Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json)
Hash identifier: G5q1IcLPgzWA1iujyZGUiHMVl3guJwMgzl8l2ZHyuJs=
Subject key identifier: 11:3C:1E:07:52:90:69:21:BC:CB:D4:FB:CC:3E:75:F0:2B:28:A8:AF
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 019D382E0208578982560EC71B58C0F6303A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
Manifest number: 0F84
Signing time: Sun 29 Mar 2026 06:00:32 +0000
Manifest this update: Sun 29 Mar 2026 06:00:32 +0000
Manifest next update: Mon 30 Mar 2026 06:00:32 +0000
Files and hashes: 1: Qtqqzn9yRNvrI3RXEfT5VayjgJI.roa (hash: lOFGAsrm5iHQNlLgX36AU9zrlOWulEYrqP1lI6ectMM=)
2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: VaatF3Dk7KgP4E/jhRAjh7wCMkcJ3063EdSgivy8HbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:02:08:57:89:82:56:0e:c7:1b:58:c0:f6:30:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Mar 29 06:00:32 2026 GMT
Not After : Mar 30 06:00:32 2026 GMT
Subject: CN=113c1e0752906921bccbd4fbcc3e75f02b28a8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:57:62:ea:cb:8d:8d:34:54:27:b6:5f:9b:
6f:e9:24:86:37:0a:53:38:33:a4:bf:c6:95:ba:a1:
1f:e0:97:25:2d:2a:91:f5:aa:38:07:fd:dd:0a:d3:
b3:6c:33:56:27:68:a4:b9:b9:ac:94:8d:07:2d:12:
cb:fa:b0:57:9d:e0:a5:95:d7:5f:06:19:29:94:70:
81:a1:85:4a:b4:f7:3b:c9:75:07:6f:5e:1c:52:d2:
50:a2:8b:ab:32:34:b1:50:68:e9:11:f4:10:21:22:
10:e3:61:ac:50:89:8d:42:c8:a3:c9:40:78:1e:ed:
c2:71:2b:9d:7e:fc:b9:8d:bc:ce:5c:b9:c9:61:08:
8a:df:1b:aa:5a:77:51:75:1b:80:fa:5e:2c:fe:52:
6e:45:6f:54:2c:0b:35:f9:3e:a9:0d:14:2f:8e:6b:
52:bc:7d:a6:f8:34:79:52:a6:41:a6:97:e5:f4:7f:
05:37:20:ed:83:cc:b9:10:9d:14:52:11:79:58:2f:
14:43:14:8c:d6:95:df:69:17:10:dd:3e:18:f1:96:
b7:b6:62:56:db:83:8d:2c:ab:cf:a6:fd:11:83:28:
ab:4d:a9:dc:98:47:51:f9:7d:aa:8f:f2:27:92:0e:
ee:8b:98:8a:1a:57:aa:db:53:f3:5c:30:c5:a6:1e:
a3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3C:1E:07:52:90:69:21:BC:CB:D4:FB:CC:3E:75:F0:2B:28:A8:AF
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e6:a1:89:74:75:18:97:da:ce:60:7f:6f:8b:a4:56:d3:fb:
2a:8d:29:bb:24:69:69:5f:be:e0:d4:51:be:82:f1:5c:e2:a3:
3b:42:f1:64:21:73:d9:cd:52:46:86:23:7a:c8:31:7b:84:25:
ac:d8:c4:2d:6b:50:6b:8e:c2:fb:a5:3b:9d:2d:83:94:0d:74:
06:04:a0:14:3c:6a:9c:94:30:30:b8:c7:87:61:7c:2f:df:32:
80:32:0d:16:ac:cd:ce:04:93:83:fa:3d:9c:f3:c7:5b:52:1e:
4f:61:61:04:e5:11:1e:e6:f0:67:ce:b0:be:b9:18:ae:f8:4f:
1c:ed:e7:35:45:5b:68:6e:21:cf:42:0b:06:d9:48:e4:e6:53:
3c:ff:a4:69:a9:a1:e8:ba:d4:b0:31:68:93:2c:92:ff:36:d1:
46:0e:af:f2:39:40:6e:58:94:6a:d8:7b:23:68:f8:c9:0d:89:
2c:15:51:3d:58:63:a9:3d:d6:d3:09:34:88:7f:f4:19:7e:f8:
23:eb:b7:c6:43:d7:21:d6:2c:62:02:44:83:07:31:cd:74:19:
e6:30:98:0c:09:16:85:06:a6:fc:78:e1:87:2c:43:f6:32:9c:
60:83:aa:db:ed:55:46:05:71:e4:c5:52:1c:42:f3:58:0c:be:
32:61:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:40 2026 by rpki-client