Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: WoNFnyiJS9IfuHxl743f9k/sg0dAJD6HDbN2ObauzWk=
Subject key identifier: EB:46:E8:31:9D:C2:5C:8A:B6:5B:30:E0:B5:B8:BE:AB:03:05:59:06
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 01A0D26E52F2252C5A8545F37CFAEB94E194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1A8A
Signing time: Thu 24 Sep 2026 08:00:40 +0000
Manifest this update: Thu 24 Sep 2026 08:00:40 +0000
Manifest next update: Fri 25 Sep 2026 08:00:40 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: kKORpTDaZSDuewx7eprpdKohh5yDwtE72vG/Q1V0XU8=)
2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
3: a4RVALqt3vHeDDskNW3A5CdGc-U.roa (hash: TGxk49hSl+fpcglkMzdXiM6aB3O9APTDcKaAiPFnS+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:52:f2:25:2c:5a:85:45:f3:7c:fa:eb:94:e1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Sep 24 08:00:40 2026 GMT
Not After : Sep 25 08:00:40 2026 GMT
Subject: CN=eb46e8319dc25c8ab65b30e0b5b8beab03055906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:77:86:61:93:53:0f:87:68:45:e4:8c:dc:
c6:1b:ce:f1:29:59:d6:4b:53:d7:3f:d9:24:c7:70:
33:7d:61:1e:a4:67:20:31:2e:a7:01:d0:b2:d0:ce:
34:82:2b:5e:4a:11:77:d6:fd:90:c6:bc:ac:0d:a2:
e8:fb:d6:76:d1:00:0a:b6:aa:14:e0:be:c9:d5:5b:
c1:ab:6f:94:f9:54:a3:d5:e0:79:7c:88:f9:c2:86:
38:2b:7c:04:fc:52:b2:b6:21:9f:ef:f9:43:02:f8:
c4:4b:49:25:81:8d:7d:d8:52:86:bd:41:a9:9f:31:
51:c9:4a:6b:bb:fa:5a:f8:37:1a:ca:57:8e:8d:3a:
4d:d6:4d:ba:4a:95:15:6c:6b:7b:66:4d:8f:e2:d7:
ae:9b:41:82:b0:05:76:3e:40:19:9c:e6:c2:ab:f2:
68:08:0d:3a:32:2d:e3:2e:92:75:36:f5:25:84:a4:
28:05:7b:71:dd:63:46:81:68:6e:13:2c:d8:a7:74:
9e:bb:d9:63:69:58:be:7a:ff:4d:d8:e3:99:a2:90:
10:c0:86:4c:95:85:ec:ec:dc:56:dd:df:69:2f:52:
ca:f6:6b:1c:08:3b:0b:8e:d3:0b:43:6e:03:15:fe:
cf:a0:05:0a:51:f4:f0:22:4d:ed:39:b0:ce:37:c2:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:46:E8:31:9D:C2:5C:8A:B6:5B:30:E0:B5:B8:BE:AB:03:05:59:06
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a4:c3:a4:99:8b:0b:b7:51:d3:f3:13:bf:11:d1:70:1d:96:
17:b3:b7:67:d6:85:1d:fc:26:d8:6d:76:28:bd:77:40:7e:58:
c1:ae:5b:22:f4:80:18:f1:e3:0f:61:2d:57:78:34:31:7b:52:
98:ba:d2:a8:97:17:a2:42:d5:a9:a1:ab:d9:b2:70:dc:9a:2e:
0d:53:21:12:4a:9a:40:84:76:d9:15:06:1e:48:c7:13:a2:aa:
69:1b:54:4c:da:ef:fa:7d:5e:7f:8e:30:dc:c3:af:9c:bd:e9:
b5:a8:72:78:2d:51:3b:f3:2b:6c:dd:e3:98:db:15:b7:1e:90:
0f:73:25:13:2c:35:04:77:60:8e:9a:ea:86:d0:4f:40:e5:96:
63:12:0a:fc:94:f6:31:77:2e:ad:a5:97:f2:cd:35:4d:43:93:
65:6d:56:99:a4:e1:5e:23:f0:fd:00:14:40:39:e5:5e:c7:bb:
b6:04:93:82:9f:f4:16:d5:5f:2d:94:e4:30:c3:a4:77:f0:a1:
67:71:d5:0a:52:e7:95:53:c7:fc:5e:e2:cf:6b:74:5d:bf:4a:
82:0d:45:c0:af:68:4e:1b:aa:53:e7:0e:80:8f:3d:9d:d7:d5:
67:27:08:43:fc:61:21:6d:dd:5e:a5:2a:e0:60:ac:52:42:2f:
c8:57:9f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:18:15 2026 by rpki-client