Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
File: LosErWkLczj3wP51zzs6eFabquU.mft (raw, json)
Hash identifier: yh1lUEDDkglaFk1DWg8AUwjtpTcOaQT/piPUzwAOgJs=
Subject key identifier: A2:76:86:9E:0E:C5:47:AC:8F:EC:0B:27:8B:48:82:FC:11:D4:8C:F8
Authority key identifier: 2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
Certificate issuer: /CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Certificate serial: 019D386687A6F8CA33C76F508F3B60133103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
Manifest number: 131D
Signing time: Sun 29 Mar 2026 07:02:16 +0000
Manifest this update: Sun 29 Mar 2026 07:02:16 +0000
Manifest next update: Mon 30 Mar 2026 07:02:16 +0000
Files and hashes: 1: LosErWkLczj3wP51zzs6eFabquU.crl (hash: qCIStH6eFUjR3XJOT2o6TkwrT/IB2OjWW0r3CQUJX8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:87:a6:f8:ca:33:c7:6f:50:8f:3b:60:13:31:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Validity
Not Before: Mar 29 07:02:16 2026 GMT
Not After : Mar 30 07:02:16 2026 GMT
Subject: CN=a276869e0ec547ac8fec0b278b4882fc11d48cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:6f:b4:88:f8:f1:ac:f9:04:c2:2c:d8:4e:
bd:5a:e3:63:a9:31:46:48:c3:3a:75:f2:c9:2a:3c:
af:57:d8:fd:ca:6f:d5:e8:30:be:e2:32:ba:22:cd:
65:d1:54:3b:d1:9e:6a:fb:b7:f0:3f:3b:6b:66:c3:
84:f0:eb:7c:30:d4:22:c2:74:30:e3:46:f5:8b:1c:
22:8a:d4:b3:20:79:8b:af:dd:da:27:16:df:8f:6f:
a8:2b:fa:a9:fc:b7:9c:ba:e5:de:5b:c2:c2:0c:eb:
7b:7a:1f:98:b6:97:c7:5e:fc:7f:86:5a:77:f9:73:
e1:9d:78:97:94:04:29:45:05:3d:26:5d:45:75:25:
c0:c8:03:5c:a3:b0:56:8a:01:90:4e:d5:4c:18:1a:
2a:fc:f8:c5:b2:92:8e:08:3c:97:2f:55:8e:e1:ed:
a7:a0:77:f0:0e:d4:f6:cb:f9:9a:15:74:6c:72:76:
27:74:ba:dc:59:df:f1:d0:70:fa:e3:69:9f:40:73:
21:c1:93:d3:32:72:e2:dd:e5:65:e1:0b:a2:1b:de:
52:dc:3e:05:d5:6e:33:bf:39:69:db:4e:07:ed:39:
68:45:f5:4a:bf:ac:d2:e5:57:5d:98:97:05:69:eb:
f8:7c:21:ee:80:c8:e6:67:d7:c1:ea:74:c1:cf:fc:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:76:86:9E:0E:C5:47:AC:8F:EC:0B:27:8B:48:82:FC:11:D4:8C:F8
X509v3 Authority Key Identifier:
keyid:2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:42:95:67:8d:72:13:1f:ba:29:5e:8c:c5:2f:43:c2:c8:55:
7b:51:d4:c4:90:59:b2:df:12:4f:22:f5:f9:59:4e:48:ab:0e:
a5:d1:41:47:ad:44:b5:15:2e:15:90:21:f5:0c:a8:62:d5:60:
2b:d4:31:e3:18:24:a6:c4:45:41:1b:f5:ea:97:4f:1b:bb:17:
32:ad:1e:9b:09:b5:a3:d1:26:0b:a5:42:0b:bf:63:e1:83:34:
2d:68:f7:f4:1a:26:6b:b9:91:7d:9f:f7:e8:bb:92:af:61:78:
6d:c4:1c:d3:81:10:ce:a3:cd:c8:af:02:55:49:cc:93:29:e2:
cf:37:0b:90:2f:4e:92:8f:19:67:47:8c:93:3c:73:b0:c0:89:
9b:6f:01:76:0f:eb:6c:64:5a:20:1d:5c:b3:1e:e2:98:ad:3f:
bb:d3:52:4f:30:b7:59:03:0b:bd:d7:69:da:ff:c1:cf:5f:5b:
11:ac:fc:1e:43:cf:c8:72:f0:88:3b:38:32:ae:88:20:0c:3a:
21:8a:49:5a:72:03:37:cf:14:9f:82:f2:a4:fc:6e:e0:c6:4f:
e3:27:d5:56:ba:ec:44:31:15:74:8d:89:5e:f5:72:05:62:16:
dd:e3:eb:ea:d7:ca:71:8c:63:0f:40:4c:8f:2a:85:bc:24:c2:
b2:e9:b8:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zoem+Mozx29QjztgEzEDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOGIwNGFkNjkwYjczMzhmN2MwZmU3NWNmM2IzYTc4NTY5
YmFhZTUwHhcNMjYwMzI5MDcwMjE2WhcNMjYwMzMwMDcwMjE2WjAzMTEwLwYDVQQD
EyhhMjc2ODY5ZTBlYzU0N2FjOGZlYzBiMjc4YjQ4ODJmYzExZDQ4Y2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnhvtIj48az5BMIs2E69WuNjqTFG
SMM6dfLJKjyvV9j9ym/V6DC+4jK6Is1l0VQ70Z5q+7fwPztrZsOE8Ot8MNQiwnQw
40b1ixwiitSzIHmLr93aJxbfj2+oK/qp/LecuuXeW8LCDOt7eh+YtpfHXvx/hlp3
+XPhnXiXlAQpRQU9Jl1FdSXAyANco7BWigGQTtVMGBoq/PjFspKOCDyXL1WO4e2n
oHfwDtT2y/maFXRscnYndLrcWd/x0HD642mfQHMhwZPTMnLi3eVl4QuiG95S3D4F
1W4zvzlp204H7TloRfVKv6zS5VddmJcFaev4fCHugMjmZ9fB6nTBz/zF1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJ2hp4OxUesj+wLJ4tIgvwR1Iz4MB8GA1UdIwQY
MBaAFC6LBK1pC3M498D+dc87OnhWm6rlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9zRXJXa0xjemozd1A1MXp6czZlRmFicXVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lNjdiMWItNGI2Zi00NTM1LTkzMTEt
NGI5MTg3ZDkxYzY2LzEvTG9zRXJXa0xjemozd1A1MXp6czZlRmFicXVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lNjdiMWItNGI2Zi00NTM1LTkzMTEtNGI5MTg3ZDkxYzY2
LzEvTG9zRXJXa0xjemozd1A1MXp6czZlRmFicXVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUKVZ41y
Ex+6KV6MxS9DwshVe1HUxJBZst8STyL1+VlOSKsOpdFBR61EtRUuFZAh9QyoYtVg
K9Qx4xgkpsRFQRv16pdPG7sXMq0emwm1o9EmC6VCC79j4YM0LWj39Boma7mRfZ/3
6LuSr2F4bcQc04EQzqPNyK8CVUnMkynizzcLkC9Oko8ZZ0eMkzxzsMCJm28Bdg/r
bGRaIB1csx7imK0/u9NSTzC3WQMLvddp2v/Bz19bEaz8HkPPyHLwiDs4Mq6IIAw6
IYpJWnIDN88Un4LypPxu4MZP4yfVVrrsRDEVdI2JXvVyBWIW3ePr6tfKcYxjD0BM
jyqFvCTCsum49Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:09 2026 by rpki-client