Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: /vq0FhcG/mARP+DAUzBiFy39pQHf2aD5m5hvxzFUW3U=
Subject key identifier: EF:6A:B2:55:AE:2B:FC:B0:4F:26:CE:4E:53:89:3B:C1:2E:BB:13:92
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 019D9962F429B4B3F05768E813806B3B6D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 18DE
Signing time: Fri 17 Apr 2026 03:01:32 +0000
Manifest this update: Fri 17 Apr 2026 03:01:32 +0000
Manifest next update: Sat 18 Apr 2026 03:01:32 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: xX8fEn3POffLNXS/b3GlF/za6PqKADQMTZWt6leSIa8=)
2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
3: nRR7i404z5RVMJP9emF5qUhiiWQ.roa (hash: r2qRKGe5QD4+IAS1A7oJ0gKLqqHpjbTNssXN3Od+dxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:f4:29:b4:b3:f0:57:68:e8:13:80:6b:3b:6d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Apr 17 03:01:32 2026 GMT
Not After : Apr 18 03:01:32 2026 GMT
Subject: CN=ef6ab255ae2bfcb04f26ce4e53893bc12ebb1392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:ae:e3:c8:28:20:ec:d2:e4:75:7c:66:17:
fb:9c:bc:c4:d9:ae:69:5f:1c:3d:23:4d:61:50:9e:
fa:4b:84:31:ec:b5:dd:66:71:ab:06:b0:87:25:10:
6e:bd:f5:cf:52:ac:a0:48:9d:12:f8:ea:e0:69:5d:
0b:15:7d:e1:c0:d5:8d:d4:2f:ed:f6:0b:d7:f9:a1:
2f:3a:df:cd:60:2b:61:a8:f5:7b:fc:50:dc:2c:fd:
8a:85:d0:72:21:26:16:90:34:74:ba:dc:a4:44:2f:
ad:22:3f:01:ca:6b:bb:22:75:cf:97:84:d5:9a:82:
b5:f0:ed:03:b8:9b:b3:4e:08:00:3c:d6:58:8c:8c:
94:30:03:ad:59:89:9e:33:f3:b6:7b:05:89:bd:fd:
0f:71:0a:4a:6c:14:d5:33:56:29:d4:64:06:df:82:
6b:8d:49:8a:62:d1:1e:d8:f1:68:c3:7e:95:b3:5e:
db:3c:0b:45:09:41:48:49:8f:5a:72:f8:18:52:b0:
1b:45:5a:68:a0:ae:f9:71:07:68:8e:7a:b8:95:e8:
8b:01:6a:c7:da:e9:25:94:80:f6:29:10:17:35:a3:
7b:49:f1:09:d0:33:eb:0b:47:49:e8:6f:4d:78:06:
04:2c:02:03:8e:84:15:ec:bb:fa:60:91:f9:18:ae:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6A:B2:55:AE:2B:FC:B0:4F:26:CE:4E:53:89:3B:C1:2E:BB:13:92
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e9:54:ee:2c:65:fd:23:b6:31:29:02:d9:a1:da:11:5e:6e:
75:83:25:6a:3d:e7:d7:91:24:8e:d1:d5:19:da:80:5b:55:3b:
25:6f:7f:97:20:bf:b9:52:67:12:7c:c7:b9:9b:44:97:3a:b5:
b2:2f:55:b7:ee:7c:b5:a3:d6:15:20:d6:81:da:47:2e:26:80:
e5:a5:fb:5e:0b:9e:12:bb:f5:78:c4:13:0f:89:52:c9:42:60:
94:7c:54:8c:05:f2:fd:50:ff:cf:99:04:e0:bb:b3:fb:bb:2d:
ad:8c:21:79:d0:a0:27:aa:61:da:b7:30:41:78:5d:17:c0:81:
5e:04:2b:39:e8:0f:d2:87:fb:97:6c:37:0f:d0:22:dd:8f:22:
e0:2d:e1:d6:1f:07:67:0d:dd:0d:24:cf:ac:a6:2f:b8:9f:9e:
df:81:ae:ab:67:29:17:8e:e6:0c:55:09:bd:b2:ad:5d:18:68:
4d:1e:88:96:d8:fc:cd:50:fb:71:8c:f6:e4:6e:9d:cb:1f:25:
58:a2:20:87:d4:ba:d7:2b:d7:60:74:29:13:d4:dc:79:3e:53:
88:f0:05:f3:75:45:26:53:f1:aa:c3:c4:45:5c:78:81:50:1a:
eb:78:d6:fa:b3:a4:73:3e:aa:84:2b:a4:50:d5:ee:56:c1:89:
5b:ad:ec:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:07:03 2026 by rpki-client