Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
File: LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json)
Hash identifier: l3n4cztNBxT8Q/dAKUnsjvymF4zhORaJVfvQVkrC4H0=
Subject key identifier: E9:78:AE:7C:D6:1F:FF:2B:AE:DC:7F:85:B2:70:5D:80:DA:63:D5:84
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial: 019EE10BCED7A8F8B78F34F2F335430154C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
Manifest number: 17BA
Signing time: Fri 19 Jun 2026 18:01:47 +0000
Manifest this update: Fri 19 Jun 2026 18:01:47 +0000
Manifest next update: Sat 20 Jun 2026 18:01:47 +0000
Files and hashes: 1: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: QncLbaS5J0kr5BNXq0RiNkQ1jxaGNKRwjF85IDfjBL4=)
2: s7VJoHD0hBpVP0JfW2MgMdyr8Y0.roa (hash: 3dNcn5nfQCOn3nOuz9gztwsMAWS61sZQeaI9Kk8/SgM=)
3: y4V7z4zgAZ-xkRHwN15WVILbdEA.roa (hash: 9JMbptZqg78oPgN1kW4Etd7vu4uHSobcSaTHaJbvEiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 18:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:0b:ce:d7:a8:f8:b7:8f:34:f2:f3:35:43:01:54:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
Validity
Not Before: Jun 19 18:01:47 2026 GMT
Not After : Jun 20 18:01:47 2026 GMT
Subject: CN=e978ae7cd61fff2baedc7f85b2705d80da63d584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:47:7b:e6:31:5d:44:61:84:e0:6e:4f:48:
59:7c:cc:cb:57:1a:75:2b:a2:8a:d9:1b:71:5b:db:
94:62:ef:9b:ec:82:26:23:1b:77:d8:b4:a1:7b:ec:
dc:14:22:65:17:79:21:a4:18:37:00:c4:ed:3d:e0:
c8:7a:80:05:b5:42:e5:b6:fb:e3:f9:74:55:45:31:
33:2c:a4:36:54:19:cf:f2:ce:8e:d7:de:5f:5d:3c:
7d:99:b4:48:73:08:d4:ef:07:4b:0e:9e:bf:a6:93:
f9:3c:bf:c9:5e:1b:a4:23:6c:40:aa:ce:8d:d7:4a:
fa:e4:eb:51:69:cd:a9:1e:c3:fa:37:3c:cf:bf:e0:
32:f2:d9:39:bb:78:6e:85:49:f1:f5:6c:85:d1:12:
55:5a:0f:be:c4:d3:bf:96:3b:b1:cb:48:82:bf:b0:
7b:f7:9c:38:b5:ec:67:bb:1a:8b:63:11:d5:7e:57:
a1:c0:fa:74:21:67:9e:74:c1:7b:03:ae:e8:0e:dc:
a0:56:c4:4c:f6:b6:d7:2a:68:88:eb:b9:ae:1a:24:
06:9d:f6:c8:6b:11:fe:67:5a:f2:68:f3:28:b0:ab:
a0:2e:04:f1:95:9c:9c:f2:11:59:1f:1d:ec:15:cc:
bf:5b:c0:25:7b:38:90:e7:9d:8c:5f:22:98:db:da:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:78:AE:7C:D6:1F:FF:2B:AE:DC:7F:85:B2:70:5D:80:DA:63:D5:84
X509v3 Authority Key Identifier:
keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:35:c4:ea:50:31:d2:52:03:55:54:12:d6:84:35:a1:2d:5d:
c3:53:cf:d3:af:ac:b6:f3:62:7f:6e:91:64:75:2e:7c:78:e0:
79:5a:56:02:4a:6c:91:6d:c5:e7:2b:c4:3e:88:fb:c7:7c:3e:
6c:27:a1:01:cc:b7:b6:91:8c:64:bb:06:fa:9f:af:53:0e:45:
44:15:2d:01:06:70:6d:27:31:de:5f:ef:ed:89:5a:1b:ae:86:
8c:b4:5c:fd:e0:57:70:7f:bf:8c:8a:5b:e5:d0:16:ce:4b:bb:
e2:e3:01:32:fe:15:b4:40:22:b0:a0:14:56:5d:68:14:b8:7f:
ea:93:af:68:e5:6f:f3:f1:1d:5f:b5:73:66:bc:13:2c:da:2e:
1a:7a:2d:94:22:3b:19:15:24:0a:54:1c:2a:00:bd:6d:6b:d5:
fa:ac:1b:27:40:96:2b:88:62:49:aa:23:e0:60:92:e0:b6:12:
79:73:09:c4:95:11:74:1e:5e:2a:f1:a6:34:df:6a:a5:69:d1:
85:0b:00:7f:d1:75:5a:c3:8e:44:f4:b9:00:a8:fb:46:9f:8d:
90:7b:86:a5:58:59:7a:f4:af:16:86:37:37:ca:5d:d1:24:93:
d8:8a:b5:9d:2e:cf:96:ce:c0:3e:6e:df:d6:f1:aa:da:e8:85:
bd:02:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:02:15 2026 by rpki-client