Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: GxmDu26RpzVI1c8Vkw99qePIQmYci1SfkM2Dx4e0Oo4=
Subject key identifier: 33:96:A3:1A:75:6F:8E:9C:84:A3:5B:A1:76:2F:D5:7E:73:FA:48:5E
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 019DD1638D98FFF48930DEFC366917D09F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 18FB
Signing time: Tue 28 Apr 2026 00:00:55 +0000
Manifest this update: Tue 28 Apr 2026 00:00:55 +0000
Manifest next update: Wed 29 Apr 2026 00:00:55 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: ZuuXK1wqkS37CfZr+FaVv7OlZ4hUu4OvAof3BQykGkI=)
2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
3: nRR7i404z5RVMJP9emF5qUhiiWQ.roa (hash: r2qRKGe5QD4+IAS1A7oJ0gKLqqHpjbTNssXN3Od+dxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:63:8d:98:ff:f4:89:30:de:fc:36:69:17:d0:9f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Apr 28 00:00:55 2026 GMT
Not After : Apr 29 00:00:55 2026 GMT
Subject: CN=3396a31a756f8e9c84a35ba1762fd57e73fa485e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:79:7b:b4:7a:68:78:45:46:1f:1c:d2:39:
ad:58:f1:07:f8:81:5d:f9:6d:43:51:22:02:0d:6d:
a8:93:75:98:f2:a1:fc:2b:77:13:90:11:4c:39:ad:
cc:46:24:a2:b2:85:e2:54:33:d5:95:ce:3c:3c:1e:
ad:c3:1f:8e:38:4e:dc:6d:5f:18:8b:00:10:e5:df:
62:1e:47:02:06:20:3c:6c:1d:4b:af:59:d0:ce:b7:
d3:c7:b9:1a:55:30:20:a2:3a:61:f5:7f:dc:57:9f:
f0:cf:42:f5:4a:92:b7:76:e6:08:8d:0e:b5:13:d0:
d8:26:83:1a:47:7d:a0:be:ee:3b:e5:63:e2:1a:d7:
7d:1b:cd:af:fa:8a:2b:5a:fb:1b:a3:97:e2:8b:11:
55:53:7f:5f:ae:a4:7e:f6:7f:d5:da:36:d3:cc:54:
d8:75:52:fe:58:43:72:db:dc:f3:12:53:53:98:47:
25:1e:2d:65:da:b0:e0:71:30:99:b9:4e:3c:6a:fe:
e4:e8:4f:66:a3:07:ce:0e:48:e5:7d:e7:38:14:ef:
ae:6e:15:41:ae:a2:10:af:8c:ea:b4:2e:37:a8:63:
f8:fa:4d:c1:cf:c3:60:ff:49:96:f4:e7:a1:ac:34:
21:b7:b7:3c:cd:d6:08:97:33:e0:09:16:62:25:ce:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:96:A3:1A:75:6F:8E:9C:84:A3:5B:A1:76:2F:D5:7E:73:FA:48:5E
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:52:bd:cd:c8:25:b7:9b:d6:e1:8c:f0:06:7e:7d:8b:b5:29:
d1:57:69:a0:00:a9:f2:c2:ca:6b:a3:f5:a7:8f:08:3f:ce:39:
28:51:b0:f9:b1:88:cd:4c:e6:ce:be:74:ca:1d:53:1d:da:f4:
b7:42:de:18:af:4a:1d:5e:ae:8b:5c:b0:e3:db:e3:50:ba:c4:
9a:c0:9f:25:97:58:ce:1e:ba:5c:54:38:5c:bc:54:42:e9:05:
28:de:8d:e4:03:da:25:da:4a:ac:44:b1:d3:ad:f5:77:4e:9c:
69:30:ec:d5:f0:cd:3b:7e:3a:fd:83:cf:01:89:5e:dd:e1:56:
b2:79:30:72:8e:d1:ad:06:a5:93:01:f9:bb:b9:bc:51:a4:f8:
99:ef:9d:d1:30:76:da:e8:dc:7c:2d:71:1b:0c:1c:32:e7:33:
c0:61:80:b9:d8:1e:ac:12:a4:65:17:4d:f4:be:95:b3:cf:c7:
b9:55:72:db:26:b2:eb:0a:d1:84:fa:25:2e:36:e4:b1:d1:17:
50:3e:81:01:33:25:ad:69:e3:6a:be:76:56:40:73:de:a9:61:
8b:5c:fd:76:cf:f5:33:3d:9a:2e:82:c4:ae:ad:1f:ee:65:47:
37:c9:6e:c0:3d:6d:0e:43:59:ae:03:29:82:bb:6a:86:07:7f:
45:91:e7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 06:06:46 2026 by rpki-client