Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
File: LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json)
Hash identifier: uIqQIFUGAIwsJseC9NRkaKWID/Im0mNPbXex5TIYQpc=
Subject key identifier: CD:6F:A1:83:40:7E:EC:C6:76:2F:40:5E:AD:D3:A7:17:D0:DB:30:75
Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
Certificate issuer: /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Certificate serial: 01A08B9ECF9DC7FC8C7EF538D7858E8FF36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 14:00:35 +0000
Manifest this update: Thu 10 Sep 2026 14:00:35 +0000
Manifest next update: Fri 11 Sep 2026 14:00:35 +0000
Files and hashes: 1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: H4BFox04X8gU2KYC9vwhYw+Uh8UXGiIBnAaXO/J5+Tc=)
2: z82FEt3pcMufgW4WCxzJHceETKc.roa (hash: 5ZwxV3wn8Z4Xkli1EfsKloCex1LXSENEzKtm05iJtlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:cf:9d:c7:fc:8c:7e:f5:38:d7:85:8e:8f:f3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Validity
Not Before: Sep 10 14:00:35 2026 GMT
Not After : Sep 11 14:00:35 2026 GMT
Subject: CN=cd6fa183407eecc6762f405eadd3a717d0db3075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:04:a8:85:cc:1c:8c:cf:98:2d:65:3d:b3:
49:ca:60:66:95:9b:5a:be:bf:e6:86:c3:26:0a:c4:
85:98:cb:2c:45:fa:07:54:52:7f:e3:c7:d4:18:a7:
bc:fc:a0:2c:fe:8d:10:7f:d9:60:39:23:90:b2:18:
12:80:e5:c0:65:ec:ca:b2:0e:8a:d2:5c:38:48:cf:
f2:28:db:04:f4:a9:fc:53:5b:13:d4:9a:22:37:3f:
d7:25:3c:c7:aa:09:4f:58:0f:b7:41:ab:41:99:9c:
53:92:d0:36:22:33:fa:72:7a:70:af:59:2f:ff:ba:
0a:dd:eb:0b:b8:44:6b:de:84:0c:8c:c5:0e:c0:f4:
94:31:0f:e3:09:59:c7:93:48:f1:06:dc:78:d1:59:
f2:b3:25:71:84:24:d6:1a:04:4b:b0:00:0d:de:c0:
e3:e3:ee:38:0c:b4:07:d4:84:6a:a3:93:f8:3a:f9:
54:86:20:a3:8e:fb:fa:d6:45:50:b8:e0:d5:44:e9:
56:df:60:89:75:cc:3c:30:2f:5c:92:3c:e8:4a:c4:
02:b0:f2:9c:c0:e2:c9:63:2c:b2:1c:b6:9e:04:5b:
f1:bf:6b:fd:a9:c3:4d:03:c2:65:af:bd:2d:27:56:
39:14:c2:8e:fe:82:ae:ce:b1:0d:00:0f:1a:93:cc:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6F:A1:83:40:7E:EC:C6:76:2F:40:5E:AD:D3:A7:17:D0:DB:30:75
X509v3 Authority Key Identifier:
keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:72:89:ef:88:8e:59:0e:a3:bc:ea:0c:de:8a:62:57:a7:da:
7d:cb:c5:49:64:9f:63:b2:c7:09:fa:09:ac:7e:91:d4:d7:12:
89:23:57:f7:7b:93:ce:0e:d9:dc:da:3b:8d:61:dc:0e:17:ad:
71:93:44:09:03:77:81:bf:95:9b:50:8a:8d:32:c4:89:67:dc:
73:f9:da:e8:e6:20:f2:77:00:93:93:ed:ff:bc:6e:88:26:2b:
f1:3d:fe:8a:4b:f9:c5:a3:3c:23:53:38:f3:b0:19:b1:f3:5c:
5f:cb:8a:c9:bb:d9:48:75:00:d0:c5:b8:fc:d5:5f:a9:d7:e8:
c2:ce:67:b8:ee:2b:75:ac:e1:87:e1:bc:a6:1f:33:aa:c7:27:
74:8e:6c:ba:d9:27:31:55:5a:a4:3e:db:02:f9:47:23:c5:19:
a3:ef:00:c7:fa:83:4b:57:81:6d:75:70:59:f9:c3:5c:c5:c2:
9c:a6:27:b4:28:64:cd:7c:3e:0b:5b:c4:c5:9d:ee:5c:f5:10:
74:dd:25:5a:b4:28:a3:e9:d6:29:b0:95:5c:ca:fa:77:0d:3b:
d9:c2:85:66:8c:b0:f6:e2:14:90:57:9b:88:30:9c:b6:a2:bd:
1f:8a:85:ce:27:fe:c0:73:6a:74:34:63:e6:f6:7d:2d:f5:be:
8e:25:5a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:34:16 2026 by rpki-client