Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
File: LokBk3Q73yTdIsPtbyizAxouyAY.mft (raw, json)
Hash identifier: OsQ+9CxwrzRbN04pJd0TW4VvGInhnAvHUMKolKzXahk=
Subject key identifier: 0B:8E:F3:02:18:9D:E4:89:39:52:A6:42:12:C9:FB:F0:B2:94:B5:8F
Authority key identifier: 2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
Certificate issuer: /CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Certificate serial: 019D382DD1663D97E5AE146A701E3DE8D52F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
Manifest number: 141D
Signing time: Sun 29 Mar 2026 06:00:19 +0000
Manifest this update: Sun 29 Mar 2026 06:00:19 +0000
Manifest next update: Mon 30 Mar 2026 06:00:19 +0000
Files and hashes: 1: D53jq87Ju_5W2NurMBsvi2B8EpQ.roa (hash: EUilHlQj2DNSvq/wFdSzVtzevf4M4P6120duAQtu7rI=)
2: LokBk3Q73yTdIsPtbyizAxouyAY.crl (hash: bEun6eMtb+8wBxGpzK7jdzNAseAvFh7C555N1Q2zMEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d1:66:3d:97:e5:ae:14:6a:70:1e:3d:e8:d5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Validity
Not Before: Mar 29 06:00:19 2026 GMT
Not After : Mar 30 06:00:19 2026 GMT
Subject: CN=0b8ef302189de4893952a64212c9fbf0b294b58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:c7:0b:b0:ea:23:00:0b:73:c6:18:f8:9d:
88:22:e0:ab:68:46:b8:d3:eb:fe:77:79:dc:b7:79:
77:cb:ce:7a:10:9b:67:c1:e2:9a:b0:5f:2f:cb:9e:
4b:c6:9b:44:4e:c9:e3:09:89:1d:af:e4:0c:ad:32:
46:e6:61:7f:4a:70:be:39:b1:f3:6c:3a:95:82:d9:
d3:5b:d4:3e:1b:6b:20:01:25:4d:f5:e9:34:85:53:
85:6a:d0:5e:fe:34:c9:56:8d:65:2d:48:62:75:91:
1b:91:1c:32:2e:cc:aa:a3:da:ff:2a:75:36:2a:9c:
c9:85:c9:f4:57:91:d8:d7:fe:88:39:b7:a1:56:55:
fc:d7:96:15:9d:93:d4:62:38:22:61:ad:5b:f3:84:
d9:b8:2e:bd:17:08:4d:55:5e:eb:06:ff:2d:4e:f5:
3b:e7:58:00:21:58:e4:71:68:43:7b:79:82:c0:ab:
09:df:db:50:09:25:11:40:79:fc:6a:51:4b:a7:97:
67:6a:87:9c:b5:a6:fe:91:18:f2:f4:73:b8:14:c7:
35:f8:66:c8:93:31:f3:54:38:45:bb:be:08:a6:2b:
93:28:55:a6:33:92:da:69:f1:6e:36:bd:fc:fc:ec:
49:5b:d9:e1:bd:16:8c:8e:46:e1:2c:6b:ac:d0:eb:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8E:F3:02:18:9D:E4:89:39:52:A6:42:12:C9:FB:F0:B2:94:B5:8F
X509v3 Authority Key Identifier:
keyid:2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:41:3f:b8:eb:fc:5c:8f:d8:0d:42:35:b2:95:4b:04:a2:bb:
89:88:59:ca:f9:c0:f8:17:c0:6a:03:10:2d:96:71:ee:47:a8:
d0:b8:29:b2:37:e4:0e:12:74:b9:84:50:2f:66:68:ad:ba:07:
50:44:9a:9e:2b:17:f5:18:fa:93:cf:5b:a5:a0:99:07:fc:4e:
6e:4a:67:88:d4:d1:60:4b:7f:93:18:0a:c0:56:29:32:a4:e7:
57:5c:59:c3:54:05:90:be:47:d5:1e:e2:48:6a:bc:e6:35:60:
bc:cf:4f:d5:9e:b1:5f:f0:4f:67:b7:d3:0f:46:0b:7c:b7:79:
f9:84:67:7d:b5:e2:84:26:56:1e:72:b6:38:f0:ea:98:5d:16:
ae:a7:2e:f3:78:6f:12:cc:b4:d4:e8:f4:5f:3f:d1:0b:74:17:
b9:60:ac:fd:27:d8:06:7f:8f:5f:45:0b:3c:52:54:11:23:92:
7b:d6:03:58:4f:ec:7b:09:59:90:3d:83:b2:44:71:c9:57:93:
9e:8d:ba:a3:d2:26:df:25:3d:d2:f2:68:81:cb:13:7d:5a:60:
fe:b9:f4:49:ed:7a:f5:5e:d1:27:ad:ee:1b:1d:49:b6:e0:1c:
e1:79:8c:28:ea:a6:a7:3c:e0:cc:ca:9a:79:54:dc:ff:ef:79:
ff:e9:93:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:42 2026 by rpki-client