Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
File: LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft (raw, json)
Hash identifier: U+TdUFZR2sQhZcZmehvC4GYsa2Hu3tpb/hAEX3ARnUM=
Subject key identifier: D0:BE:BB:3F:29:CA:D5:F7:DD:3B:78:1A:A5:C9:E8:91:14:87:1C:2B
Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
Certificate issuer: /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Certificate serial: 019CAA8FEBAFC75722B94A6F01C335D2ACCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
Manifest number: 1759
Signing time: Sun 01 Mar 2026 18:01:24 +0000
Manifest this update: Sun 01 Mar 2026 18:01:24 +0000
Manifest next update: Mon 02 Mar 2026 18:01:24 +0000
Files and hashes: 1: 9JptdLDcntQOv_LPrBMUCpvGPBk.roa (hash: 73iAqO8mI3K+RtQqfMbur8DNuJybJKZQrci5eZb7C2c=)
2: LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl (hash: hnZXU/S7eJp1Fv7x+OUtPO2te07tO7jH/kyoe3/nV9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:eb:af:c7:57:22:b9:4a:6f:01:c3:35:d2:ac:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Validity
Not Before: Mar 1 18:01:24 2026 GMT
Not After : Mar 2 18:01:24 2026 GMT
Subject: CN=d0bebb3f29cad5f7dd3b781aa5c9e89114871c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:da:33:8e:8f:01:71:e4:5d:6d:d8:08:f5:
1c:66:39:9d:02:90:9f:fd:cc:09:ef:f7:07:4e:29:
54:64:ea:e3:c6:8b:b1:7a:da:c1:3a:03:f3:8a:d3:
cd:46:0a:44:96:d5:6f:b1:6b:c5:64:9c:ff:84:bc:
74:61:bf:db:b3:ed:b7:fb:54:34:58:c7:88:a5:6f:
02:54:49:1f:66:f1:85:28:20:4e:4a:52:40:57:4d:
f2:24:1e:44:a6:1e:52:ff:e1:46:c6:f8:7c:22:18:
b7:ae:51:8d:86:b8:37:21:c1:6a:ee:de:57:1f:11:
87:78:14:4f:36:d6:bd:6a:e2:c8:8a:2b:03:7b:47:
95:a6:55:10:5f:85:44:3e:2e:bb:46:b5:f4:a9:21:
be:d5:c8:68:81:23:2b:95:e5:db:61:4a:f4:6a:59:
0b:c3:60:0e:d6:28:29:7a:08:e8:ba:c1:87:7e:9b:
aa:2e:89:36:c8:49:1d:c4:00:70:c2:0b:9c:e1:ae:
4c:c1:ae:f5:86:26:c3:05:f7:7b:4f:6f:a4:b0:c5:
99:45:50:77:f7:b2:6d:e2:fb:37:4a:dc:91:f0:e4:
7c:c2:aa:cb:ce:b6:da:13:15:10:07:92:fd:f8:32:
06:6b:cf:36:2c:7b:64:00:26:d1:88:cc:d7:2e:9a:
74:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BE:BB:3F:29:CA:D5:F7:DD:3B:78:1A:A5:C9:E8:91:14:87:1C:2B
X509v3 Authority Key Identifier:
keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:35:ad:91:1b:47:d2:4e:db:4e:c9:1a:a6:ee:b7:ed:3f:3d:
8e:77:a3:13:bd:ed:57:58:e3:37:ac:66:e8:47:1d:21:4f:88:
c6:a3:33:a2:d0:a8:cf:89:6b:94:3a:cb:bf:99:37:89:1d:14:
f6:9e:79:f8:34:63:70:c0:3c:00:ed:84:c6:26:dc:42:c1:64:
ac:1c:e1:86:b6:cb:8a:4e:34:13:2e:06:04:00:96:56:1b:d4:
d0:3b:d8:30:33:e4:98:76:ee:74:ee:61:28:c3:f3:a6:d3:49:
23:38:fb:8d:54:45:37:d9:43:49:dc:c7:f1:23:23:8e:ee:b0:
5e:3d:3e:73:38:40:8a:6a:8f:f3:5a:cc:5a:a3:b3:91:b0:38:
a9:bd:e3:f1:fa:d0:7d:8f:87:ae:38:b0:6d:80:77:25:da:49:
34:8e:53:a3:06:f5:fe:7f:24:96:bd:35:9c:f9:6c:79:e2:64:
8d:ea:a3:c6:88:d0:06:8d:1e:93:34:ae:a1:90:d2:11:9a:ee:
2f:55:14:c6:89:ac:3a:df:b9:90:fc:a8:d9:42:1a:89:d3:00:
55:fc:54:79:9b:e1:16:1b:7c:eb:7e:3d:08:20:7c:b6:b8:4c:
3d:78:aa:50:f5:da:15:ef:11:49:37:67:8a:5d:39:a8:3a:d1:
40:e1:5f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:28 2026 by rpki-client