Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
File: Lokc9xG_fhxC4ILWoviaBL7rldE.mft (raw, json)
Hash identifier: IvmoEY6pDXd52XUXKWU9jvn28CRD9V1MUN+x8u7imFI=
Subject key identifier: 6D:E0:03:EC:C4:ED:66:E6:A7:0C:EF:C9:C2:56:B1:F6:52:19:82:07
Authority key identifier: 2E:89:1C:F7:11:BF:7E:1C:42:E0:82:D6:A2:F8:9A:04:BE:EB:95:D1
Certificate issuer: /CN=2e891cf711bf7e1c42e082d6a2f89a04beeb95d1
Certificate serial: 01A124D42B313978D00E14619CEDDF688D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
Manifest number: 069C
Signing time: Sat 10 Oct 2026 08:00:46 +0000
Manifest this update: Sat 10 Oct 2026 08:00:46 +0000
Manifest next update: Sun 11 Oct 2026 08:00:46 +0000
Files and hashes: 1: Lokc9xG_fhxC4ILWoviaBL7rldE.crl (hash: BGUJw47ueMTqdueU3tqQsU6PTOgEXLbt5lj1O44F4Tc=)
2: OFL0pfnWQKyP_vdNpruCki1Xn3o.roa (hash: N72V/YW8dr+6ZHypwJat0/c3Tm+0yEOrcJpyLdW7Gso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:d4:2b:31:39:78:d0:0e:14:61:9c:ed:df:68:8d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e891cf711bf7e1c42e082d6a2f89a04beeb95d1
Validity
Not Before: Oct 10 08:00:46 2026 GMT
Not After : Oct 11 08:00:46 2026 GMT
Subject: CN=6de003ecc4ed66e6a70cefc9c256b1f652198207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5a:9b:c6:01:a1:35:e0:c0:e7:4f:9e:b5:33:
1b:57:4c:6e:ab:d2:5b:22:95:85:98:0b:44:90:73:
81:8f:66:07:a3:f1:6b:bb:02:62:8d:83:77:ce:ae:
41:fd:cc:66:e1:22:a5:bd:11:97:7d:b8:cc:2c:d2:
7e:e3:c5:ab:03:46:09:1c:75:13:93:ee:1d:97:f0:
35:ae:2d:ed:25:88:34:77:75:15:59:d2:d5:c1:07:
7b:63:6e:a7:d9:b4:f7:6a:81:b8:44:d7:a6:31:39:
fc:ec:1b:c4:47:05:d9:7e:35:4c:f3:c5:d4:99:4e:
9d:44:d6:35:f9:24:7f:10:38:ab:e4:49:1d:46:34:
39:b2:12:e7:e6:5b:96:e6:91:65:28:36:f8:b1:e1:
e2:7d:38:3f:43:1e:a3:b7:96:63:37:2b:21:64:40:
1d:63:00:42:24:36:60:44:11:9d:23:35:73:c6:88:
28:e9:c5:f7:ad:f9:fc:bc:66:63:da:cd:f5:2a:6e:
62:63:78:ac:16:d4:be:88:12:59:e6:8a:ac:a3:a9:
a0:40:c6:c3:b0:09:b1:34:8b:a7:09:ea:69:ad:26:
81:55:39:dc:2f:71:3b:15:b4:83:ab:e0:84:16:be:
32:c7:5d:e2:12:f6:35:7c:ae:2b:f4:06:cb:af:6a:
d6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E0:03:EC:C4:ED:66:E6:A7:0C:EF:C9:C2:56:B1:F6:52:19:82:07
X509v3 Authority Key Identifier:
keyid:2E:89:1C:F7:11:BF:7E:1C:42:E0:82:D6:A2:F8:9A:04:BE:EB:95:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d9:8b:fe:8d:a9:1a:69:e3:19:b8:d9:28:9a:c5:aa:d2:b6:
6f:bc:b9:7f:0f:5f:e7:81:24:ef:54:a7:40:dc:a3:61:10:22:
fd:00:49:59:4a:60:02:8e:01:f8:91:97:d8:90:88:27:01:40:
fa:e7:95:5b:68:f8:96:9f:0d:85:76:b0:c7:c9:94:0b:23:36:
f5:34:8d:b1:e4:85:06:d0:08:60:bb:fd:23:e6:4f:07:86:a3:
81:f7:16:e7:5e:dd:30:73:c3:fa:2a:4f:12:3c:4d:12:f4:bc:
3c:e4:de:50:a9:db:32:2c:70:3f:9e:ae:a9:1d:44:7b:ef:a4:
95:ea:9a:ca:9a:35:b4:c9:c9:63:ce:cf:d6:f8:7f:97:41:b7:
e5:b3:e5:a4:a5:80:1b:14:1d:e7:cc:3c:94:15:59:a9:41:47:
ca:8b:da:5d:83:d9:fb:84:d8:ce:3c:dd:8b:01:79:9f:64:d9:
31:53:f6:31:83:5a:ae:0d:17:33:e1:24:f7:eb:26:c9:c7:47:
2c:13:dd:b4:ea:fb:3a:cf:c9:b4:18:e3:3b:8d:05:72:32:14:
20:e8:4c:40:8e:e2:1e:85:3a:f8:96:28:f1:f0:a5:78:e6:a0:
29:7b:d3:78:9a:91:92:7b:cd:6b:ff:c1:2a:17:f7:d7:d2:38:
88:23:ae:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:32:35 2026 by rpki-client