Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: /VJlsiE5nkHg3A3dHGtSkKxsxFu9AZW4g3hqOZmQ9mQ=
Subject key identifier: 30:0E:B1:A4:22:5D:F2:C7:B8:C5:52:41:CF:60:54:C8:EE:0E:C0:B0
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 01A08CE9237B27CB7B64284723CD90CB2949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1A66
Signing time: Thu 10 Sep 2026 20:01:24 +0000
Manifest this update: Thu 10 Sep 2026 20:01:24 +0000
Manifest next update: Fri 11 Sep 2026 20:01:24 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: V4pRj3pcYZmwozvrMGQmfxb/+JMTqPBwUUU6RR4f3HE=)
2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
3: a4RVALqt3vHeDDskNW3A5CdGc-U.roa (hash: TGxk49hSl+fpcglkMzdXiM6aB3O9APTDcKaAiPFnS+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:23:7b:27:cb:7b:64:28:47:23:cd:90:cb:29:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Sep 10 20:01:24 2026 GMT
Not After : Sep 11 20:01:24 2026 GMT
Subject: CN=300eb1a4225df2c7b8c55241cf6054c8ee0ec0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:21:d5:b9:4a:21:ec:2a:ed:57:fc:08:20:d1:
7f:54:21:da:27:3f:cb:3a:8d:cc:fa:c0:40:34:e0:
ff:4a:fc:62:13:e7:5d:b5:ef:5f:a9:70:7c:d7:4b:
a5:4f:34:5b:18:45:5b:67:dd:3e:6c:a6:cf:87:bf:
c0:bc:ae:95:e2:0d:11:eb:71:94:2f:96:b8:42:29:
c7:cd:28:c8:a1:54:56:c8:6e:7f:4a:d1:be:cf:10:
cf:bf:b8:5c:0a:aa:41:60:b5:dc:8f:db:a6:ab:9f:
27:42:59:e9:df:b5:38:2c:32:c4:54:7d:c0:e4:1d:
a0:ba:02:ee:ad:ed:31:cb:2e:07:22:c6:2e:86:36:
a7:e3:2f:c7:29:59:2f:7a:56:69:37:28:9d:ff:16:
fb:d5:34:9d:1b:8f:2d:0f:34:59:a9:46:1e:f4:a0:
63:e1:38:4f:3e:57:08:93:e6:fe:32:2f:68:64:99:
61:fc:5a:35:48:84:42:1c:5c:d3:2d:82:b5:5c:fa:
d3:4a:1c:d1:dd:43:48:78:37:d4:f9:69:ab:3b:00:
ad:54:37:7f:5b:ff:95:f6:cb:8e:33:cd:c9:a3:3d:
80:d0:08:e4:b8:51:98:a7:dc:09:7f:50:c4:09:01:
13:cd:17:6c:79:37:dc:f3:f6:d2:4c:a4:d9:a4:ea:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:B1:A4:22:5D:F2:C7:B8:C5:52:41:CF:60:54:C8:EE:0E:C0:B0
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c9:23:c3:9b:67:c1:8b:ba:e7:9e:b5:50:f6:63:5f:c0:8d:
5f:f5:1d:13:bd:2e:71:32:df:ce:38:fa:75:49:cf:ab:85:ae:
09:6f:3b:b1:bd:13:35:ff:99:a6:d0:32:b4:21:42:71:99:69:
4f:c1:59:ce:0e:1b:1c:2b:52:3a:78:71:1d:49:af:8c:af:a9:
c6:a0:e9:c7:ba:21:02:54:77:b1:bd:47:ad:b0:65:3c:69:4e:
af:f0:28:7e:cb:7f:1d:51:2d:f6:94:5b:2a:f1:17:5a:cf:03:
14:49:57:61:ff:ff:64:96:5e:6a:b1:31:27:53:30:ed:4e:71:
d1:3c:75:1c:6b:7f:21:db:02:d1:ac:b8:5d:d6:4a:25:51:45:
ce:59:29:cc:3d:83:fd:a2:bc:4b:ba:55:29:14:d1:1e:7e:80:
8e:0e:e9:f1:9d:f8:1b:85:dd:d0:99:e3:5d:e5:04:0b:58:fe:
ab:b7:13:61:25:03:7a:98:b1:8b:56:9c:07:8b:2c:b6:b7:9a:
23:ff:34:1f:13:4f:fd:ff:f6:37:d5:d8:d5:e7:45:f4:a6:ce:
e8:3c:83:be:f3:49:f8:77:4a:ef:e7:75:8a:13:59:0f:f3:77:
b4:05:42:a8:e2:20:68:3b:e9:2a:6f:d6:4b:66:55:40:06:f4:
d7:86:cb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:15:36 2026 by rpki-client