Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
File: looX4WGWu3qGcY5rK9agfje0DGU.mft (raw, json)
Hash identifier: Xl1DPpeli3wU/vLsZc98UEoDtdSn0YObmOJOpNmZHiE=
Subject key identifier: 5F:14:D5:EC:80:5F:03:DC:38:2F:10:4E:B8:C4:62:53:EC:D9:51:FB
Authority key identifier: 96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
Certificate issuer: /CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Certificate serial: 01A026FCD0964B242C1A55A178586162C11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
Manifest number: 1A13
Signing time: Sat 22 Aug 2026 01:01:37 +0000
Manifest this update: Sat 22 Aug 2026 01:01:37 +0000
Manifest next update: Sun 23 Aug 2026 01:01:37 +0000
Files and hashes: 1: 1-fbqUSS1kPwLmHgUc948G9nLk74.roa (hash: 6NIeRWpjtcmAve+ttAm4K5c+uV1/s3aliAY3xDkkj3A=)
2: gXHddRiNrKN7zjSp-aiQxBvxK2Q.roa (hash: zkwsVo06oDWwHRS+sP6oB04zQIFU4FpZFrl3lEY5wwg=)
3: looX4WGWu3qGcY5rK9agfje0DGU.crl (hash: D+BNckGQ02qHB6uQ2GiQZtLL7e5ktm2P16oxIrhBIgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:fc:d0:96:4b:24:2c:1a:55:a1:78:58:61:62:c1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Validity
Not Before: Aug 22 01:01:37 2026 GMT
Not After : Aug 23 01:01:37 2026 GMT
Subject: CN=5f14d5ec805f03dc382f104eb8c46253ecd951fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:ed:8b:22:5d:ac:44:47:38:72:6f:c5:58:
bf:fe:62:4f:e1:40:4e:30:15:e3:65:ee:12:a2:53:
01:9c:b4:56:ac:92:65:0b:4e:e0:cf:ad:66:0e:9a:
f1:cf:2b:96:95:72:4a:78:03:7c:c8:fc:ce:14:1d:
73:41:ce:f6:38:26:ee:f5:86:a8:f6:53:30:7e:3d:
f4:df:9e:0d:ba:ad:d0:76:6c:b1:6c:32:fb:be:b8:
e1:ce:6f:1c:7a:99:d7:d8:ab:95:bc:4e:8a:0e:4b:
16:24:ff:9b:79:31:41:e1:2a:ec:59:25:3e:29:93:
67:d3:43:fc:55:c8:89:d1:c7:d6:d3:6a:0d:26:48:
82:db:d7:09:be:fc:d2:cd:8b:81:c8:db:01:07:1b:
63:a9:34:f6:5d:a3:6f:aa:76:d2:cd:88:c1:a1:9a:
74:5f:33:0f:7e:b3:fb:c5:a9:34:14:5b:76:44:3d:
5b:39:5c:34:92:61:bb:d1:15:55:cd:4c:f1:f5:30:
a7:13:a2:fa:88:6f:91:de:04:26:78:a1:6d:c4:c1:
c1:fe:82:71:05:5b:05:31:8b:5b:47:71:b1:87:7d:
e4:8f:7e:30:3c:e0:90:43:23:cc:96:fa:0e:6b:6d:
2d:8d:4b:d1:26:90:80:44:11:21:23:62:45:54:2e:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:14:D5:EC:80:5F:03:DC:38:2F:10:4E:B8:C4:62:53:EC:D9:51:FB
X509v3 Authority Key Identifier:
keyid:96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1a:9d:d6:4c:f6:4e:a5:fd:fc:27:f9:ba:aa:32:3d:34:3d:
