Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.mft
File: loXHKCpFG6Lamf1RF8VFrXor3hM.mft (raw, json)
Hash identifier: 48WDBvdI7bleTdfcjvNWwAXZF2mYF+zrSPwd0DoeDBo=
Subject key identifier: 52:9F:75:85:8B:C3:83:A7:5A:59:9B:0D:8A:27:2E:80:57:2A:30:C7
Authority key identifier: 96:85:C7:28:2A:45:1B:A2:DA:99:FD:51:17:C5:45:AD:7A:2B:DE:13
Certificate issuer: /CN=9685c7282a451ba2da99fd5117c545ad7a2bde13
Certificate serial: 01A0DBDFE682787EFC9D3529C2014D320675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/loXHKCpFG6Lamf1RF8VFrXor3hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.mft
Manifest number: 017B
Signing time: Sat 26 Sep 2026 04:01:18 +0000
Manifest this update: Sat 26 Sep 2026 04:01:18 +0000
Manifest next update: Sun 27 Sep 2026 04:01:18 +0000
Files and hashes: 1: 29UCqWlrNh5jbs3TTO-NOpURpdQ.roa (hash: 0gL17gOZz0TzmploQY6uAf9PHcOaGIU8JFgYgCSZums=)
2: loXHKCpFG6Lamf1RF8VFrXor3hM.crl (hash: 47jFpx2Jm22TT8jbQA5ijnKOF5uhhgOsXJ/OdhV9Bpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/loXHKCpFG6Lamf1RF8VFrXor3hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:e6:82:78:7e:fc:9d:35:29:c2:01:4d:32:06:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9685c7282a451ba2da99fd5117c545ad7a2bde13
Validity
Not Before: Sep 26 04:01:18 2026 GMT
Not After : Sep 27 04:01:18 2026 GMT
Subject: CN=529f75858bc383a75a599b0d8a272e80572a30c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:34:a1:7b:a8:eb:a6:3d:f9:4d:93:58:6a:
b8:e7:6a:9b:c4:43:26:f6:91:63:28:de:91:e5:4c:
cb:76:65:69:f4:2e:e8:83:ec:d5:40:8b:bf:cb:99:
35:b6:e9:16:d2:b6:e6:b7:28:9c:60:95:bf:0b:83:
66:d6:a1:9e:fa:a5:1a:c3:0f:a4:7d:a2:b6:23:da:
a4:7a:8d:78:d0:19:6e:92:33:0e:0b:36:89:53:48:
c2:72:ea:38:7f:35:af:c1:9d:72:b7:6b:c0:7c:6f:
03:ad:91:27:f2:a2:58:d8:e5:4e:ac:9c:23:c7:bc:
74:48:bd:9a:c1:2e:c4:0c:b3:d9:14:69:a1:d8:2b:
e0:8d:b3:8f:90:d3:a9:5b:54:fa:86:7c:8c:73:a9:
b3:6e:4d:d2:c8:98:eb:9f:1f:cd:0a:6d:eb:bf:e3:
92:5e:24:e2:f0:ca:b5:cd:c3:ee:c9:57:4e:5a:39:
67:05:33:c7:e7:45:4f:3c:2f:bf:86:cf:1e:56:c4:
4a:8b:a2:a5:d0:49:70:bd:87:2c:ae:9d:39:73:2d:
e3:53:da:fe:6c:86:6a:66:5d:bb:fe:db:ce:1c:cc:
a3:52:43:90:f1:6c:9c:04:ac:67:3b:a0:64:07:a4:
99:e5:79:e0:d2:ef:39:67:00:34:f2:e5:fb:07:aa:
cd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9F:75:85:8B:C3:83:A7:5A:59:9B:0D:8A:27:2E:80:57:2A:30:C7
X509v3 Authority Key Identifier:
keyid:96:85:C7:28:2A:45:1B:A2:DA:99:FD:51:17:C5:45:AD:7A:2B:DE:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/loXHKCpFG6Lamf1RF8VFrXor3hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dfd416-0648-4138-bb48-454bc1c72f41/1/loXHKCpFG6Lamf1RF8VFrXor3hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f0:18:c9:f9:ed:09:41:e4:36:f3:e7:3c:1d:4e:84:df:b9:
