
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
File: sk_loZnHVDnFJkkEVLSr1UAhN6k.mft (raw, json)
Hash identifier: XVjo/q7YLwWLi1TQ5sRsiBI64TN7+6rjFZ9TqMthXpE=
Subject key identifier: 9F:54:D6:DB:A2:0C:33:D4:8B:14:F3:25:8A:6B:AF:FC:96:A7:DD:E2
Authority key identifier: B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
Certificate issuer: /CN=b24fe5a199c75439c526490454b4abd5402137a9
Certificate serial: 019CA945985B51D0B267A7217177A8BDE0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
Manifest number: 64
Signing time: Sun 01 Mar 2026 12:00:36 +0000
Manifest this update: Sun 01 Mar 2026 12:00:36 +0000
Manifest next update: Mon 02 Mar 2026 12:00:36 +0000
Files and hashes: 1: 1X-M9-Ob8zn_AUbRkQ52E-fkDj8.asa (hash: A9QlGHiSL6cJZrCCASWffcD/70Opt2l0qntImDeMQKw=)
2: sk_loZnHVDnFJkkEVLSr1UAhN6k.crl (hash: j/gqEEOQDPcJBQ+e6OnVXQt6hX5oPSYLVDel+zcLiAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:98:5b:51:d0:b2:67:a7:21:71:77:a8:bd:e0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24fe5a199c75439c526490454b4abd5402137a9
Validity
Not Before: Mar 1 12:00:36 2026 GMT
Not After : Mar 2 12:00:36 2026 GMT
Subject: CN=9f54d6dba20c33d48b14f3258a6baffc96a7dde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:4c:bf:9c:0b:82:9a:79:12:73:ad:91:c5:
c2:db:10:11:f6:5b:81:0e:72:c8:db:22:51:96:16:
09:36:cf:13:f7:a1:e3:73:0e:66:ff:b9:9e:16:14:
f1:3c:06:23:84:c9:3c:29:63:20:f9:b4:ef:a9:b0:
5c:42:24:66:fc:fd:6c:ac:ec:79:4b:4f:c2:bf:ee:
43:47:e3:16:13:21:5c:2a:1f:3f:c5:89:06:49:c7:
4e:6a:51:7d:d9:82:30:69:99:01:4c:60:81:07:9a:
06:24:90:3e:a1:d8:0e:11:94:15:bc:cc:82:2e:d2:
33:a3:2a:5c:ed:3f:6e:dd:61:ca:3a:a3:58:2a:30:
a1:ed:1a:75:bf:6b:23:ab:53:d6:3c:85:9a:26:47:
6b:62:d8:cd:6e:76:6c:4c:74:3b:3c:fd:20:ae:f0:
be:d1:c1:c2:cc:c0:d8:0f:9d:17:1a:01:c9:25:45:
f8:07:71:47:b1:d5:85:77:c8:8d:69:86:2a:41:e5:
c4:2f:e2:bf:47:cc:66:50:ed:c5:54:50:12:37:33:
e7:3a:1c:4e:e7:bc:aa:49:ef:7e:e1:ea:7a:63:fb:
68:0a:9e:24:f1:f7:2d:1c:cd:f8:f2:d8:04:a2:20:
96:af:0f:8b:fa:d7:43:5e:7b:b5:38:5e:fe:8d:9c:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:54:D6:DB:A2:0C:33:D4:8B:14:F3:25:8A:6B:AF:FC:96:A7:DD:E2
X509v3 Authority Key Identifier:
keyid:B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9f:9c:7d:27:ee:50:57:09:79:1a:85:7f:4e:67:58:a8:b5:
db:60:6b:c3:34:4e:60:92:c0:6d:95:13:78:00:dc:51:7e:c7:
57:47:b8:07:78:ad:ef:a8:e1:af:17:46:6e:e7:24:e0:8d:ae:
1f:53:a7:30:fc:cf:f9:f1:74:9c:7a:97:28:38:dc:70:16:6b:
9a:7b:22:e0:96:96:b9:98:8e:73:3d:78:69:d4:96:95:13:c9:
99:01:b9:dc:be:c9:82:33:21:ba:20:6d:05:e2:08:19:f7:2d:
85:09:ae:b1:8d:22:b7:d5:21:3b:2e:44:62:f9:87:a8:cd:ff:
16:78:2f:44:c2:b6:36:9b:34:b0:9d:3e:00:70:57:4b:30:04:
ac:72:09:81:34:5a:d1:55:c9:b9:c4:44:92:51:af:cd:7a:cf:
e2:97:e1:c1:1a:f7:cb:3d:9e:52:f4:9d:93:ba:f3:6a:91:3e:
64:95:0e:f8:ba:14:5a:d2:45:1a:d3:39:4e:32:3e:69:ed:12:
88:27:33:b2:52:b7:9e:b6:fe:3a:56:4e:d6:92:3f:d1:a8:c5:
0f:a6:d2:d4:5e:28:15:97:82:9f:51:b0:a5:49:2a:f1:7b:68:
2a:0f:48:88:c7:e5:cf:68:74:09:da:82:6b:23:b8:9b:75:86:
58:bf:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:11 2026 by rpki-client