Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
File: LOKZUFiz3prtI6Yff7e1t7GTmEo.mft (raw, json)
Hash identifier: l4yh+Myq2NSAHkaETeCy+THbkcVUM+r0l63QgAXfRB8=
Subject key identifier: B8:16:CE:DF:29:B6:9D:ED:44:33:30:15:0C:FD:A7:24:BC:86:24:A2
Authority key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
Certificate issuer: /CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Certificate serial: 01A089E73A89C5FBB0EA5A3908DE63202440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
Manifest number: 113E
Signing time: Thu 10 Sep 2026 06:00:27 +0000
Manifest this update: Thu 10 Sep 2026 06:00:27 +0000
Manifest next update: Fri 11 Sep 2026 06:00:27 +0000
Files and hashes: 1: LOKZUFiz3prtI6Yff7e1t7GTmEo.crl (hash: /5kh9bHUwonnonKo2qMSOBBIvrpF+GICfVkzp9cgWcA=)
2: ka7aLk420YTBj2lWDkHarAVtbD0.roa (hash: mbAETTjg/QXgcUSNvJYoLhzkdNjTzmiAhVEDDUMk/LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:3a:89:c5:fb:b0:ea:5a:39:08:de:63:20:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Validity
Not Before: Sep 10 06:00:27 2026 GMT
Not After : Sep 11 06:00:27 2026 GMT
Subject: CN=b816cedf29b69ded443330150cfda724bc8624a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:ae:d8:ad:7d:71:2f:21:82:ff:bb:3a:f7:
76:f5:39:d6:b7:02:91:e1:9a:30:c9:25:be:97:5d:
b4:a9:37:c4:7c:3d:a0:36:9a:11:a2:d2:08:eb:22:
53:73:ae:99:3d:55:a0:1f:22:7d:29:c2:bd:20:a8:
33:64:65:5d:f1:d4:58:fa:4c:ef:b1:c5:1b:42:9b:
68:fb:6e:59:66:5f:2f:b5:1a:1c:3a:2b:70:1a:db:
43:dd:8c:55:e0:e3:4d:d5:d1:10:c3:5b:76:b5:51:
ae:cb:71:2f:ab:ab:71:27:75:1c:eb:81:41:60:a1:
f3:7a:c8:e6:ee:0a:3f:42:d8:96:2d:c0:68:5f:10:
09:7e:e8:23:a8:60:0e:14:7c:24:e9:b4:86:54:f6:
6e:1b:a5:39:96:3e:45:62:c7:b3:19:f3:ec:86:7c:
0d:2d:d1:7b:06:40:f2:75:8a:f6:05:08:8d:cc:8c:
47:6c:22:07:a3:38:f6:cc:01:51:b5:67:d8:3a:50:
da:61:f9:c9:f5:34:de:b7:85:0e:61:a5:52:59:98:
1f:81:0e:fe:01:1e:98:3a:b6:3e:e8:d2:e2:b4:4b:
56:5f:58:af:25:86:8f:5d:2a:57:d5:55:5c:7c:3b:
39:00:a8:72:72:a3:e1:41:77:85:6b:f2:c7:77:0f:
84:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:16:CE:DF:29:B6:9D:ED:44:33:30:15:0C:FD:A7:24:BC:86:24:A2
X509v3 Authority Key Identifier:
keyid:2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:36:92:67:03:42:47:6a:41:6d:3e:86:2e:a4:8f:e4:93:21:
45:94:bf:7a:71:29:5a:89:71:81:14:c1:cd:42:ed:3c:15:a4:
5f:28:8a:3a:d6:58:85:2a:b8:ff:af:d2:36:f6:27:82:28:3f:
ea:a5:a2:ec:e4:6a:8d:b3:86:fa:8a:c8:ff:d7:b8:0a:2e:3b:
a2:46:0b:38:61:fb:de:46:be:18:cf:d8:a7:3d:ed:af:99:4b:
40:d7:3a:cc:c1:93:a6:e0:1b:4d:3f:44:a2:10:44:a2:6b:3c:
9e:7f:f7:f6:2a:33:f0:37:30:59:8b:fd:10:aa:00:b8:91:69:
f9:3e:33:31:de:07:36:0c:70:ed:2d:60:5a:af:1b:c6:d0:51:
dd:d2:02:4e:1a:e6:e1:7d:5f:28:f3:70:8f:36:49:80:6c:b0:
31:b0:a9:46:71:30:6e:f3:78:94:cb:1c:9a:12:97:60:16:4e:
74:13:ee:4a:65:b1:07:b4:de:48:d1:da:ce:d2:0e:42:a3:db:
5c:a1:f2:a6:12:c9:68:f3:48:da:3a:75:a2:77:f0:45:8b:10:
8b:aa:50:f9:72:e5:bb:71:b4:87:0f:bd:36:0e:09:7d:90:da:
83:8c:86:87:97:25:ae:38:26:f8:e2:45:f1:6f:1c:f2:2d:a7:
45:41:da:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:45:46 2026 by rpki-client