ae:5f:2b:74:b0:fa:98:7e:e8:4d:d9:cf:b3:
76:36:68:8f:f9:21:10:9c:33:c5:ac:5f:6c:3b:30:
26:63:76:dd:9a:18:74:b3:be:29:55:82:3a:33:9e:
cc:2c:80:37:c5:03:97:24:ef:7c:cb:9b:fe:c7:4a:
a9:06:c3:7c:15:d2:83:eb:5f:de:93:d1:a6:e0:09:
c5:f7:52:46:89:d0:cb:1a:88:c7:a8:b6:1f:fd:71:
52:78:49:df:6e:e4:68:60:47:26:84:3d:7a:80:b7:
f5:27:d5:93:e3:13:75:6a:a0:45:af:0d:53:7b:e4:
44:28:69:09:31:76:c2:b0:97:e7:9d:6d:1d:1b:fe:
91:49:d4:6b:87:05:48:06:8f:e0:a7:90:9d:99:87:
30:29:76:cb:90:93:c8:5d:20:e5:19:e3:ac:bc:cf:
ba:16:90:74:36:05:c7:ac:cf:91:96:b4:83:6a:ac:
41:1b:87:3a:ff:4e:18:e0:be:bf:c5:7b:e5:c5:11:
b4:4f:c0:62:48:9d:68:0c:39:48:10:5a:4f:39:a0:
c6:46:29:9f:21:8e:b9:1c:73:40:72:f1:e1:58:4e:
33:2f:7a:b9:d0:15:f0:25:d7:85:82:ae:86:5e:d1:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A5:A6:96:DC:D9:13:CA:79:33:FE:41:B9:9E:DD:7D:28:73:8B:13
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:82:7d:cc:0b:7a:6d:e7:58:5e:8e:36:a1:4c:fb:03:e7:e2:
4c:84:56:bc:96:80:0d:da:1a:a7:d6:d6:20:dc:c9:9d:22:ee:
38:98:b7:d8:09:64:a9:59:76:d9:83:fd:c3:6c:2a:2e:07:b6:
aa:06:27:b6:11:df:bb:cf:1c:50:32:79:ca:76:f2:49:ef:53:
ee:20:6a:11:8d:45:a1:2b:0c:12:e3:ea:cc:4d:4e:b0:fb:e5:
a5:1a:6b:29:f1:c9:7e:24:e5:5d:65:92:d3:88:6e:59:44:5e:
ad:87:87:57:44:63:e5:ce:18:08:87:9a:e6:ea:ce:9a:95:38:
d2:df:04:d5:b2:54:a2:b0:43:fd:db:19:d7:f4:62:a9:35:c9:
2f:45:48:16:03:5a:54:a4:cc:6f:86:65:51:72:25:c6:6f:b0:
b1:c1:e1:ee:aa:be:dc:d3:f0:7f:c6:ad:3b:48:08:bd:52:fb:
98:fc:81:04:a1:9a:86:f9:9d:3c:b3:de:ac:8e:13:a6:79:8a:
9c:8f:de:73:0a:f5:c6:f0:c7:c0:a9:b8:28:df:68:24:13:3b:
af:92:b5:f4:f0:97:cf:02:26:e3:98:f7:75:d6:a2:9a:68:bf:
ed:a9:88:b0:3a:75:36:29:55:86:f2:64:a3:31:0c:5c:5f:17:
62:c9:bc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:10:15 2026 by rpki-client