Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: W7YHkRTwPd3wl8/e4Zbj+PYOqKY0jg0ukg6vtYRHTn0=
Subject key identifier: DE:06:E8:2B:2B:8D:86:E3:DD:B8:6F:29:7E:10:B1:D8:43:18:AA:B9
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 019FACE4871B02E7BFEEE70E0C07B2E79796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 19F2
Signing time: Wed 29 Jul 2026 08:01:25 +0000
Manifest this update: Wed 29 Jul 2026 08:01:25 +0000
Manifest next update: Thu 30 Jul 2026 08:01:25 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: x9haEnEPP7pK3s1q8MxYQ5mFJIdPnxS1ZQrsqHRKKj8=)
2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
3: a4RVALqt3vHeDDskNW3A5CdGc-U.roa (hash: TGxk49hSl+fpcglkMzdXiM6aB3O9APTDcKaAiPFnS+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:87:1b:02:e7:bf:ee:e7:0e:0c:07:b2:e7:97:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Jul 29 08:01:25 2026 GMT
Not After : Jul 30 08:01:25 2026 GMT
Subject: CN=de06e82b2b8d86e3ddb86f297e10b1d84318aab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:6a:50:d6:99:ec:ff:f5:25:e5:27:04:33:
2e:a7:4c:8b:00:df:94:ca:5c:9c:e7:fb:04:4b:9b:
07:c9:cc:02:79:d9:1b:ce:ec:4f:a1:22:6b:d3:90:
0f:50:ab:37:c9:51:68:f6:b9:40:26:a7:c7:53:c1:
84:91:69:4c:73:ab:73:41:82:e4:10:08:8e:58:11:
37:36:c9:1f:1f:d4:db:dc:97:f9:47:05:59:f1:07:
5d:76:95:47:bb:a8:03:34:2a:71:e4:e5:d7:67:ce:
ee:4e:90:a3:6f:c9:15:e7:59:c0:6d:11:f6:3e:f0:
8e:a3:da:a5:62:22:3a:0e:76:7a:be:8c:0a:0c:04:
ce:1d:80:e3:98:e4:f4:c4:50:4c:44:cb:e9:e1:18:
d5:21:5b:95:80:0c:82:b0:cd:11:0d:6f:0c:88:05:
03:fd:d1:d6:c0:f7:17:49:17:9b:4e:76:a4:d4:5d:
d7:3c:c0:76:a3:2a:21:a5:cb:a9:30:64:3b:f7:8c:
e2:58:25:96:d5:de:0a:ac:01:d0:9f:9a:67:53:c6:
60:fb:bc:99:db:29:0e:32:6f:c2:18:7e:e3:ad:91:
6d:77:88:91:f7:36:80:4f:f1:37:65:24:b0:d0:a4:
e3:ef:3e:ab:0b:97:b4:83:89:ed:f9:fd:36:be:25:
ca:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:06:E8:2B:2B:8D:86:E3:DD:B8:6F:29:7E:10:B1:D8:43:18:AA:B9
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d0:3f:7b:e4:25:ef:f6:19:aa:9f:9c:84:bb:49:d5:07:c9:
e2:1e:13:60:2a:7d:59:de:46:a4:2d:44:fd:05:4c:4e:91:09:
98:1c:cf:a6:6a:f3:2e:d0:ab:1f:5a:fb:59:06:95:48:cd:c1:
9f:48:3e:6b:f3:98:9f:27:9b:05:53:a2:38:73:1e:cb:1f:7d:
6b:5a:29:2a:80:0b:e0:d9:5d:92:ad:6c:b7:0b:6f:6d:b6:7d:
c8:e8:27:87:bc:33:49:50:b2:70:23:84:31:3f:69:cc:ea:dc:
73:43:3d:98:1b:d1:8d:71:ca:ae:8e:b3:5f:5c:ab:a8:8f:8b:
fa:0a:11:85:c3:2e:3d:87:20:ca:5f:0e:e9:84:f5:a4:f1:1a:
34:49:cc:b3:94:87:4b:45:3d:09:f4:6f:bf:d3:04:46:2e:b3:
53:ae:09:10:6b:66:5f:b9:2b:9b:50:28:10:5c:5c:b5:67:b8:
34:67:1a:95:3d:ec:db:e0:f3:5d:ec:ba:7f:c0:ef:98:e5:5c:
ee:77:48:3c:32:c0:27:90:63:7c:e2:15:2b:f1:4d:e6:08:f2:
cb:65:23:5f:a4:31:96:df:a2:b9:fd:df:8c:74:55:e1:6a:bb:
67:52:b1:9c:57:0f:36:da:ce:4d:7e:1f:e4:1d:f1:0e:36:85:
c9:c3:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:31 2026 by rpki-client