Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
File: Lokc9xG_fhxC4ILWoviaBL7rldE.mft (raw, json)
Hash identifier: ur2S7NfhWeNMgWHiM25ujQyhvvHNdAAiQjHZxFvA0Ho=
Subject key identifier: 4B:E4:F7:98:FE:70:D6:F2:F1:FC:B7:B3:38:41:7F:FF:19:C2:07:5C
Authority key identifier: 2E:89:1C:F7:11:BF:7E:1C:42:E0:82:D6:A2:F8:9A:04:BE:EB:95:D1
Certificate issuer: /CN=2e891cf711bf7e1c42e082d6a2f89a04beeb95d1
Certificate serial: 01A17DAA2AEB66EC68FCDC7B7B91DC519970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
Manifest number: 06CA
Signing time: Tue 27 Oct 2026 14:01:06 +0000
Manifest this update: Tue 27 Oct 2026 14:01:06 +0000
Manifest next update: Wed 28 Oct 2026 14:01:06 +0000
Files and hashes: 1: Lokc9xG_fhxC4ILWoviaBL7rldE.crl (hash: oKOg/lmAl4K1/urytC3lRo9hPMm7mF0dO4ac1LfnRXI=)
2: OFL0pfnWQKyP_vdNpruCki1Xn3o.roa (hash: N72V/YW8dr+6ZHypwJat0/c3Tm+0yEOrcJpyLdW7Gso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:2a:eb:66:ec:68:fc:dc:7b:7b:91:dc:51:99:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e891cf711bf7e1c42e082d6a2f89a04beeb95d1
Validity
Not Before: Oct 27 14:01:06 2026 GMT
Not After : Oct 28 14:01:06 2026 GMT
Subject: CN=4be4f798fe70d6f2f1fcb7b338417fff19c2075c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:04:35:c8:68:5f:1c:ad:d4:2d:41:6c:86:dd:
5b:45:cb:31:07:b9:c9:07:ff:a6:02:bf:36:c5:70:
74:04:99:ac:5b:78:a0:70:ff:e8:12:f0:f6:0c:4e:
f5:6c:75:53:63:2a:e2:ce:13:a7:10:6d:2f:82:7c:
37:e4:21:ba:fb:78:5f:77:08:58:fe:03:29:c9:da:
eb:7f:05:13:f7:6f:a7:a7:6a:70:5f:3f:5a:c3:43:
97:2f:3c:a2:c0:ec:3c:b6:3d:9e:cb:20:8c:3e:35:
80:91:fb:2e:bf:fb:96:60:7e:51:c9:5c:94:9a:53:
f7:47:b1:f0:de:bf:51:c4:05:35:05:28:51:fa:6c:
5e:ba:67:5e:6f:98:2d:97:d2:3a:37:30:b6:3e:52:
89:c1:a5:b0:82:7a:ed:76:cb:55:30:b6:93:7e:38:
c5:c9:90:5c:ac:bc:78:d6:06:c5:f2:43:b5:52:d7:
83:08:b9:33:5e:41:ba:63:2c:1c:36:95:88:47:43:
27:03:0d:13:3c:4a:49:6e:c3:3c:51:d3:6f:b2:9c:
80:dd:3b:ec:ff:80:7c:d5:59:f4:35:65:47:9d:92:
a6:4a:2c:ab:af:be:be:16:bf:e4:95:78:c2:71:4b:
c9:f2:48:3f:ce:e3:fa:1d:ba:b8:49:6b:ac:ea:e2:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E4:F7:98:FE:70:D6:F2:F1:FC:B7:B3:38:41:7F:FF:19:C2:07:5C
X509v3 Authority Key Identifier:
keyid:2E:89:1C:F7:11:BF:7E:1C:42:E0:82:D6:A2:F8:9A:04:BE:EB:95:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:71:45:35:92:c2:0a:b4:17:bc:a5:2c:7c:13:1d:72:c5:20:
0d:77:ec:22:a5:38:60:1d:1b:54:73:50:6a:5f:01:c4:b0:8d:
21:be:0f:ed:9d:fe:c8:37:86:fc:de:69:c3:d1:02:cc:e9:37:
3e:39:b0:1d:86:71:c6:c3:4c:af:9b:55:33:71:10:7b:63:20:
62:b2:53:55:e9:df:12:7d:fc:3c:ec:3d:63:33:c9:9b:c6:2c:
52:f1:5e:35:41:ce:43:2d:07:34:b5:ab:93:0f:d0:8b:0c:81:
d7:ee:5e:b3:ee:c4:68:cb:ba:04:c4:e2:1e:86:1c:46:d0:80:
94:43:e1:a8:88:0d:87:78:f9:04:12:f1:80:2e:0c:ad:22:aa:
9c:38:68:5c:41:73:b7:fd:9a:10:e4:cd:a7:67:b1:93:53:d0:
07:35:67:5b:48:8f:d5:9b:f8:47:8f:e5:b8:af:f8:2b:34:64:
a2:b0:90:5f:8e:0b:d8:9b:0d:dc:3e:b4:a7:ff:8f:8a:c2:0f:
74:ec:28:7e:da:62:ee:d9:54:95:e7:23:4e:d6:9b:af:b9:ea:
ef:29:6f:53:21:08:00:cf:10:67:67:af:bf:14:e3:7e:18:97:
a2:94:fa:0c:3d:cd:4e:1c:10:8f:22:a9:fe:ad:1a:0d:99:fc:
f9:8f:6b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 19:10:05 2026 by rpki-client