Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json)
Hash identifier: IWwaS57Sq8ZV62Ey+OF77+4eibOVR5TPi6qrmFRYAOo=
Subject key identifier: 5D:7F:FE:EB:35:43:97:32:A8:52:C2:D0:CC:7B:15:63:69:98:3D:52
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 019EB845E50DBF803AAD1610FD65AA24D352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 20:00:48 +0000
Manifest this update: Thu 11 Jun 2026 20:00:48 +0000
Manifest next update: Fri 12 Jun 2026 20:00:48 +0000
Files and hashes: 1: FZXNAo_-RfWe2H9RHiCZ7xGUnYo.roa (hash: TDYzUGrD9meaYvgjEQfqWP3QZzAK3PuLuA6ZQryLHGU=)
2: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: w5uD6hOm+wwXh6gkj6F7E/AApyJ31TIrPlRrujqKLjY=)
3: qMQHyQ9qH1ECk7KL-kR203MB75k.roa (hash: vhQOUoORkCKEMjziW3Ye82TVpPsPBlso5nGmSCXjKmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:e5:0d:bf:80:3a:ad:16:10:fd:65:aa:24:d3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Jun 11 20:00:48 2026 GMT
Not After : Jun 12 20:00:48 2026 GMT
Subject: CN=5d7ffeeb35439732a852c2d0cc7b156369983d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:b9:cb:d5:24:0e:3d:f2:ca:3e:ac:a7:52:
d1:bb:fc:08:0d:c0:ee:5b:58:04:b8:b6:c9:86:61:
07:97:3a:f0:97:e1:f1:54:5c:b5:2c:89:7f:93:ee:
7d:b0:4c:74:93:57:8b:e5:52:51:91:e4:50:f7:6a:
fb:68:0d:c7:f6:b6:1d:3f:22:a7:e5:50:4e:56:40:
30:0d:a0:7d:95:c0:a3:49:ab:5b:bf:b4:cf:02:9b:
38:dd:e5:43:a4:e3:89:cb:0b:bf:50:a2:84:a6:2f:
14:ff:e1:6f:5b:d2:0e:0d:2c:08:24:73:14:7d:3e:
b2:ea:98:bb:1d:39:cd:d9:ba:9e:48:c1:02:65:c7:
20:3d:05:b6:96:2b:97:c9:9c:c9:a9:5f:be:b8:61:
22:da:43:3c:c4:69:48:1f:0f:72:b4:e9:45:9b:32:
98:21:e4:4b:02:27:51:43:08:55:f2:dd:e7:41:b0:
55:2a:4e:50:8c:ed:0d:9a:5f:3a:c4:34:97:4f:88:
92:53:a3:c1:46:46:31:cb:e9:cd:6c:f8:80:bb:2a:
15:03:95:93:aa:dc:14:dc:ca:24:70:24:fc:45:45:
58:17:76:67:df:ad:0e:4c:4d:59:90:f7:c9:2d:8d:
a8:b1:df:ff:45:13:2e:aa:bb:d3:01:9a:c4:d5:0b:
01:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7F:FE:EB:35:43:97:32:A8:52:C2:D0:CC:7B:15:63:69:98:3D:52
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:06:35:ca:8a:79:7c:bf:a6:39:42:c6:e1:21:a3:cb:22:0f:
ef:25:f5:d9:97:9d:b8:08:b3:c2:1d:77:9c:a6:8f:8d:f9:ff:
19:8d:14:dd:21:eb:9f:b9:02:9b:48:bd:02:c9:a4:26:5a:5b:
f8:7b:11:09:a7:71:0a:b4:18:43:f2:d5:ed:75:78:e4:7c:54:
7e:5a:31:7b:62:a2:cc:2d:91:ee:6c:37:d1:1f:df:33:40:1a:
c2:d1:ca:a6:fe:98:33:b2:76:cd:ee:63:06:6b:c3:33:72:15:
13:73:83:dc:2d:b3:13:17:ab:59:80:0e:8d:cf:fe:92:2c:3f:
a7:59:5b:93:fe:c3:1e:9e:bf:1a:cc:27:1e:ec:80:f3:f0:7e:
f8:0a:59:47:10:7a:cb:2e:54:a1:8e:36:eb:50:36:77:10:1c:
2b:a4:96:0f:57:15:f5:c9:8b:af:7b:68:e2:70:1b:a3:36:4c:
9c:6e:f7:6d:58:59:c0:e0:f1:31:50:c1:24:4c:55:e2:ff:e2:
eb:bb:59:69:fd:56:d9:f9:ec:fc:85:e5:00:43:29:7a:91:18:
2a:5a:37:39:81:da:2e:b3:25:92:8b:6f:9d:c6:de:13:58:7d:
6a:1a:d4:e7:e0:63:45:f7:a9:70:2a:c6:06:7a:cd:ce:a8:a4:
f3:0c:2d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:01:59 2026 by rpki-client