Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
File: LOlVOpsse8oStoG8CmMF4z-2QMg.mft (raw, json)
Hash identifier: XRevVzOwT46AoxvFac1Ct7tAD4bdb8xSF2CpgZoYxsg=
Subject key identifier: FA:F7:20:3F:50:39:70:1A:6F:D7:4A:A8:94:4F:F4:EE:FA:8E:1B:E1
Authority key identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
Certificate issuer: /CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Certificate serial: 019D37C05A262BE76FFC96AEBF62ABC3D92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
Manifest number: 100B
Signing time: Sun 29 Mar 2026 04:00:45 +0000
Manifest this update: Sun 29 Mar 2026 04:00:45 +0000
Manifest next update: Mon 30 Mar 2026 04:00:45 +0000
Files and hashes: 1: LOlVOpsse8oStoG8CmMF4z-2QMg.crl (hash: gi8cqzzA44jofwaNFX0Mqes9j7Bd+7Skux8Urnz2msE=)
2: e_3edax3nVApnXX6Ql-HaBUFYsk.roa (hash: plfv9lLAOWXkEtBe+nkrBg1kl1yDXbUCwGhl2Bs8lcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:5a:26:2b:e7:6f:fc:96:ae:bf:62:ab:c3:d9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Validity
Not Before: Mar 29 04:00:45 2026 GMT
Not After : Mar 30 04:00:45 2026 GMT
Subject: CN=faf7203f5039701a6fd74aa8944ff4eefa8e1be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:d9:dd:8f:19:02:4a:79:10:ab:94:fd:67:
dd:7a:20:29:dd:d6:c0:be:01:ae:77:17:36:0d:36:
3d:35:f1:39:b3:19:24:d8:ae:8e:fb:8d:26:54:4b:
3a:07:e4:02:58:6d:77:bf:1d:68:c8:e3:20:4a:73:
8d:42:50:19:00:4e:de:9e:e2:07:e8:b0:dc:04:23:
e7:e4:85:67:02:c0:69:d4:a9:3e:1f:9e:29:c6:10:
e4:88:e7:18:4a:64:fc:c5:bd:e7:f7:1e:49:62:7f:
fb:d0:d5:24:26:c9:5c:da:c6:46:7e:0f:6e:69:af:
45:f4:4d:92:b8:b9:39:7b:9a:dc:02:b2:5f:ab:36:
c8:df:d5:42:1a:37:47:2a:2d:40:c7:1b:ed:a9:8c:
89:c6:67:59:86:e9:28:de:74:a2:4f:e0:d5:e3:04:
0c:5b:39:b1:aa:4b:96:a6:ae:cf:51:56:9b:17:80:
ef:3b:10:39:1e:93:c0:28:6f:82:86:40:ff:d6:e4:
64:45:b3:60:4d:8d:99:34:3c:fc:25:b3:a2:c3:5c:
b6:e7:41:fb:80:c3:6a:dc:b8:de:c5:33:01:35:85:
c4:79:62:e8:c4:40:b4:8a:55:9c:08:c0:c1:f3:be:
21:f1:c4:07:f1:29:7c:07:0b:1f:4b:10:b9:eb:20:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F7:20:3F:50:39:70:1A:6F:D7:4A:A8:94:4F:F4:EE:FA:8E:1B:E1
X509v3 Authority Key Identifier:
keyid:2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:dc:36:13:29:45:9c:87:e3:8d:5c:2a:35:98:6a:27:65:44:
e1:93:07:cf:3c:59:ca:5d:f4:9d:2e:a7:17:2d:84:56:04:d9:
0c:d0:57:59:3a:13:f8:0f:16:5e:3b:f1:a4:f0:ce:44:93:b2:
29:9a:45:1a:b7:c6:5b:03:51:c7:12:9f:7e:61:24:51:bd:05:
7d:c8:5f:69:b7:63:ec:af:66:72:d6:8b:b3:0c:75:f5:bc:ad:
a7:68:c8:be:e5:1f:ed:27:c8:42:21:e3:1a:ca:68:b6:51:d8:
ac:81:a0:3c:d3:49:7b:a9:ef:7d:cf:ca:0e:93:ea:0f:15:11:
1a:87:35:6e:7e:7c:f6:e5:fe:ef:d3:cb:21:0c:79:a1:22:a8:
5e:97:1c:02:7e:8e:0b:b8:48:8a:2e:34:61:4f:d1:40:dc:c5:
49:e1:d8:b4:49:bb:3d:86:db:11:24:a8:da:60:e1:4a:c9:28:
06:12:0f:e6:f3:ac:8a:33:2e:54:d0:ec:2e:70:f1:66:8f:3a:
41:9c:af:e2:e5:a1:34:00:ee:1a:37:7e:00:0b:2f:6d:61:6e:
d6:41:2f:3f:df:2d:f6:c6:84:c7:bd:97:02:c9:15:c2:ea:e5:
32:ff:7c:21:f1:77:e3:03:2d:b9:ff:86:76:23:49:11:99:49:
38:3c:f3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:52 2026 by rpki-client