c5:a7:84:02:3c:fc:08:cc:53:0d:67:ef:22:c7:cb:18:87:f7:
5b:d5:de:41:54:70:cd:86:d7:04:19:70:78:b0:de:de:ab:12:
17:0c:c3:57:1b:64:42:24:ca:68:46:a9:27:d3:51:d6:25:8e:
89:22:e1:7c:95:d0:f1:cc:5f:b5:73:59:2a:b9:79:49:e6:3e:
1d:5f:3b:3a:68:9e:52:5e:5f:06:1f:da:65:6b:76:04:c8:83:
ae:ba:10:57:dc:41:ef:5c:b0:e8:a1:ba:70:6c:46:6a:7a:4f:
8c:a9:59:08:90:07:12:bc:de:c1:92:56:d1:9f:a6:ab:12:bd:
6e:da:95:8b:bc:c4:47:bf:a1:2a:a0:3b:cb:e4:ae:52:6f:8d:
0d:50:83:7b:08:99:cc:9e:e3:14:44:60:9a:d2:22:5f:97:30:
36:6d:ac:75:76:a2:35:e0:33:8e:03:f9:4c:20:91:ec:00:d3:
4c:b3:99:77:18:6c:bc:9c:23:9b:31:37:78:81:ce:f0:f4:ca:
58:f0:54:14:0a:e1:3e:62:20:31:7d:88:99:2d:ff:73:2f:9b:
4b:d5:c7:91:5a:fa:7c:2f:f3:6d:96:bc:10:e5:69:03:9e:74:
55:92:76:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAm/NCWSyQsGlWheFhhYsEbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OGExN2UxNjE5NmJiN2E4NjcxOGU2YjJiZDZhMDdlMzdi
NDBjNjUwHhcNMjYwODIyMDEwMTM3WhcNMjYwODIzMDEwMTM3WjAzMTEwLwYDVQQD
Eyg1ZjE0ZDVlYzgwNWYwM2RjMzgyZjEwNGViOGM0NjI1M2VjZDk1MWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTftiyJdrERHOHJvxVi//mJP4UBO
MBXjZe4SolMBnLRWrJJlC07gz61mDprxzyuWlXJKeAN8yPzOFB1zQc72OCbu9Yao
9lMwfj30354Nuq3QdmyxbDL7vrjhzm8cepnX2KuVvE6KDksWJP+beTFB4SrsWSU+
KZNn00P8VciJ0cfW02oNJkiC29cJvvzSzYuByNsBBxtjqTT2XaNvqnbSzYjBoZp0
XzMPfrP7xak0FFt2RD1bOVw0kmG70RVVzUzx9TCnE6L6iG+R3gQmeKFtxMHB/oJx
BVsFMYtbR3Gxh33kj34wPOCQQyPMlvoOa20tjUvRJpCARBEhI2JFVC4SDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8U1eyAXwPcOC8QTrjEYlPs2VH7MB8GA1UdIwQY
MBaAFJaKF+Fhlrt6hnGOayvWoH43tAxlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG9vWDRXR1d1M3FHY1k1cks5YWdmamUwREdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83Yzk3Y2YtMTk1Yy00ZmMxLTk1YTMt
NjM3ZmExNDY1NmRlLzEvbG9vWDRXR1d1M3FHY1k1cks5YWdmamUwREdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83Yzk3Y2YtMTk1Yy00ZmMxLTk1YTMtNjM3ZmExNDY1NmRl
LzEvbG9vWDRXR1d1M3FHY1k1cks5YWdmamUwREdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxqd1kz2
TqX9/Cf5uqoyPTQ9xaeEAjz8CMxTDWfvIsfLGIf3W9XeQVRwzYbXBBlweLDe3qsS
FwzDVxtkQiTKaEapJ9NR1iWOiSLhfJXQ8cxftXNZKrl5SeY+HV87OmieUl5fBh/a
ZWt2BMiDrroQV9xB71yw6KG6cGxGanpPjKlZCJAHErzewZJW0Z+mqxK9btqVi7zE
R7+hKqA7y+SuUm+NDVCDewiZzJ7jFERgmtIiX5cwNm2sdXaiNeAzjgP5TCCR7ADT
TLOZdxhsvJwjmzE3eIHO8PTKWPBUFArhPmIgMX2ImS3/cy+bS9XHkVr6fC/zbZa8
EOVpA550VZJ2Kg==
-----END CERTIFICATE-----
Generated at Sat Aug 22 10:39:20 2026 by rpki-client