Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: S+LIx2H5sX9o+W9k+SRMUADaBW/9t79b/XDMx6bZOKs=
Subject key identifier: 37:65:56:54:77:1F:D1:57:5B:54:09:71:4D:91:01:09:C7:19:D1:1F
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 019D988688E52025D33C92D2B2C6FF9C4B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 08A7
Signing time: Thu 16 Apr 2026 23:00:46 +0000
Manifest this update: Thu 16 Apr 2026 23:00:46 +0000
Manifest next update: Fri 17 Apr 2026 23:00:46 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: zUZTe/Fl4TvOwPJpQc5esMjqHYW35W3etlE1x2Weixs=)
2: v2HU-O26_Ox_izyEAzWjTgSDSjA.roa (hash: oL/ObQcuILx3PCIrA6iIqY8GO/MJMz6xvPpy6djgBm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:88:e5:20:25:d3:3c:92:d2:b2:c6:ff:9c:4b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Apr 16 23:00:46 2026 GMT
Not After : Apr 17 23:00:46 2026 GMT
Subject: CN=37655654771fd1575b5409714d910109c719d11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:fd:69:01:3d:15:48:90:29:c8:52:7d:ca:
4f:d2:0c:30:ee:76:3e:ca:db:82:08:f6:81:e6:16:
6e:c9:19:d3:23:cf:8d:bb:62:50:2c:58:a8:5a:3c:
38:0d:4b:3c:cf:c0:4f:fd:a8:c9:5c:73:58:ea:72:
2c:04:59:e4:3b:6e:e7:4f:66:62:96:f5:3a:9c:3e:
ff:98:89:f2:69:3e:65:70:f8:a3:36:56:c0:cf:d7:
99:07:7a:88:f4:37:0b:64:7e:37:c4:71:be:6f:09:
4a:06:bc:f7:8d:5e:51:cd:a6:85:09:4e:d3:53:a9:
33:cd:0f:15:8a:db:32:73:92:38:de:ed:eb:27:f8:
84:c0:8e:c9:46:2a:07:40:2e:68:b8:8c:c3:e9:0f:
4c:4c:8e:1f:34:62:96:83:b6:1c:4d:f9:4d:e6:e5:
e9:da:93:6b:7c:cb:f6:4d:d3:91:d6:5a:f2:18:b7:
e3:e9:ea:20:42:fc:13:ab:1f:76:50:20:27:85:51:
a6:26:09:2a:6f:f3:60:00:22:5a:bb:c3:71:82:0c:
72:d7:2d:9c:d0:e5:ff:2c:84:76:eb:06:01:21:8d:
a5:53:40:b8:b3:0f:ff:57:cc:83:7c:a0:b4:38:8a:
36:68:39:32:b0:d5:3e:7f:55:d4:66:61:d4:84:85:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:65:56:54:77:1F:D1:57:5B:54:09:71:4D:91:01:09:C7:19:D1:1F
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3b:ae:19:40:26:2f:d9:0d:32:fc:4f:e2:13:da:b0:46:e2:
54:f1:75:09:c7:9b:a9:fd:7f:96:18:d7:62:71:7f:b2:94:81:
fc:a7:fc:b5:7a:73:20:41:c8:bc:0f:4b:88:1a:0e:82:5a:fe:
d7:72:3d:04:2b:a6:b6:39:66:e0:8d:af:95:91:21:20:08:b0:
e7:37:db:c9:f0:b4:05:09:53:a1:be:75:6c:5f:f1:0a:fe:d3:
83:55:aa:30:1c:0c:fb:83:64:f1:66:a1:9b:2f:90:88:4d:06:
d4:c7:7b:00:9c:c2:09:7a:07:3f:05:84:a7:24:1e:fc:6e:ad:
fc:47:1e:d3:c9:d3:9f:7d:95:f5:f3:97:21:3c:2b:59:bd:52:
6c:ca:d5:38:e9:b7:54:94:d8:a2:bb:2b:c3:8b:62:ad:f1:db:
1b:bb:0f:30:44:2f:96:ce:f1:2c:dc:f1:5a:5a:4b:71:c9:d0:
72:98:e4:cf:7d:80:e6:32:20:ca:7e:f9:4d:a4:44:d1:53:f1:
54:5e:f4:74:a8:42:d3:ba:9f:71:6c:a2:8c:49:0b:9e:7c:2f:
9a:57:28:96:83:f9:f2:17:2c:7c:6e:73:db:cf:cd:af:b5:df:
ae:46:19:2b:2c:03:6e:a8:96:9a:6e:c9:5b:46:03:08:ac:20:
c6:97:dc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:19 2026 by rpki-client