Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
File: LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json)
Hash identifier: 6BOJc8fbKM02QqAfNtptz/0sSYgVkYTvyp48FOA3FLU=
Subject key identifier: 1A:D2:ED:58:87:3B:3A:4E:AD:E7:97:90:52:CA:7F:DE:74:A1:D3:9E
Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
Certificate issuer: /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Certificate serial: 01A17D05663F7A44E94E753DE9160D425ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 11:01:08 +0000
Manifest this update: Tue 27 Oct 2026 11:01:08 +0000
Manifest next update: Wed 28 Oct 2026 11:01:08 +0000
Files and hashes: 1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: KizERiqSxPyJoiHlAOZa+Mse1HvOEenArbgQY4EHdU0=)
2: z82FEt3pcMufgW4WCxzJHceETKc.roa (hash: 5ZwxV3wn8Z4Xkli1EfsKloCex1LXSENEzKtm05iJtlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:66:3f:7a:44:e9:4e:75:3d:e9:16:0d:42:5e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Validity
Not Before: Oct 27 11:01:08 2026 GMT
Not After : Oct 28 11:01:08 2026 GMT
Subject: CN=1ad2ed58873b3a4eade7979052ca7fde74a1d39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:75:7a:d5:a9:f0:e3:91:e3:91:36:27:6d:
f1:ab:96:47:a4:24:aa:e1:3a:27:76:fe:f4:d2:1c:
4c:21:7e:c7:80:c1:6d:97:47:36:98:46:0e:32:a3:
9b:c0:7b:54:c8:7e:cd:95:80:54:93:cd:e6:2a:fc:
69:bc:f7:3b:b7:05:26:55:8f:ee:bf:fd:dc:fc:bb:
48:1c:f3:75:2a:1f:97:c2:99:ac:35:6a:ed:fc:e6:
d0:55:3d:82:fb:f0:a8:9d:e9:65:61:e7:a5:eb:67:
cc:3f:41:16:a3:e0:da:c7:65:d8:28:ff:b4:fd:64:
5e:0c:47:4e:7e:6a:ba:ff:4c:5e:97:30:df:cb:75:
27:2a:05:cd:10:1a:50:7b:ab:77:55:9f:12:23:1a:
30:c7:e7:72:eb:1c:12:cc:96:ee:35:67:ad:39:47:
75:26:f1:47:ab:84:11:f8:4f:63:88:be:77:92:c4:
13:eb:5c:7b:16:ad:fd:99:90:1e:81:a3:18:f8:01:
72:bb:c0:72:63:bf:d0:7c:94:5a:a6:b9:74:22:a5:
e0:5a:7b:cd:04:bc:33:72:42:ab:b1:ef:1c:24:ff:
ac:33:ab:9e:7d:9d:ea:60:08:9f:c1:77:ba:3d:61:
7e:ba:72:1d:d3:87:3d:a9:fb:4a:93:06:8e:68:40:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D2:ED:58:87:3B:3A:4E:AD:E7:97:90:52:CA:7F:DE:74:A1:D3:9E
X509v3 Authority Key Identifier:
keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:dd:71:16:36:a9:5f:23:ed:13:92:6d:47:2a:99:28:85:98:
0a:e7:df:2c:bf:88:2d:4a:28:d6:fa:bc:f6:69:59:49:2f:ec:
ea:3f:1e:bf:5b:1b:9a:22:3b:3e:c8:f7:42:64:a7:32:5d:62:
4f:8f:a6:1c:6a:4d:69:b6:fe:75:3d:19:17:b8:2f:60:12:f0:
75:59:f5:0f:19:0d:04:5d:36:4f:3c:55:9a:73:cf:ab:c0:c3:
4a:b9:18:18:5c:d8:38:ee:fa:a7:7d:0e:2c:87:e8:09:e3:d6:
39:9c:61:d7:46:77:74:53:0f:74:97:22:73:a3:cb:02:dd:ca:
de:d3:69:9a:c8:07:81:37:2a:29:eb:c3:7a:b4:8a:6c:10:a9:
b5:53:d7:e0:ad:20:83:3e:db:17:b5:49:82:50:f4:14:bc:2b:
ad:6a:07:78:99:da:ba:a1:e4:41:50:14:13:38:af:cd:f6:5e:
06:9e:71:b8:1c:ea:08:bb:d7:9a:2c:4e:71:bf:2e:07:26:32:
a8:ff:11:3d:fb:5c:36:18:ea:9d:12:9f:50:5e:f1:79:50:90:
31:85:84:ba:17:7f:e2:94:7e:4b:de:f5:20:21:7a:37:ee:94:
ac:42:4a:99:85:8b:bb:51:b9:1f:7d:4a:22:21:cc:5c:9a:02:
6e:d3:56:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:40:59 2026 by rpki-client