Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
File: sk_loZnHVDnFJkkEVLSr1UAhN6k.mft (raw, json)
Hash identifier: yjZJ2nPuB6Sk0syerKegDTJtiHcGE8Y5srgdK7+8IMM=
Subject key identifier: 95:1D:8F:65:22:4A:91:82:44:F0:17:9E:72:E0:7B:DD:4C:5A:64:4A
Authority key identifier: B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
Certificate issuer: /CN=b24fe5a199c75439c526490454b4abd5402137a9
Certificate serial: 019D9AABAA2ED78FF23A862FC05F12AA19DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
Manifest number: E1
Signing time: Fri 17 Apr 2026 09:00:34 +0000
Manifest this update: Fri 17 Apr 2026 09:00:34 +0000
Manifest next update: Sat 18 Apr 2026 09:00:34 +0000
Files and hashes: 1: 1X-M9-Ob8zn_AUbRkQ52E-fkDj8.asa (hash: A9QlGHiSL6cJZrCCASWffcD/70Opt2l0qntImDeMQKw=)
2: sk_loZnHVDnFJkkEVLSr1UAhN6k.crl (hash: OwOP8A8qZFW3y/PcT6F/Qsapp4pJNB2qagbPRqstyJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:aa:2e:d7:8f:f2:3a:86:2f:c0:5f:12:aa:19:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24fe5a199c75439c526490454b4abd5402137a9
Validity
Not Before: Apr 17 09:00:34 2026 GMT
Not After : Apr 18 09:00:34 2026 GMT
Subject: CN=951d8f65224a918244f0179e72e07bdd4c5a644a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:f6:3f:5c:57:e9:0d:7c:ab:07:75:4c:84:
ef:f2:6a:37:f1:be:37:90:85:21:be:1d:be:7b:e0:
63:0e:73:72:26:4f:97:a4:2d:e2:d4:3d:11:93:8a:
8c:76:61:50:28:f5:ce:56:b6:bf:49:0d:93:1b:f1:
61:71:05:e6:5d:c9:b4:07:d3:ba:88:de:84:84:13:
89:7f:4c:a2:ff:00:ca:58:79:47:89:51:e5:7a:41:
0e:81:98:07:38:60:d0:e2:0e:19:1c:2d:ce:fa:f2:
73:23:77:a1:7e:ad:22:48:df:53:d8:57:db:2f:1f:
20:a0:f8:79:9e:c2:e7:11:e6:8c:44:5d:e4:60:58:
99:4c:93:11:01:cc:90:a1:06:c4:8c:3f:aa:1d:ae:
92:bd:33:6c:7d:30:dd:a1:30:d2:fe:30:9b:bf:5c:
fd:72:a1:b0:82:e6:fe:85:22:ee:c7:28:30:6e:88:
1d:64:a5:26:fc:8f:59:17:22:ad:da:9a:66:5b:93:
fb:3d:ee:58:27:44:c6:ed:f6:58:a2:81:c5:bd:c4:
df:e1:6b:7f:f7:5a:40:05:93:1a:af:d9:65:46:ac:
ad:a2:bc:08:d3:2a:85:8d:e0:36:88:13:af:93:d6:
9e:d4:29:b2:08:a2:84:b2:48:cf:23:d8:f0:57:d1:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1D:8F:65:22:4A:91:82:44:F0:17:9E:72:E0:7B:DD:4C:5A:64:4A
X509v3 Authority Key Identifier:
keyid:B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d8:0d:ec:5f:94:35:ec:55:ba:e4:1f:9a:c4:9d:07:7d:d8:
1c:fd:14:25:73:4a:5d:2b:97:ba:db:c9:51:38:99:35:41:63:
43:fa:b4:d2:4a:81:4f:3f:b3:4a:08:e8:a9:b7:fd:57:94:5f:
87:a8:5c:d3:fe:db:c6:4a:a3:7d:f0:34:67:45:f3:c1:09:e7:
b7:cd:5d:44:0f:49:79:68:78:95:ba:4d:ef:b7:63:45:3c:74:
bf:e4:cc:f0:e0:6b:8c:09:f3:ec:4c:c4:f0:c8:0a:1f:f6:b9:
e6:03:80:24:3c:a1:19:1e:c1:fd:da:8c:23:2b:e7:60:1d:4e:
1d:06:d8:ba:d2:82:06:1d:82:29:cb:20:6d:05:c2:ef:9e:cb:
58:f5:60:ba:10:3e:7b:b2:cd:6b:8c:98:85:48:78:e2:f6:16:
00:5c:08:00:c7:2a:d7:02:f2:c9:39:fb:dc:7b:91:ef:e7:fd:
8c:65:35:7c:ba:da:00:51:e3:79:1b:db:34:1f:a9:db:61:7b:
b2:fb:85:1a:5f:c1:fa:ff:cc:cf:9f:a8:ab:13:01:b6:ef:7c:
6b:1b:01:ee:6c:65:a9:85:7f:f4:3b:aa:fc:54:15:14:c0:26:
83:ee:da:47:32:4e:70:4e:08:72:66:59:99:39:c1:78:a1:2d:
41:cc:2a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:37:18 2026 by rpki-client