Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: 9lsxSOh94ZnQ4NJdMhSFNDiyWq6XOTL3Mvq3cHrjFGM=
Subject key identifier: 4C:5C:EB:FC:C5:6E:87:57:EA:EE:3E:9A:82:F9:95:AC:E8:ED:DB:71
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 019CE6A489EFA2561E44A817EEBE28FD4731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1881
Signing time: Fri 13 Mar 2026 10:01:08 +0000
Manifest this update: Fri 13 Mar 2026 10:01:08 +0000
Manifest next update: Sat 14 Mar 2026 10:01:08 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: y7tx4dMKYRQTf2fb2oN4b8y8TBd68Oii4pKY/LJLO7g=)
2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
3: kjwAci0-xsN-FW2yHLM0zLU2az4.roa (hash: ZKpTRPaiSMpihhfsD4iTWrJFTjTfyomHoD/xRGDDVIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:89:ef:a2:56:1e:44:a8:17:ee:be:28:fd:47:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Mar 13 10:01:08 2026 GMT
Not After : Mar 14 10:01:08 2026 GMT
Subject: CN=4c5cebfcc56e8757eaee3e9a82f995ace8eddb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:db:2b:58:6a:ad:14:54:67:69:69:9d:53:33:
59:5a:35:d7:84:c4:88:3f:cb:a1:93:fd:a2:f0:7b:
b3:85:f0:e0:8d:ce:d2:2d:d8:0a:c1:5f:e8:67:9b:
d8:29:5f:98:cf:85:70:fb:80:35:d0:0f:6f:fc:db:
78:51:52:2e:82:f0:34:a1:8c:85:cd:1a:00:20:8a:
02:84:fa:70:00:46:6a:57:d0:60:e1:27:46:e7:c9:
9c:de:c5:f9:0e:05:67:b3:32:07:2e:fa:22:df:ec:
d0:65:aa:fa:2b:fc:bc:65:57:46:96:18:03:06:b2:
f6:be:5a:16:77:9b:19:50:6d:01:8b:51:c4:58:5b:
69:f4:be:cb:ca:bc:db:9a:f5:aa:41:e2:5e:07:21:
15:16:cb:c7:1a:6e:83:55:03:a1:94:fb:e0:76:3d:
9c:26:7d:f1:0b:c6:c9:0c:f2:16:2f:f9:1f:77:a1:
92:70:42:93:6c:76:e1:2d:aa:9a:15:69:1d:16:03:
a5:a7:d7:f3:69:40:90:13:0e:08:81:f4:74:56:38:
9a:d5:89:e9:89:b1:46:0b:af:83:8a:af:ec:d5:79:
21:78:b7:8e:0e:cd:f0:0b:93:6c:27:fc:ee:72:46:
3d:e5:ae:92:cf:06:0b:ce:a1:15:5c:d3:36:25:0c:
4c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5C:EB:FC:C5:6E:87:57:EA:EE:3E:9A:82:F9:95:AC:E8:ED:DB:71
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:03:45:0a:38:b3:18:e0:e9:29:65:44:09:34:aa:2d:55:02:
82:48:0a:de:25:39:00:b8:d6:eb:e9:82:0a:22:e0:aa:50:ea:
ff:ca:78:4c:4c:8b:35:d0:d2:40:7a:42:00:a0:8f:2e:4c:df:
08:b5:a8:a7:72:67:8d:43:e6:2c:c1:a8:98:e9:8a:95:ad:ef:
e2:a8:2c:bb:b5:16:a6:a2:fe:1a:00:21:9f:e9:8a:3c:9f:ed:
f7:d0:19:e5:5c:fb:3a:7d:5a:e6:37:e8:67:84:ea:24:12:2d:
dd:92:cf:e4:b2:bc:8c:7a:90:53:b3:36:38:46:ca:eb:b3:b6:
58:97:c1:c8:96:0f:50:dd:df:9c:30:10:51:c5:7b:1d:bf:b0:
37:55:8f:20:6c:34:44:d9:e2:dd:9f:15:da:35:27:9b:cf:d6:
de:c2:8d:b6:c5:a7:ff:b9:1f:3e:40:eb:99:d9:62:e9:4c:e4:
67:18:9c:db:73:65:d8:ec:c2:7d:13:70:ce:bb:aa:e8:14:83:
fc:61:04:e1:c3:a0:a0:45:70:e3:7f:64:5b:90:76:25:31:4f:
80:79:cb:c3:c9:0a:29:22:2c:2a:b0:b2:57:f0:d7:e9:b6:5c:
d6:33:9e:4a:8b:96:6e:b0:23:de:a6:d1:73:75:8c:a7:f0:6e:
ea:2b:13:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:09:15 2026 by rpki-client