Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: ZU2jLfVA/w4lg4xubB3rcdKIbPqCtkKdZk8Nbv3pC30=
Subject key identifier: 0D:FC:0D:43:21:53:DB:76:D1:BF:3B:1F:8B:C3:85:36:04:9B:4A:35
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 019EC0DBA89C2CECB52E83393EF6ED5F3F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1977
Signing time: Sat 13 Jun 2026 12:01:21 +0000
Manifest this update: Sat 13 Jun 2026 12:01:21 +0000
Manifest next update: Sun 14 Jun 2026 12:01:21 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: vkoDJuGCHovenaAqORXZYzaeB6Y/6n7nz5NDkEycb2c=)
2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
3: nRR7i404z5RVMJP9emF5qUhiiWQ.roa (hash: r2qRKGe5QD4+IAS1A7oJ0gKLqqHpjbTNssXN3Od+dxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:a8:9c:2c:ec:b5:2e:83:39:3e:f6:ed:5f:3f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Jun 13 12:01:21 2026 GMT
Not After : Jun 14 12:01:21 2026 GMT
Subject: CN=0dfc0d432153db76d1bf3b1f8bc38536049b4a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:e1:f5:b0:00:92:31:44:ad:2f:fd:f1:e0:
3e:91:e6:9f:69:79:3b:12:60:60:ca:a7:55:16:9d:
53:bb:a9:58:04:81:80:6f:08:3e:c8:fb:0d:48:09:
20:25:9e:03:65:5e:90:31:35:b1:18:11:4e:af:36:
20:8b:0e:98:96:4a:ed:76:a5:f7:06:c0:12:c2:d7:
ae:77:ed:1a:6e:80:97:4c:59:03:3c:8d:ac:69:42:
ba:a9:4a:46:63:7a:8a:3e:07:67:f7:1a:41:91:4b:
7d:a5:d1:b9:20:62:77:d4:3f:ec:e2:a5:8a:af:9c:
7e:23:59:5a:65:dc:63:29:a9:2b:2c:85:fa:de:fc:
cd:ee:a3:d1:0e:54:6a:8e:bc:0b:2c:2b:61:5f:b1:
19:27:db:55:04:70:27:59:e1:7c:bf:85:71:f8:83:
48:15:25:06:67:e6:06:5a:62:b9:b6:8f:d0:bd:f4:
01:57:e7:51:02:54:0f:6e:90:7b:77:c4:c4:b8:1f:
2a:4d:54:db:c0:1b:bd:13:ee:8c:83:cd:2e:19:b9:
c9:3e:85:a2:60:e5:df:5f:ca:1e:77:fc:8e:6b:89:
81:04:ea:c1:d2:e6:ab:74:dc:6e:31:3b:e1:09:a0:
db:d2:37:dc:94:ab:70:0a:a8:56:b4:a2:fe:f9:3b:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FC:0D:43:21:53:DB:76:D1:BF:3B:1F:8B:C3:85:36:04:9B:4A:35
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2d:7a:51:86:c3:53:cf:7d:64:f9:40:7a:6d:22:13:39:a3:
33:68:3f:36:67:bd:ae:fc:39:07:1e:fd:53:75:0b:e5:b2:a7:
76:28:ee:31:fc:79:ce:8f:0b:26:09:56:a1:8b:f7:f4:68:0a:
fb:d7:26:81:9d:4f:7c:6f:7b:b3:1f:48:b8:ec:b0:ba:a8:3c:
b5:1a:c6:7f:f6:bb:93:92:8b:0f:ca:7a:20:03:d8:a1:66:ad:
0e:45:18:b9:4c:74:39:4a:4c:c5:0e:ae:de:01:80:88:3b:c7:
52:83:b8:43:3c:73:24:11:24:85:27:c9:25:9a:3e:00:1b:3a:
c9:ab:84:8e:76:e9:21:da:90:5a:c5:ef:30:9d:35:bd:87:fc:
f9:e8:c9:79:28:17:cd:b5:ac:88:94:56:e5:bc:60:a9:4d:96:
9e:e4:8e:5b:4a:c5:3c:45:a5:ec:eb:1a:db:8c:56:49:4b:c0:
e5:e1:df:7b:81:53:ea:96:51:62:d8:89:75:94:e6:42:9f:09:
0c:f4:a3:95:ae:86:2c:de:47:77:4e:c7:25:4a:51:3a:76:69:
3f:65:33:cf:64:d5:7c:b2:2b:55:c2:5f:8e:b0:47:84:4b:98:
5c:af:d6:11:ef:5e:91:16:d4:4c:be:23:54:06:fa:c3:09:db:
35:df:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:52:03 2026 by rpki-client