cd:bf:43:09:bb:a2:01:a3:49:26:7d:0a:5d:47:6a:70:8f:b7:
d3:4d:21:74:f7:0f:6e:12:d6:02:b0:40:93:98:fc:a5:5a:a2:
be:04:52:83:51:82:18:07:ad:7a:49:f1:f6:15:b7:3e:ec:64:
c3:fa:93:35:b5:2e:79:ad:25:c2:4e:f6:f0:ea:7f:89:0d:92:
76:77:ae:21:a3:52:c0:f0:00:b5:48:03:00:2d:ff:2c:2a:4f:
14:4a:a8:cb:cf:f9:86:1b:02:65:07:a4:f0:5c:7b:15:12:92:
b4:ea:31:8e:b9:78:d7:7c:8c:48:3f:6d:9e:64:76:8e:26:26:
6c:9d:8f:55:00:44:2d:8d:fe:bc:57:8f:6b:28:64:9a:c2:eb:
6f:de:bd:67:44:43:22:b4:62:70:e6:f4:f7:b8:67:21:5f:26:
b2:c8:8a:70:68:8e:82:05:ab:da:f7:7d:7c:fe:30:49:0b:cf:
89:ff:fe:51:10:d0:41:b0:b3:06:0d:f5:45:14:bd:19:7a:32:
8c:cb:9d:3e:3e:8d:9a:28:91:b2:8a:f8:c7:83:a2:12:93:0c:
48:e2:ed:8f:4a:ef:b0:b7:15:b4:1c:c8:a7:b9:42:f6:76:dd:
06:08:e5:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDb3+aCeH78nTUpwgFNMgZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ODVjNzI4MmE0NTFiYTJkYTk5ZmQ1MTE3YzU0NWFkN2Ey
YmRlMTMwHhcNMjYwOTI2MDQwMTE4WhcNMjYwOTI3MDQwMTE4WjAzMTEwLwYDVQQD
Eyg1MjlmNzU4NThiYzM4M2E3NWE1OTliMGQ4YTI3MmU4MDU3MmEzMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1M0oXuo66Y9+U2TWGq452qbxEMm
9pFjKN6R5UzLdmVp9C7og+zVQIu/y5k1tukW0rbmtyicYJW/C4Nm1qGe+qUaww+k
faK2I9qkeo140BlukjMOCzaJU0jCcuo4fzWvwZ1yt2vAfG8DrZEn8qJY2OVOrJwj
x7x0SL2awS7EDLPZFGmh2CvgjbOPkNOpW1T6hnyMc6mzbk3SyJjrnx/NCm3rv+OS
XiTi8Mq1zcPuyVdOWjlnBTPH50VPPC+/hs8eVsRKi6Kl0ElwvYcsrp05cy3jU9r+
bIZqZl27/tvOHMyjUkOQ8WycBKxnO6BkB6SZ5Xng0u85ZwA08uX7B6rNtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKfdYWLw4OnWlmbDYonLoBXKjDHMB8GA1UdIwQY
MBaAFJaFxygqRRui2pn9URfFRa16K94TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG9YSEtDcEZHNkxhbWYxUkY4VkZyWG9yM2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kZmQ0MTYtMDY0OC00MTM4LWJiNDgt
NDU0YmMxYzcyZjQxLzEvbG9YSEtDcEZHNkxhbWYxUkY4VkZyWG9yM2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kZmQ0MTYtMDY0OC00MTM4LWJiNDgtNDU0YmMxYzcyZjQx
LzEvbG9YSEtDcEZHNkxhbWYxUkY4VkZyWG9yM2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPAYyfnt
CUHkNvPnPB1OhN+5zb9DCbuiAaNJJn0KXUdqcI+3000hdPcPbhLWArBAk5j8pVqi
vgRSg1GCGAeteknx9hW3Puxkw/qTNbUuea0lwk728Op/iQ2SdneuIaNSwPAAtUgD
AC3/LCpPFEqoy8/5hhsCZQek8Fx7FRKStOoxjrl413yMSD9tnmR2jiYmbJ2PVQBE
LY3+vFePayhkmsLrb969Z0RDIrRicOb097hnIV8mssiKcGiOggWr2vd9fP4wSQvP
if/+URDQQbCzBg31RRS9GXoyjMudPj6NmiiRsor4x4OiEpMMSOLtj0rvsLcVtBzI
p7lC9nbdBgjlVA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:14:42 2026 by rpki-client