Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: iSulRItUAEE/SKyMn1ujHMKvZlCEHg6jZ31Uvyr796A=
Subject key identifier: B5:83:3C:A0:B5:64:FE:C8:DD:7C:21:C2:15:CE:77:32:FB:86:C7:BB
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 019EB9224D3B4F7343CA23EFCF3F3A1DC3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1973
Signing time: Fri 12 Jun 2026 00:01:33 +0000
Manifest this update: Fri 12 Jun 2026 00:01:33 +0000
Manifest next update: Sat 13 Jun 2026 00:01:33 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: 3eANPBIlIlwlIztx7mOD3RC460ECpggsoLVsQerum+Q=)
2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
3: nRR7i404z5RVMJP9emF5qUhiiWQ.roa (hash: r2qRKGe5QD4+IAS1A7oJ0gKLqqHpjbTNssXN3Od+dxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 00:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:22:4d:3b:4f:73:43:ca:23:ef:cf:3f:3a:1d:c3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Jun 12 00:01:33 2026 GMT
Not After : Jun 13 00:01:33 2026 GMT
Subject: CN=b5833ca0b564fec8dd7c21c215ce7732fb86c7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:d7:07:d4:38:64:38:20:d0:f7:2d:ac:f7:
47:d5:0a:91:06:38:1c:fd:af:0e:0c:cf:e0:60:15:
dd:0e:80:7f:80:72:d5:7d:78:4a:24:8f:0b:ad:28:
95:1f:c7:fb:04:31:12:35:c1:17:84:35:96:bf:8d:
11:8a:24:d1:ce:48:ce:bd:56:0b:93:14:e9:e7:b9:
f8:9f:d1:58:05:a7:2e:40:21:48:f4:8f:12:2e:8e:
90:d8:15:db:cb:47:ce:28:06:e9:68:82:3d:e0:b3:
0f:51:3d:6f:20:c0:33:52:a6:90:a2:55:00:e4:37:
9d:2c:76:ec:f2:61:f1:09:e0:df:0b:92:bf:71:bb:
8b:7a:ec:33:ee:b0:1e:83:7b:43:b2:63:1f:cb:92:
05:ff:27:99:63:16:7c:7a:40:24:ee:9c:fe:a8:6c:
90:d7:ff:7e:63:1e:1d:3c:74:f2:b9:b1:42:1a:e5:
41:8c:49:16:83:f9:7f:fb:44:65:2a:6b:c6:bd:58:
cf:3b:0e:8d:4f:01:3a:ff:cf:ef:75:5d:eb:38:88:
e7:e9:da:a5:b4:f1:3e:2a:7a:67:72:35:02:ab:68:
b1:25:6d:23:f9:24:7b:61:a4:58:8b:71:b6:2c:fa:
1d:87:e6:40:8f:72:55:d3:95:a0:65:9a:08:7c:45:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:83:3C:A0:B5:64:FE:C8:DD:7C:21:C2:15:CE:77:32:FB:86:C7:BB
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f5:b0:c6:9e:b5:a1:8e:50:7f:43:dd:99:e5:ac:40:ab:b1:
5c:e2:75:d5:ee:eb:07:a8:e4:0d:f0:8d:1a:54:f3:78:67:97:
44:e3:5f:e5:d5:d0:cb:bf:45:7d:63:31:5a:26:94:d8:f7:d1:
70:43:00:d1:e6:9b:e3:ef:d0:fe:ef:bb:31:3d:6c:15:f7:1b:
19:41:f3:02:11:1f:60:95:a3:ae:81:f4:23:0f:38:bf:13:99:
19:bd:60:7b:27:4b:ef:b7:ba:56:6b:bb:e4:8d:2a:af:db:25:
0f:65:58:a5:f8:1f:8a:3a:54:6f:59:14:71:83:db:b9:93:53:
3b:6a:e6:18:ba:4e:35:f4:40:cc:0a:0c:6b:b5:bc:03:fb:3b:
f6:9f:57:a3:d1:62:32:8d:e6:2c:b1:20:60:b9:1f:0b:18:b7:
ac:94:ec:8e:8d:89:31:a7:f5:e3:b4:02:e3:cc:e5:74:b0:cd:
ca:c5:0a:aa:a6:9a:43:1f:f9:91:6d:4e:c1:de:03:ef:ef:f5:
03:18:19:44:ff:ef:c1:d3:24:a5:2c:12:32:14:14:ce:06:c6:
ca:65:25:04:a5:c5:de:1b:8c:b5:a8:fd:41:2b:69:19:8c:70:
ea:91:e4:ca:24:d9:94:5e:b4:22:e6:73:9b:15:0a:3a:a6:6f:
a7:06:36:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:51:16 2026 by rpki-client