Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
File: LOlVOpsse8oStoG8CmMF4z-2QMg.mft (raw, json)
Hash identifier: WwDcTTBzJ0TatdpScLVnjU4dm9OdFiRBwpHilktN0SQ=
Subject key identifier: A8:64:A4:0B:AE:0A:1F:43:01:BD:F8:9C:35:77:CB:84:39:47:40:94
Authority key identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
Certificate issuer: /CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Certificate serial: 019CAAC65FBF4C24E9EC029ABB16CA189187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
Manifest number: 0FC2
Signing time: Sun 01 Mar 2026 19:00:53 +0000
Manifest this update: Sun 01 Mar 2026 19:00:53 +0000
Manifest next update: Mon 02 Mar 2026 19:00:53 +0000
Files and hashes: 1: LOlVOpsse8oStoG8CmMF4z-2QMg.crl (hash: tJOUMyvxos+HhHNDq7uHcgC0f2lRYNaLmETfqFkQ2N4=)
2: e_3edax3nVApnXX6Ql-HaBUFYsk.roa (hash: plfv9lLAOWXkEtBe+nkrBg1kl1yDXbUCwGhl2Bs8lcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:5f:bf:4c:24:e9:ec:02:9a:bb:16:ca:18:91:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Validity
Not Before: Mar 1 19:00:53 2026 GMT
Not After : Mar 2 19:00:53 2026 GMT
Subject: CN=a864a40bae0a1f4301bdf89c3577cb8439474094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:5f:72:76:57:1b:48:5a:ed:79:f3:10:0a:
21:4c:ab:9d:3f:86:82:85:39:f6:af:ca:f4:a0:6e:
65:ca:bf:76:0a:60:86:b9:e0:9f:33:6c:8e:06:bc:
06:b0:1e:8b:58:f5:5c:f0:a0:69:0c:f6:61:16:55:
d9:f2:53:15:39:67:ba:a4:3e:69:d3:ea:a4:9c:b8:
3d:ca:f3:14:1d:95:c1:ac:8f:61:3d:2a:d8:bd:ae:
66:ef:5d:fa:0b:6b:ef:f0:cc:2d:44:ac:31:b9:a1:
bf:28:aa:66:b0:46:df:ef:92:aa:04:0b:5c:2a:45:
41:1e:c1:6e:21:4a:b0:84:98:fb:53:d2:97:95:b1:
f5:b7:df:b1:3a:b3:54:e7:97:fa:76:35:99:51:08:
c0:a5:3a:77:46:75:5f:c3:1d:00:7d:b9:65:01:c1:
40:f6:39:41:88:28:86:43:a5:07:69:df:b3:1d:e8:
0f:40:6b:ad:62:7b:5d:8c:fb:cb:28:db:cd:cb:71:
83:03:6d:c9:ac:47:bc:d3:94:00:de:76:95:52:d9:
84:b5:eb:7d:bb:55:37:93:22:0d:05:25:4c:39:24:
86:39:a6:a2:b0:40:ec:0d:11:1d:6e:b2:58:49:89:
93:f0:f5:35:63:12:ba:83:0f:0f:4d:30:14:2a:78:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:64:A4:0B:AE:0A:1F:43:01:BD:F8:9C:35:77:CB:84:39:47:40:94
X509v3 Authority Key Identifier:
keyid:2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6f:f5:98:ad:0e:fb:c3:51:c3:44:dd:07:5c:a4:54:f9:32:
a2:7d:4b:2d:cc:24:2e:22:09:b8:65:22:b5:73:59:42:bc:05:
34:fd:a5:21:8f:29:84:5b:3e:e4:0a:21:42:91:93:36:c3:9e:
80:c8:57:5e:ec:ec:3b:45:b0:90:4a:32:e1:21:bc:8d:27:e0:
87:d4:30:8d:e4:c0:5a:aa:60:f2:6c:96:a7:7d:e6:3c:b1:6b:
24:ea:c4:9f:03:2c:33:d7:f5:b3:82:47:62:a4:fc:ea:b0:44:
ad:75:b1:f1:4d:26:97:44:df:ff:e3:d7:e0:67:dc:12:d5:98:
24:77:94:f4:c8:5d:86:4e:f2:89:bc:a2:71:a0:0f:68:da:9c:
2d:75:b8:4e:ca:c8:d6:31:e5:75:2d:28:c8:27:55:07:ee:e2:
a7:93:80:b3:f6:d0:47:7f:98:54:7c:40:5c:2d:c3:da:1f:f3:
c6:fd:4d:3e:66:29:d0:37:e2:25:a9:e8:f1:27:52:8d:a8:de:
ec:83:f1:ae:b9:8f:10:5b:a0:4d:5e:bb:7c:9c:88:60:be:7e:
a3:9e:eb:54:0b:0f:19:e7:87:8f:5f:9a:17:5f:a7:95:31:28:
55:34:da:21:4f:bc:79:3c:4d:dc:d4:19:7e:97:58:17:0e:67:
74:4f:aa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:52 2026 by rpki-client