Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: d2N9YbPiAcDZBUUsR0cMa4V7pEvIpz/mb46zwW3p0YE=
Subject key identifier: 20:91:FA:8F:30:20:C6:4B:A5:93:48:12:E2:1C:AF:DE:20:07:75:13
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 019FA2CF0BE64DD5A2D87F5F5F8991E9777B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 08E5
Signing time: Mon 27 Jul 2026 09:01:45 +0000
Manifest this update: Mon 27 Jul 2026 09:01:45 +0000
Manifest next update: Tue 28 Jul 2026 09:01:45 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: ckhfAT9LzwG2Y/G6AQC7i1XhrA3pS5uwPHcIxLJYc8Y=)
2: no40MMxKtGazjrQJuK_hKTX_kQ4.roa (hash: ZQzvJpr6epq0Aai6epv/lFRS0bDsbahhA2A50WGodXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cf:0b:e6:4d:d5:a2:d8:7f:5f:5f:89:91:e9:77:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Jul 27 09:01:45 2026 GMT
Not After : Jul 28 09:01:45 2026 GMT
Subject: CN=2091fa8f3020c64ba5934812e21cafde20077513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:8d:85:7b:94:83:bb:4c:53:f7:69:b1:18:
38:6d:7f:dc:97:4d:62:61:e6:42:56:a5:be:ea:5b:
ba:ae:c8:55:e3:67:c3:29:bc:e8:a6:25:fc:67:01:
ab:27:ed:20:39:03:8e:cb:67:e9:8f:3d:52:09:1a:
e7:04:72:a1:47:2c:0f:f5:40:62:bc:a1:b7:7b:67:
9c:ca:34:9b:82:cf:57:0f:98:13:76:86:01:cf:f1:
23:69:29:0d:7e:77:1e:bd:76:2b:7d:90:8f:04:17:
c9:a5:4b:33:de:76:b2:39:c0:dd:8f:00:7f:59:1e:
49:77:17:3d:a4:1b:bc:b4:f4:d3:e5:a6:18:11:0b:
1f:a7:0c:eb:6a:2a:24:12:5a:59:b7:09:6a:3b:4c:
81:98:3a:da:83:d9:e9:4d:25:40:79:67:20:10:28:
22:a3:47:96:49:06:90:31:3e:4f:50:52:71:b3:72:
d7:28:d3:e1:c5:46:65:e8:32:a6:95:2c:0b:e9:cc:
07:8b:17:f2:d9:02:bd:c3:a8:6c:94:19:12:8b:df:
66:a9:3a:5b:03:57:98:fc:ec:0f:95:53:d8:5d:55:
14:e5:8a:f4:7f:da:11:1b:a8:8c:87:16:c6:66:9d:
83:b7:41:7a:d9:6c:06:d1:f3:73:29:e9:c6:2e:f7:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:91:FA:8F:30:20:C6:4B:A5:93:48:12:E2:1C:AF:DE:20:07:75:13
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0f:8d:6a:9c:3a:b4:f5:e9:c5:af:a7:e4:d5:07:2e:1c:37:
7d:cf:b9:8d:92:ab:6d:05:65:6d:9e:a4:0f:8e:80:31:25:b8:
b6:0c:6e:51:21:8f:8d:60:57:bb:39:2a:e1:06:e7:2c:fd:41:
49:00:fd:56:ea:a7:f0:c6:e8:64:a2:9d:d2:ce:f7:36:56:e3:
57:0e:89:ca:28:70:60:96:d1:1a:30:84:2d:03:67:f2:c4:34:
53:51:1e:a9:8b:3d:03:61:cf:50:3b:65:b2:0f:f6:73:7b:ea:
e0:f1:0e:5a:36:6d:5b:71:e6:7f:fa:bf:fa:97:20:ab:71:b7:
73:0e:43:29:6f:80:53:cd:1b:30:de:eb:e6:31:aa:e3:1d:68:
33:59:b1:ee:b8:24:c6:4a:7e:0f:1d:bf:50:39:1b:16:1d:5f:
ec:4f:71:87:d4:0b:c2:6c:f0:5c:44:8c:ef:9e:d3:bf:94:ec:
44:11:85:15:db:90:c0:2b:7e:91:4f:80:ba:07:30:b3:b6:81:
2d:ad:b2:e1:77:cb:61:d8:71:dd:63:dc:1f:b3:f1:9b:0f:e9:
ab:c7:37:a2:cd:78:88:ed:8d:63:7c:18:de:b9:bd:84:0e:72:
4b:e4:e2:8b:aa:39:79:f1:73:03:97:49:17:f7:03:f6:06:60:
5e:4e:1c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:18:36 2026 by rpki-client