Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
File: looX4WGWu3qGcY5rK9agfje0DGU.mft (raw, json)
Hash identifier: vH8ql1pV6+pLo1fPERr7CxRHadvkOWVTrmQg9HoS90k=
Subject key identifier: E4:64:9C:C9:19:B4:4C:B5:C7:8B:79:63:AC:16:07:26:08:B9:2E:C6
Authority key identifier: 96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
Certificate issuer: /CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Certificate serial: 019E2B82DC0FB9B6BC86AD14B8B79ADAE2F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
Manifest number: 190B
Signing time: Fri 15 May 2026 12:00:56 +0000
Manifest this update: Fri 15 May 2026 12:00:56 +0000
Manifest next update: Sat 16 May 2026 12:00:56 +0000
Files and hashes: 1: gXHddRiNrKN7zjSp-aiQxBvxK2Q.roa (hash: zkwsVo06oDWwHRS+sP6oB04zQIFU4FpZFrl3lEY5wwg=)
2: looX4WGWu3qGcY5rK9agfje0DGU.crl (hash: PAZRtVRr8jji98n5aKOkyjor/N0K5ZnKQZmjJtEASdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:82:dc:0f:b9:b6:bc:86:ad:14:b8:b7:9a:da:e2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Validity
Not Before: May 15 12:00:56 2026 GMT
Not After : May 16 12:00:56 2026 GMT
Subject: CN=e4649cc919b44cb5c78b7963ac16072608b92ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:98:5b:de:fb:8e:cb:da:ef:3e:2f:e7:43:
ff:58:f2:ca:0c:93:a3:53:79:a9:8b:cc:30:ed:eb:
dd:ab:6f:62:b1:b6:60:0b:6f:e9:2a:80:92:be:c4:
7f:37:53:7e:88:79:d1:4a:b6:fd:3f:19:39:d0:70:
43:16:57:b4:8d:d2:ba:ad:8a:df:f2:08:3f:fa:a0:
8f:cc:26:91:c6:16:19:00:f4:c2:8a:42:41:93:42:
bb:59:5c:76:f8:4f:a0:95:46:85:05:6a:2d:bb:2e:
61:81:ab:bb:47:5a:69:76:54:e9:a7:20:33:c4:ed:
e2:0e:aa:0c:c2:54:2b:2e:67:e7:dd:42:1d:03:c6:
43:94:91:c4:f3:0a:4d:0c:72:01:35:28:67:4f:12:
1f:be:d1:77:89:d6:f6:4b:36:c3:59:6b:88:07:68:
a2:a7:12:9b:e0:a1:a3:d7:09:40:e8:ea:44:37:c9:
3f:26:62:e8:c1:06:a1:5b:e6:12:cc:98:ee:fc:d1:
03:5f:a7:07:2a:51:09:df:1c:10:0f:a6:a5:69:8d:
c7:b2:04:e0:46:22:a2:ce:fa:36:2c:9e:b4:ae:8c:
49:6a:ac:b0:20:04:76:06:72:37:85:30:01:61:d7:
bd:07:0d:3a:73:84:ea:e2:be:36:ef:32:9e:64:0e:
6d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:64:9C:C9:19:B4:4C:B5:C7:8B:79:63:AC:16:07:26:08:B9:2E:C6
X509v3 Authority Key Identifier:
keyid:96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:63:c3:eb:2f:56:a7:7c:91:04:1f:d9:46:5d:10:08:a0:0f:
6a:29:f7:38:14:46:5e:30:f4:ba:70:52:c5:b8:13:68:5d:34:
bb:de:85:77:1d:78:d7:b6:d3:59:7d:2b:78:42:56:95:1b:95:
03:35:8a:fa:27:58:eb:8a:4a:6a:f3:32:3f:10:b2:d2:b7:88:
27:d5:cb:49:0c:99:65:78:9e:f9:1d:44:d1:a5:3e:66:13:fe:
ee:56:0a:6e:a2:e2:c1:8c:70:4f:3e:bf:6a:66:0d:1e:2a:c4:
18:69:36:89:80:c9:81:ea:57:e7:d6:68:89:1c:fb:01:34:fc:
06:c4:92:7d:62:99:f1:82:67:9d:02:0c:3c:76:e7:be:03:1d:
2e:2c:59:6c:07:39:d7:f7:0d:d8:6b:2c:8c:5e:c6:98:8b:a5:
65:b9:5e:5c:df:36:d3:8f:96:96:f7:36:59:c4:d9:30:3a:83:
1d:87:2e:e9:45:45:28:d6:09:48:52:e7:6c:ee:b0:55:82:02:
a4:9d:0b:32:bd:48:ab:27:92:52:be:2b:af:86:e5:68:94:64:
09:66:c1:06:fd:40:8e:45:11:44:d5:e5:ee:51:5f:e4:16:c5:
c8:01:61:10:2b:ed:cf:a6:63:f4:c6:7a:e5:7a:ec:de:bb:d8:
55:b6:f1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:45:32 2026 by rpki-client