Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: OJHEZr5MDrCaDXUhn/nHHB1llE067L7kTDotDyWOqXg=
Subject key identifier: F2:A4:87:F8:C7:12:10:47:F9:FB:3A:C9:39:24:D8:30:7C:E3:9E:69
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 01A0F1FA46DB1C8C40218C194AE7CB58D50B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 0A63
Signing time: Wed 30 Sep 2026 11:01:46 +0000
Manifest this update: Wed 30 Sep 2026 11:01:46 +0000
Manifest next update: Thu 01 Oct 2026 11:01:46 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: rbQQgzOViMqwpV4YFNKFS4YbYPVKMQ95Ds6uCkUPYi8=)
2: v2HU-O26_Ox_izyEAzWjTgSDSjA.roa (hash: oL/ObQcuILx3PCIrA6iIqY8GO/MJMz6xvPpy6djgBm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:fa:46:db:1c:8c:40:21:8c:19:4a:e7:cb:58:d5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Sep 30 11:01:46 2026 GMT
Not After : Oct 1 11:01:46 2026 GMT
Subject: CN=f2a487f8c7121047f9fb3ac93924d8307ce39e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:07:5e:64:63:01:e5:63:89:0e:33:a5:46:
74:90:0b:b9:17:1e:7d:64:3e:23:03:5e:e7:ad:36:
89:ba:a0:11:d6:67:1d:b0:68:6f:9b:92:62:c1:0f:
3d:04:78:e6:a9:ac:5c:d2:6b:5b:f5:e0:37:7a:dd:
18:dc:80:60:4b:0a:97:8f:5f:8f:03:a1:56:44:13:
2a:f0:b4:6d:74:75:34:77:40:5b:d9:46:27:42:63:
37:17:84:66:5d:88:5b:2e:a7:75:9b:d0:bd:e7:a3:
e3:a7:53:a8:db:a7:50:d0:f9:5f:75:90:7c:63:31:
e8:3a:2a:e0:38:47:f4:47:7e:3f:f9:62:6a:d9:37:
14:2d:0a:d7:4f:b0:17:8d:a7:9f:82:17:85:1a:40:
33:02:d9:8f:b0:8a:8c:d1:ac:d2:6f:bf:98:d9:7d:
04:bc:de:73:e9:30:f7:a4:fe:7d:85:85:dc:c4:0d:
eb:de:f7:f6:58:c0:2b:f6:03:cd:0e:d1:30:0e:90:
fc:f1:3d:79:8e:34:ac:5b:b3:ba:00:72:39:3d:65:
b0:0a:89:7e:97:92:a7:ca:1e:95:c1:5e:e8:d5:fe:
9d:b8:78:79:45:f8:8f:54:a6:c4:5f:80:43:38:f5:
f6:8e:95:60:22:4c:e4:94:8b:80:c2:dc:e2:ed:1b:
cb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A4:87:F8:C7:12:10:47:F9:FB:3A:C9:39:24:D8:30:7C:E3:9E:69
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e7:1e:ae:df:ec:4e:c3:28:83:34:d9:6c:5d:c7:25:93:2b:
82:45:9c:0d:be:a8:d3:d1:c9:b5:71:c8:06:ff:3d:ee:bf:eb:
91:24:d7:d1:cc:52:ae:15:28:99:b8:f6:ec:1f:97:66:f2:65:
05:d9:87:54:b3:62:2f:52:ad:31:aa:51:1a:2b:b7:f0:7b:4f:
09:85:8d:b7:95:06:d4:82:ba:cb:07:53:5b:e2:12:4b:88:38:
02:e9:15:05:d5:18:b2:0a:f7:7f:1c:97:07:e4:8d:ea:3a:f0:
40:4c:63:77:a0:7f:75:28:83:68:fa:95:84:3d:44:4e:61:7b:
ce:10:2e:78:a0:dc:47:7b:9c:1a:d1:f4:6b:9c:e5:98:5e:8e:
26:ba:24:12:77:e9:78:a8:15:24:6c:18:08:04:a3:0b:63:4e:
0e:4b:50:ec:44:b5:68:62:84:3b:de:cd:b4:57:99:96:ab:93:
5b:cd:a8:43:9d:0f:cb:ff:f5:24:69:65:39:07:84:aa:b0:2c:
3d:46:6e:3e:b0:bd:55:14:f0:49:06:48:8e:dd:d2:02:f5:97:
54:7a:92:79:0e:84:1c:40:62:e2:90:9c:5a:91:8c:56:37:9b:
a0:25:e6:1a:38:30:9d:b9:a2:7e:be:f4:72:08:4a:e2:38:73:
57:d5:e4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:52:56 2026 by rpki-client