Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
File: LOKZUFiz3prtI6Yff7e1t7GTmEo.mft (raw, json)
Hash identifier: aSr93cYI28eK4EMBarmFnYGCwi/O/X2b7P66J60Vvwk=
Subject key identifier: CF:C3:0E:32:8A:98:F7:7C:6D:39:C1:6E:AD:9E:26:6D:13:AA:C8:F6
Authority key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
Certificate issuer: /CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Certificate serial: 019D382DCC7D1035927C13FCEAB9E401A302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
Manifest number: 0F86
Signing time: Sun 29 Mar 2026 06:00:18 +0000
Manifest this update: Sun 29 Mar 2026 06:00:18 +0000
Manifest next update: Mon 30 Mar 2026 06:00:18 +0000
Files and hashes: 1: LOKZUFiz3prtI6Yff7e1t7GTmEo.crl (hash: cHbQBSVAPw1oXf1g6XzNcgEJ19i2uGO3dM5/VHHoUKo=)
2: ka7aLk420YTBj2lWDkHarAVtbD0.roa (hash: mbAETTjg/QXgcUSNvJYoLhzkdNjTzmiAhVEDDUMk/LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:cc:7d:10:35:92:7c:13:fc:ea:b9:e4:01:a3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Validity
Not Before: Mar 29 06:00:18 2026 GMT
Not After : Mar 30 06:00:18 2026 GMT
Subject: CN=cfc30e328a98f77c6d39c16ead9e266d13aac8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:36:f3:ea:c4:52:b9:14:e5:93:be:46:6e:
a9:0e:00:15:50:3e:92:86:ea:dd:46:ec:03:22:bd:
b8:3a:10:e2:a8:d5:4a:a8:fd:67:7f:e2:1d:f0:12:
0c:55:c5:bb:3b:1a:fa:81:d0:54:78:8a:b8:f8:a7:
ee:53:ff:63:9e:f9:64:90:b8:03:0a:10:32:40:e7:
87:13:93:8d:28:e3:48:eb:34:59:f5:50:5e:f9:cd:
ba:fb:6e:23:b4:03:38:5d:a1:8e:17:af:c0:da:8e:
b7:3d:44:d5:1f:ad:ea:d6:07:98:58:d6:28:ca:db:
b1:94:39:18:6f:cb:65:55:7c:39:b5:09:47:5d:d3:
92:b3:70:82:93:6f:db:47:be:74:b5:c2:2f:e7:2f:
ec:7c:49:72:16:b8:73:55:a2:4d:f3:02:e3:6d:cb:
f0:de:87:45:a1:1a:15:17:f6:7f:c8:c5:7f:44:39:
01:20:4e:b6:63:8f:6b:64:07:cc:92:6a:d6:2f:3b:
81:13:98:b2:90:90:43:b5:b4:aa:d2:d5:ea:ce:91:
3c:37:5e:5d:77:15:e8:73:4c:e4:1c:07:96:74:2a:
5e:cd:23:ed:ea:2d:74:00:82:77:27:5d:ca:d9:c2:
3c:b8:9d:de:41:ed:91:11:65:36:37:b9:6c:e6:ac:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C3:0E:32:8A:98:F7:7C:6D:39:C1:6E:AD:9E:26:6D:13:AA:C8:F6
X509v3 Authority Key Identifier:
keyid:2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a4:8e:63:e3:b0:4e:5e:25:8c:14:43:c8:c6:80:8f:10:32:
f0:cd:1f:5c:b9:1d:14:5c:59:ba:28:ae:a0:bb:04:c9:57:75:
2e:33:73:e9:5c:02:9e:70:83:5d:38:1c:b1:71:df:c8:2a:8d:
d3:71:7a:5d:ae:05:fc:5a:bc:fa:b0:54:f6:6f:69:e2:e5:72:
8e:9d:67:d7:72:fb:c8:3d:be:90:21:7d:bb:b9:9c:46:0c:94:
c9:65:9b:27:10:6b:49:77:f8:b6:13:be:87:ee:ab:16:bc:12:
71:88:7b:83:d9:76:cc:64:04:06:af:e3:6f:1b:96:a9:6a:ad:
20:76:cb:8b:58:21:79:dc:57:19:5f:82:bf:6f:1f:4c:df:19:
05:99:f8:3d:09:6e:b8:f5:b5:cb:d8:11:76:c2:ad:f7:f6:17:
e4:4e:73:88:9d:b2:24:d7:f3:e4:52:df:e2:0a:5b:d6:e6:eb:
83:48:9d:58:84:8d:3a:86:df:19:45:81:f3:14:b7:8c:be:ff:
32:4a:8e:79:ae:0a:ae:dc:e1:17:49:4a:e7:ac:36:7b:dd:4d:
62:94:24:d9:f8:22:da:6f:03:f8:92:3d:41:e3:a0:2d:13:dd:
1c:93:19:af:48:3b:ef:be:73:5c:f4:8a:4f:25:f2:e4:d8:4a:
25:64:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:37 2026 by rpki-client