Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: a0sSXWO7gyDnSN7/7CdBr45wtU5ZYMBCinAbfQk4dyQ=
Subject key identifier: D8:22:7C:77:DE:F2:61:CA:9C:BF:53:17:D3:B7:E6:69:57:1B:13:E6
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 019D38D2AB9B94982FCED1C0D9C8FD75698B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 07A5
Signing time: Sun 29 Mar 2026 09:00:23 +0000
Manifest this update: Sun 29 Mar 2026 09:00:23 +0000
Manifest next update: Mon 30 Mar 2026 09:00:23 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: FF4hEOLRtZsn/kzLCTgMvP8FS2yvTH/JEqvrT6wWtqA=)
2: no40MMxKtGazjrQJuK_hKTX_kQ4.roa (hash: ZQzvJpr6epq0Aai6epv/lFRS0bDsbahhA2A50WGodXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ab:9b:94:98:2f:ce:d1:c0:d9:c8:fd:75:69:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Mar 29 09:00:23 2026 GMT
Not After : Mar 30 09:00:23 2026 GMT
Subject: CN=d8227c77def261ca9cbf5317d3b7e669571b13e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:a8:f1:54:3d:67:91:55:ce:95:be:db:02:
d4:9b:a1:b2:fe:f2:90:1d:cf:16:f2:3d:21:73:f9:
8c:9b:90:c9:3b:49:aa:6f:8b:cf:39:e9:03:5c:16:
87:d0:f2:30:07:9c:b3:39:f8:95:74:7e:eb:75:3b:
62:7c:f2:59:ec:bd:b9:45:b0:43:ca:cc:d4:b0:27:
a7:d6:e9:be:0a:30:ef:18:ac:ac:31:05:a7:6a:f0:
8b:90:14:81:81:62:a7:4e:b6:a0:1d:fb:8a:ee:99:
00:db:7e:5b:79:16:8b:64:7a:77:b9:13:1a:f2:e1:
90:6f:0a:ea:b3:09:8f:0f:b2:fe:f5:63:ee:b8:6a:
68:07:db:08:66:7a:d3:be:1b:f4:82:cc:64:17:a1:
36:6c:50:ef:a1:a1:c5:ad:6a:2b:f1:89:b0:8c:64:
f2:64:73:71:55:08:cc:06:3b:c8:ea:24:19:aa:1a:
2d:9f:c2:5d:d5:d2:dc:19:43:80:0e:7f:90:87:4c:
d3:3e:7d:68:da:df:0a:56:72:b3:fc:59:5d:d3:17:
ea:00:ee:01:a4:32:20:67:dd:c2:47:c9:22:b7:62:
90:8f:d3:c5:ac:92:e4:a0:6f:cd:56:13:be:f2:f7:
76:09:98:71:35:03:8d:bf:7c:cc:84:e5:60:e3:ed:
41:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:22:7C:77:DE:F2:61:CA:9C:BF:53:17:D3:B7:E6:69:57:1B:13:E6
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:96:c4:72:14:69:4f:1c:45:04:23:c1:1e:13:6d:79:a3:a9:
58:1b:9f:b5:d6:47:b9:37:f1:3c:3d:c5:50:43:c9:c2:94:2e:
4d:76:bf:b1:c8:3d:46:9f:34:4b:31:5f:0f:87:fc:4d:12:77:
d8:fe:25:cc:a4:c0:d4:3f:29:a5:9b:ef:d9:80:4a:3d:8d:e0:
b4:a0:d2:14:ca:74:5b:10:07:da:60:ac:74:f1:ef:3a:57:ab:
09:af:75:58:62:57:b9:8f:b1:b5:f8:1d:87:b4:f9:93:3d:47:
d9:02:ff:d8:fd:8c:2e:25:21:9e:f9:3d:66:e2:b6:be:2c:68:
01:e2:3f:dd:8b:4e:b5:f0:38:49:2a:24:d3:07:a0:a5:f2:fd:
ec:41:2a:26:32:bb:b3:86:67:f5:62:9a:11:88:95:9a:b5:4e:
82:fe:8f:03:5b:33:b6:aa:5f:4f:e8:62:82:d8:17:96:2e:6e:
13:4e:01:12:04:a9:39:06:2c:a4:bc:19:75:9e:55:48:ca:76:
96:29:25:bd:9d:c3:89:37:52:fe:11:3b:f0:0a:4d:82:90:fa:
3a:40:d4:23:b8:f9:dc:ff:56:9f:a5:6c:92:58:48:ba:46:37:
76:97:d5:48:33:34:9c:9b:61:b9:90:a4:8b:ea:2a:21:50:87:
71:db:3c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:02 2026 by rpki-client