
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: RWmQpSA6A0ADL8T5I7DBoWEjdGv+kD1MTUlDtarKOv8=
Subject key identifier: F9:3E:E7:1E:15:82:3B:70:7A:A5:8B:34:4B:E1:06:30:E9:5C:F3:A0
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 019FA33C4A92C0FF67E5A7C7CBA0CCA15BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 19ED
Signing time: Mon 27 Jul 2026 11:01:05 +0000
Manifest this update: Mon 27 Jul 2026 11:01:05 +0000
Manifest next update: Tue 28 Jul 2026 11:01:05 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: 8dusfoCVMcSyuPqoaJKqA5P7bjuIirn6faXBwg4vVyU=)
2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
3: a4RVALqt3vHeDDskNW3A5CdGc-U.roa (hash: TGxk49hSl+fpcglkMzdXiM6aB3O9APTDcKaAiPFnS+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:4a:92:c0:ff:67:e5:a7:c7:cb:a0:cc:a1:5b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Jul 27 11:01:05 2026 GMT
Not After : Jul 28 11:01:05 2026 GMT
Subject: CN=f93ee71e15823b707aa58b344be10630e95cf3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:d8:d2:bc:f9:1f:2d:08:1a:8a:60:8d:1c:
50:ba:3c:d3:1e:70:90:61:68:96:f5:56:2e:93:6a:
72:14:ff:85:46:de:d1:a8:9b:9d:5e:46:d0:f9:0f:
f8:99:c0:66:be:17:01:14:49:eb:f9:d6:0e:15:f8:
c8:20:db:69:2c:ed:8d:9a:be:f2:d5:6a:e5:04:72:
49:3b:76:ad:37:23:1b:1f:a1:eb:eb:08:57:07:b3:
89:00:83:c3:6b:ce:af:d8:52:07:28:d0:94:81:99:
11:64:01:12:7e:90:71:8b:67:cb:04:0a:d1:bc:af:
ea:af:da:69:cc:9a:a9:c2:ed:38:16:16:9c:9c:5f:
91:7b:51:17:4b:30:bc:97:e6:0e:04:25:39:5d:1d:
db:ce:4a:ee:05:e5:2f:8d:a6:70:f1:31:e5:e1:e7:
ba:5a:64:79:23:23:e4:49:1f:1b:17:09:3e:2e:e7:
05:60:b1:1e:91:32:ce:89:23:d9:4c:11:46:00:de:
c3:50:ce:6a:10:9d:6d:c7:5c:59:4b:0c:77:85:63:
f5:24:a3:05:d1:00:70:3f:6a:78:90:3c:6f:aa:ef:
4d:2b:6d:fd:31:32:a1:f3:ed:64:ae:96:e9:42:c3:
3b:be:13:b9:f9:77:b6:9d:2c:34:e5:4d:c2:58:21:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3E:E7:1E:15:82:3B:70:7A:A5:8B:34:4B:E1:06:30:E9:5C:F3:A0
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d5:d0:69:46:ff:48:95:26:73:0a:cc:1b:98:52:6b:72:24:
f5:e1:31:a4:19:30:eb:a2:76:30:02:68:29:26:7b:03:ce:24:
f6:20:47:88:36:0f:c0:b1:fa:58:2a:05:27:ff:d4:84:32:9f:
7d:cc:fe:04:d6:ad:e9:d1:e5:ff:53:e3:2e:52:8a:4b:7b:6e:
cf:16:3c:6d:33:30:5e:08:b2:af:47:7c:14:12:82:2e:64:a1:
e9:b2:fc:02:4c:fc:71:31:a8:29:b6:a0:bc:63:97:90:92:ec:
93:95:aa:0e:f4:e8:2e:a6:c5:37:06:4b:18:4f:8e:4b:10:58:
04:62:e1:f1:85:1d:48:3e:c7:15:24:67:59:c8:58:c0:7e:f2:
21:6a:25:94:78:cd:78:4d:e6:1e:40:0b:3f:34:d8:52:9c:17:
d0:bd:7f:4d:c2:5b:9a:46:20:19:f7:75:88:e4:12:b8:7b:b9:
a5:14:b8:10:20:db:fb:d5:28:13:08:4e:45:2a:79:20:5a:c9:
73:c3:12:c7:30:d9:e4:09:ad:8d:4f:e5:93:78:c9:11:f9:71:
1d:6e:ce:51:17:c4:96:57:35:58:c5:e1:4b:09:1d:0d:5a:0d:
35:3e:37:2c:f5:40:69:25:eb:11:75:41:a2:d9:c6:4f:46:05:
05:fb:08:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jPEqSwP9n5afHy6DMoVu5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOGIyNGM3NmFkODdhNmMxZmVkZmZhZjA4ZDliMTdiNDUy
NDk5OTEwHhcNMjYwNzI3MTEwMTA1WhcNMjYwNzI4MTEwMTA1WjAzMTEwLwYDVQQD
EyhmOTNlZTcxZTE1ODIzYjcwN2FhNThiMzQ0YmUxMDYzMGU5NWNmM2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaTY0rz5Hy0IGopgjRxQujzTHnCQ
YWiW9VYuk2pyFP+FRt7RqJudXkbQ+Q/4mcBmvhcBFEnr+dYOFfjIINtpLO2Nmr7y
1WrlBHJJO3atNyMbH6Hr6whXB7OJAIPDa86v2FIHKNCUgZkRZAESfpBxi2fLBArR
vK/qr9ppzJqpwu04FhacnF+Re1EXSzC8l+YOBCU5XR3bzkruBeUvjaZw8THl4ee6
WmR5IyPkSR8bFwk+LucFYLEekTLOiSPZTBFGAN7DUM5qEJ1tx1xZSwx3hWP1JKMF
0QBwP2p4kDxvqu9NK239MTKh8+1krpbpQsM7vhO5+Xe2nSw05U3CWCGxnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPk+5x4VgjtweqWLNEvhBjDpXPOgMB8GA1UdIwQY
MBaAFC6LJMdq2HpsH+3/rwjZsXtFJJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAt
OTExOTBhMDJkYjcwLzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAtOTExOTBhMDJkYjcw
LzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNXQaUb/
SJUmcwrMG5hSa3Ik9eExpBkw66J2MAJoKSZ7A84k9iBHiDYPwLH6WCoFJ//UhDKf
fcz+BNat6dHl/1PjLlKKS3tuzxY8bTMwXgiyr0d8FBKCLmSh6bL8Akz8cTGoKbag
vGOXkJLsk5WqDvToLqbFNwZLGE+OSxBYBGLh8YUdSD7HFSRnWchYwH7yIWollHjN
eE3mHkALPzTYUpwX0L1/TcJbmkYgGfd1iOQSuHu5pRS4ECDb+9UoEwhORSp5IFrJ
c8MSxzDZ5AmtjU/lk3jJEflxHW7OURfEllc1WMXhSwkdDVoNNT43LPVAaSXrEXVB
otnGT0YFBfsIag==
-----END CERTIFICATE-----
Generated at Mon Jul 27 16:49:35 2026 by rpki-client