Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: L+bSXOU5vFjnIdR0LDPm75yYZmOQaFlcw1N7n2srSaw=
Subject key identifier: E9:02:85:98:E7:5E:38:E2:DC:05:AE:9E:FE:E1:C5:C4:4E:5E:1F:C4
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 019CAAC6A2725E66CB54712B6F3C63AFF091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1862
Signing time: Sun 01 Mar 2026 19:01:10 +0000
Manifest this update: Sun 01 Mar 2026 19:01:10 +0000
Manifest next update: Mon 02 Mar 2026 19:01:10 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: gbrCsK2mBCzR7USd3JJX4ThqQLRsSAhIBfmGtzReoik=)
2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
3: kjwAci0-xsN-FW2yHLM0zLU2az4.roa (hash: ZKpTRPaiSMpihhfsD4iTWrJFTjTfyomHoD/xRGDDVIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a2:72:5e:66:cb:54:71:2b:6f:3c:63:af:f0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Mar 1 19:01:10 2026 GMT
Not After : Mar 2 19:01:10 2026 GMT
Subject: CN=e9028598e75e38e2dc05ae9efee1c5c44e5e1fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:5d:2c:33:d8:a4:9a:b4:80:ec:e2:ec:a7:
2c:56:5a:10:5d:3a:4b:3b:ed:a2:32:ce:ce:84:7d:
eb:9c:aa:41:a4:fd:ae:e5:32:aa:38:3a:aa:f1:17:
8a:68:b4:b1:45:09:0a:ee:03:a1:39:7b:31:a9:df:
8c:0f:01:d9:50:97:0e:6e:f9:9c:b2:d8:10:74:24:
fa:d2:b1:51:90:0f:18:50:b3:98:97:f9:bc:b8:55:
01:f6:c9:6a:62:d7:52:71:1a:57:36:0f:93:b2:bb:
dd:2d:f7:e4:55:ba:9c:32:af:e7:95:f7:6b:d3:df:
ce:1a:69:17:bc:98:0f:f3:36:f3:c0:f9:09:d3:c5:
86:b6:44:3d:9f:ce:35:a7:31:65:1e:39:b4:c6:44:
65:c1:02:af:92:ba:65:85:cd:9a:0c:4c:a5:48:70:
6e:06:c8:df:25:9b:b3:2c:8e:ba:3a:69:f4:00:0f:
49:b1:04:be:2b:a1:7f:a1:77:b9:6c:31:b9:67:ff:
a8:e2:a0:01:de:37:90:af:b8:ab:01:86:2b:b5:01:
68:8d:76:74:e7:15:2b:63:3f:94:6e:0a:a0:66:9a:
6f:23:18:54:87:48:72:3d:4c:83:63:40:26:c0:81:
d9:b6:e5:6b:c6:7f:bf:fc:ae:e1:4e:ce:71:54:b2:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:02:85:98:E7:5E:38:E2:DC:05:AE:9E:FE:E1:C5:C4:4E:5E:1F:C4
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fc:73:70:52:1f:54:50:84:29:30:ce:dc:fd:c8:a9:1d:b5:
62:51:ae:e0:69:42:e4:14:d8:3b:86:24:52:af:83:a4:c9:e0:
bd:63:70:51:91:18:4d:bf:22:17:6d:bc:69:1f:d4:6d:84:02:
f3:f8:92:65:03:79:af:48:18:c4:3f:65:47:66:bb:24:61:32:
4e:1d:29:29:21:2f:27:99:af:dd:e1:7d:48:c1:94:ea:ea:c2:
cc:34:e4:58:a0:b3:fd:4a:82:75:84:59:9f:f2:56:68:28:52:
b5:5b:16:5b:bb:9d:49:58:81:77:db:46:74:f3:11:78:a5:85:
ba:1a:42:62:1f:c3:ba:7b:ba:7b:f7:47:8c:22:62:66:67:dc:
0d:86:72:af:12:4a:bc:96:8a:a6:75:09:12:12:00:fe:f0:59:
c0:e2:96:24:e5:29:6c:30:88:4b:70:1d:f2:97:80:53:0a:59:
fb:05:6b:fb:58:74:9e:fc:b7:24:54:dc:65:b3:78:cb:25:4a:
fb:72:b6:63:8e:a7:a9:46:af:4d:05:01:52:2d:0c:57:98:70:
1d:bb:eb:b3:86:b6:e3:47:88:00:e8:29:5c:ff:2c:47:cc:a6:
d4:dd:d1:59:29:33:90:71:fc:30:29:a3:27:1f:2e:99:2c:c2:
2f:27:93:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:09:16 2026 by rpki-client