Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: CIZJffX3LSCka8I2H21n+YACS+eBU4gr/+q+R+Uj+BY=
Subject key identifier: 7C:82:FC:28:6A:53:0B:BD:9E:8C:50:D2:F8:90:A0:C2:E1:D5:1D:16
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 019CACEB77D2D3209769A22FA0E8D0A44F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 082D
Signing time: Mon 02 Mar 2026 05:00:38 +0000
Manifest this update: Mon 02 Mar 2026 05:00:38 +0000
Manifest next update: Tue 03 Mar 2026 05:00:38 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: AIIHjM+jwS2YtG/3IEUdydojvAFC4wX9iHj7zq0w/Ks=)
2: v2HU-O26_Ox_izyEAzWjTgSDSjA.roa (hash: oL/ObQcuILx3PCIrA6iIqY8GO/MJMz6xvPpy6djgBm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:77:d2:d3:20:97:69:a2:2f:a0:e8:d0:a4:4f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Mar 2 05:00:38 2026 GMT
Not After : Mar 3 05:00:38 2026 GMT
Subject: CN=7c82fc286a530bbd9e8c50d2f890a0c2e1d51d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:b4:26:36:74:7e:33:f3:5b:27:b2:15:63:
f4:e2:3f:f8:ee:21:15:ea:3e:21:33:78:96:82:10:
3f:39:c7:b3:0f:e4:03:0c:c6:c9:77:dd:e0:65:9e:
cf:3b:05:6b:28:69:1c:e3:c6:8f:d0:fc:eb:47:47:
d4:b5:36:8d:ad:cc:75:76:0d:6b:bc:39:e6:a0:7a:
45:ce:bb:e8:14:b5:86:44:2b:0b:34:26:41:e5:02:
bd:0a:a6:19:70:9a:ca:13:5f:d0:b5:9e:c7:d2:d1:
cc:49:db:0f:f3:78:1f:cb:80:2f:c0:8b:72:1c:ea:
9c:60:e8:93:5a:4f:8a:1e:e7:41:fa:3f:5f:17:72:
15:b6:6a:42:37:e9:e0:0c:70:38:3d:5e:1f:0d:3a:
f5:38:3d:90:12:12:c1:6f:29:12:af:06:09:9f:89:
cd:86:5c:b7:45:51:76:39:eb:fd:ea:00:86:fb:7f:
66:4d:bb:e2:e0:70:b9:87:18:e1:88:b1:c6:b7:79:
05:f7:50:69:65:d5:b0:37:96:df:e1:91:21:f9:63:
e0:e9:6b:dd:c1:23:fd:ff:92:aa:56:de:b8:9b:cf:
a9:db:21:3f:c7:fa:4a:2c:60:9f:67:cf:b5:8b:37:
bf:10:a1:72:10:29:4d:2e:0c:13:5f:dc:14:19:eb:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:82:FC:28:6A:53:0B:BD:9E:8C:50:D2:F8:90:A0:C2:E1:D5:1D:16
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:72:39:de:85:88:d7:c7:bd:b0:73:e8:36:2c:74:64:bf:9a:
6c:85:f8:84:98:60:c3:ef:05:4d:11:18:ef:7f:4b:f4:4c:93:
e5:11:26:72:1e:b7:96:21:2f:e7:1a:85:07:aa:4e:4a:7c:92:
0d:c9:c3:01:ba:4d:ea:5c:dd:70:ad:48:a9:26:7a:ef:a6:50:
61:04:a3:31:21:78:ce:bd:5c:2d:44:36:76:5d:6b:71:c8:79:
04:61:e7:d7:fd:5b:6e:0c:62:8b:cc:bb:20:b9:41:ad:71:8d:
65:41:f1:6c:a8:12:03:88:00:3d:53:2d:3c:d7:3e:01:2d:bd:
55:ad:37:3a:22:10:e2:22:5a:a5:4f:e4:7e:57:c0:e3:06:74:
d7:9d:61:80:8e:b4:0b:5d:89:4b:d9:ba:10:77:18:39:dd:9e:
0e:74:90:fa:ad:ea:32:c0:94:83:97:f9:3c:7f:6d:30:5e:a8:
91:b2:cf:46:c4:86:08:3f:5f:82:61:ec:70:69:0c:cc:be:f4:
ed:f8:14:24:5c:75:6d:0b:b5:28:4b:82:da:ca:a7:9f:5a:3a:
e9:03:da:17:04:a1:b0:ea:65:2a:e4:ac:87:19:00:ab:64:e8:
1c:d5:15:df:3a:6e:44:99:4c:02:b7:a1:a5:a8:6e:49:69:ad:
e1:66:7e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:14 2026 by rpki-client