
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
File: LosErWkLczj3wP51zzs6eFabquU.mft (raw, json)
Hash identifier: rSUDAkJwMsfJPol5h9itr8iM450611/z/e3coD9b1bc=
Subject key identifier: 0E:EC:43:DB:64:55:21:EA:A9:0E:40:37:6B:A5:F0:6A:C1:07:FD:DD
Authority key identifier: 2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
Certificate issuer: /CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Certificate serial: 019CAB6B65E77E9483711DA3D115A363E3BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
Manifest number: 12D4
Signing time: Sun 01 Mar 2026 22:01:08 +0000
Manifest this update: Sun 01 Mar 2026 22:01:08 +0000
Manifest next update: Mon 02 Mar 2026 22:01:08 +0000
Files and hashes: 1: LosErWkLczj3wP51zzs6eFabquU.crl (hash: 1RfFVngiVzX08AFns+zIulKbcyXYApVuzujkB41Gito=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:65:e7:7e:94:83:71:1d:a3:d1:15:a3:63:e3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Validity
Not Before: Mar 1 22:01:08 2026 GMT
Not After : Mar 2 22:01:08 2026 GMT
Subject: CN=0eec43db645521eaa90e40376ba5f06ac107fddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:2c:d4:c2:e6:ec:84:73:6c:e3:cb:9c:3d:
14:a8:10:7a:a3:2c:ed:fa:d9:11:59:77:ca:0a:6e:
7d:db:b4:27:79:f3:eb:bb:39:39:bb:9d:49:f1:86:
5d:7f:8c:b1:50:7a:cd:b7:8b:f4:50:29:56:9b:46:
73:35:87:43:74:03:fe:a8:05:3f:9b:9d:e5:7f:cf:
cf:02:38:66:f6:f9:59:3f:99:b0:8a:e0:2f:2b:74:
af:65:41:57:e9:97:5d:91:1d:ee:ed:d3:fb:84:ba:
32:17:00:b9:aa:01:8d:92:ad:71:e0:f3:62:fc:f3:
72:18:a2:86:e9:1a:68:d5:a6:b1:c4:8f:b4:06:9f:
0f:3b:71:fc:95:a4:92:61:31:7f:c6:41:12:73:21:
85:32:ce:62:c4:ab:7f:9c:24:b5:c6:a1:71:bd:0d:
2c:4a:0d:d4:62:cf:31:4d:90:ea:25:93:25:ab:1a:
37:9f:48:25:5c:9c:86:f7:22:61:e9:c5:c5:5a:73:
89:6c:6e:09:f7:85:10:6a:aa:56:36:f3:25:af:22:
37:63:35:5f:4d:cf:b1:bb:de:14:53:0c:31:4e:13:
69:9b:59:a5:a8:63:e0:92:86:bc:b0:2c:c6:43:2e:
f9:c1:40:25:1d:bc:16:ba:fe:93:38:b4:38:de:28:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EC:43:DB:64:55:21:EA:A9:0E:40:37:6B:A5:F0:6A:C1:07:FD:DD
X509v3 Authority Key Identifier:
keyid:2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:29:cf:d0:40:82:df:49:38:7c:69:71:fd:0f:d5:a1:d8:39:
f0:24:9c:b1:7f:cf:94:73:5c:3c:47:86:46:bc:69:3f:85:cd:
f3:4d:38:c7:52:66:79:7e:e2:fe:31:1c:26:48:bd:6a:71:b7:
2c:34:db:52:6a:e8:7c:3e:32:c0:18:c6:1a:a7:35:76:09:90:
95:c7:bd:d2:8a:19:d7:57:61:ef:4c:a7:64:76:f1:c2:da:b5:
2b:78:ee:83:44:cb:cf:cf:bf:8f:7a:68:45:cb:4f:f8:c0:6b:
a6:b9:b7:db:27:ba:36:db:f8:be:b4:b4:63:0e:6e:ac:32:bb:
1c:bb:d8:2f:5c:b7:ca:17:54:62:c7:00:57:16:e6:a7:51:84:
4f:c3:98:6d:eb:eb:a5:d0:fc:ab:e4:ba:fa:9a:75:41:9d:ad:
08:ab:a8:48:a0:2b:de:06:5f:16:11:c0:b9:dc:be:8a:cc:11:
a6:c9:ba:b7:b7:87:14:49:4b:4d:ce:dd:b1:64:53:ec:b6:56:
e3:97:e8:7f:e1:2e:dd:f3:0e:f7:96:ef:90:f3:eb:07:dd:83:
a9:23:e7:45:fa:4c:8e:6c:15:bd:3e:86:8c:f4:49:8f:cd:05:
49:f1:6f:0b:e1:16:12:cb:35:d9:d1:f2:1f:f0:8c:04:94:99:
4b:76:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:28 2026 by rpki-client