Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier: aGqOCdnWYJv8gDMmqLhwcfwM7PlyonyJLW1/pkN8VLs=
Subject key identifier: 61:5F:F5:BF:D6:91:7E:5E:05:B7:88:BB:44:9F:23:DE:4A:B1:35:E8
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial: 01A12955EBBC795B1105272456EA77C850C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 05:00:59 +0000
Manifest this update: Sun 11 Oct 2026 05:00:59 +0000
Manifest next update: Mon 12 Oct 2026 05:00:59 +0000
Files and hashes: 1: geYG7jgB_IZyvx4sV17jbEgt41M.roa (hash: qoLpQdomqm+vqekuFSAQcJ4kiUnpRFshCLt0DR6rKD4=)
2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: 4c0dJ1YEreXRAZDzN3lAJt9KiJv7YVKQXOzOBbJmihM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:55:eb:bc:79:5b:11:05:27:24:56:ea:77:c8:50:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Validity
Not Before: Oct 11 05:00:59 2026 GMT
Not After : Oct 12 05:00:59 2026 GMT
Subject: CN=615ff5bfd6917e5e05b788bb449f23de4ab135e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:36:97:45:84:75:dc:ae:a1:6d:05:6e:87:
cc:87:a8:c4:ae:70:22:63:6f:9e:03:6a:64:f8:84:
78:ee:12:c0:9d:7b:69:3d:fd:98:12:96:ee:eb:9c:
53:ab:51:6a:1f:a4:d3:a8:75:b8:7d:98:ec:05:60:
93:97:06:f2:6c:bb:90:d1:b7:eb:53:4d:d1:8e:6e:
e7:03:2c:36:93:48:79:01:43:d7:77:a0:cc:4f:0a:
54:67:82:7e:a6:39:db:ae:ed:6e:a2:3b:24:81:60:
fd:cb:59:47:52:b1:b5:a4:09:ed:38:e4:1a:e5:18:
9a:11:12:18:2d:09:57:58:a6:a2:fb:8c:46:6f:de:
56:9c:20:f9:17:54:5d:be:b1:b9:72:3b:9a:82:4c:
2c:04:82:fa:de:42:8a:52:a7:66:30:09:7a:02:9a:
ef:fc:6e:9d:6a:fb:c7:ed:6f:be:6b:08:ce:f4:4f:
d7:d0:a4:ad:54:5a:4c:6a:23:d5:21:41:d6:e3:cb:
43:f8:55:b6:ce:6d:eb:f3:ad:b3:92:a0:27:5a:f4:
6e:b1:7e:bf:d6:46:4c:4f:8b:a8:64:a1:e7:79:7c:
a8:09:88:0d:a0:1d:47:71:b2:2d:25:80:2a:6d:d6:
33:06:bc:3a:fd:a3:12:8c:d4:2f:91:5d:7c:c9:59:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5F:F5:BF:D6:91:7E:5E:05:B7:88:BB:44:9F:23:DE:4A:B1:35:E8
X509v3 Authority Key Identifier:
keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f3:b0:03:73:ba:a9:b9:d1:b8:26:9c:e1:01:fb:1b:76:a9:
2a:84:e7:21:d7:01:89:cf:75:81:4d:46:c3:50:b3:f9:4f:d4:
61:7f:d7:3f:ce:22:9b:a1:bc:b2:9d:fe:06:a3:78:3b:02:28:
cc:57:24:d3:21:9e:74:fd:60:80:3a:f1:c8:7e:40:14:07:85:
d7:42:12:31:3a:b7:05:2c:6e:63:86:67:00:9a:18:c5:5c:a6:
79:5b:9a:09:e8:81:3b:33:7a:6b:2b:0d:18:dd:6b:2e:1f:72:
9b:f8:6e:50:55:8c:55:4d:60:0b:38:28:59:c5:9a:a8:3d:54:
da:66:ff:e2:51:0a:46:03:0c:48:9d:c3:36:50:06:50:59:5b:
69:63:be:09:da:ee:5b:75:99:0b:0e:92:66:2c:f9:c1:ef:a0:
d0:94:b6:c8:4c:5e:fd:64:69:29:64:dc:b2:45:d5:f2:da:25:
84:22:cb:fc:b0:64:76:12:79:f4:32:8a:26:33:12:df:c0:cd:
39:21:f0:0f:5b:c9:b2:47:cb:df:d0:2a:25:db:c6:d7:3b:2c:
63:bc:9b:ed:68:53:e7:e9:5c:7e:b3:bc:63:d3:5e:8e:02:c1:
bb:f9:ce:34:49:18:e6:a7:06:f9:77:d2:9a:66:c2:fd:23:cf:
f3:b3:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:37:15 2026 by rpki-client