Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
File: lSC_jHciaj-ojr4RzI8RacxWCnk.mft (raw, json)
Hash identifier: cle6Xrdy+JnC82B9KMRadMFMHddXeFjCiy3mt6526zY=
Subject key identifier: 88:75:C8:02:12:14:3E:29:26:8B:03:BF:76:54:08:A7:3F:B1:A6:34
Authority key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
Certificate issuer: /CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Certificate serial: 019D28842BB461CC31F17E0436310475B435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
Manifest number: 0FA1
Signing time: Thu 26 Mar 2026 05:00:43 +0000
Manifest this update: Thu 26 Mar 2026 05:00:43 +0000
Manifest next update: Fri 27 Mar 2026 05:00:43 +0000
Files and hashes: 1: 1-4k_j5tlYDY-0PvjETD04LazkDs.roa (hash: dUn8gRxx7kqyKB4xZnZt/reCOUYtE+UapqvIfJ65GYw=)
2: lSC_jHciaj-ojr4RzI8RacxWCnk.crl (hash: yrie1M8HohRJB713v9bJeKUoBQZo6IvIVbZmh6uZlY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:2b:b4:61:cc:31:f1:7e:04:36:31:04:75:b4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Validity
Not Before: Mar 26 05:00:43 2026 GMT
Not After : Mar 27 05:00:43 2026 GMT
Subject: CN=8875c80212143e29268b03bf765408a73fb1a634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:87:52:90:12:5a:95:6b:70:3e:00:ed:31:
b5:b9:33:66:3e:f5:44:f5:7e:12:f7:8f:a8:44:b1:
ec:bb:01:5e:b9:13:55:51:a7:a7:da:c3:23:de:e5:
68:81:f0:cd:ea:81:7e:b0:8f:79:0d:5c:72:90:6d:
72:9d:98:97:59:f4:7a:a0:53:f5:15:12:6b:e6:48:
2f:cf:c2:05:12:53:25:44:5a:30:e9:39:44:82:7a:
b2:c4:2c:ef:79:c7:1e:c8:8a:a6:19:aa:4b:7e:b0:
b2:2b:fe:ff:41:8e:09:7a:e5:e0:29:a2:f6:fe:ad:
4a:71:77:21:62:e3:5e:ba:b0:92:85:74:d9:21:09:
94:03:c4:2a:c4:a8:20:7b:89:09:77:a0:e2:af:32:
7d:d9:f5:07:76:dd:d6:9d:5a:86:03:54:de:94:37:
43:97:b9:d6:a6:bc:61:72:16:0f:74:0c:b1:0c:b8:
4d:50:c3:de:94:e5:f3:75:90:0c:57:80:a0:e2:60:
19:d4:4a:8f:7d:5c:46:52:8c:0d:a8:69:e8:e7:c6:
a5:6c:39:7e:25:ec:a5:4e:e8:66:a1:5b:d1:94:6a:
dd:0f:c2:b4:35:2f:d5:5a:07:92:eb:76:dd:e3:72:
c4:4d:72:2d:ce:8b:12:bb:87:2f:e5:11:5b:3e:06:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:75:C8:02:12:14:3E:29:26:8B:03:BF:76:54:08:A7:3F:B1:A6:34
X509v3 Authority Key Identifier:
keyid:95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:73:c3:3b:56:c8:db:3e:cd:4e:b3:ca:9d:d2:0b:fd:c9:46:
a0:54:5f:c0:cb:95:30:c0:69:bc:37:8a:d9:c8:0d:16:36:b2:
52:b2:47:4b:f5:5f:98:34:c5:47:15:3f:bc:3e:55:47:c9:3a:
1f:dc:ce:47:32:74:1c:97:e4:80:fb:a5:ec:9f:6b:7d:32:1c:
6d:b5:72:fe:73:ce:57:12:24:82:7c:36:1a:be:05:d9:87:cf:
f0:54:b0:ff:02:a0:ff:c5:35:27:a7:dc:07:04:52:bf:23:bd:
54:9d:b7:1e:85:28:09:2c:79:40:00:41:c5:2c:22:1d:18:77:
82:9b:d7:58:8b:72:a4:eb:f8:5d:b8:3b:c0:de:57:e5:be:ea:
fb:3f:59:6c:8e:5e:12:1a:f9:08:58:64:e4:81:5a:52:45:70:
04:22:02:11:54:84:72:0c:ba:dd:62:48:2a:eb:29:74:ac:11:
d4:6e:92:13:68:9f:26:b0:9d:f0:8c:91:38:2d:a6:7e:5a:54:
f4:2b:67:6c:15:20:97:6e:7f:5d:6a:69:a1:7d:6d:4a:d9:2b:
aa:6b:7b:76:cc:45:ec:33:80:2a:7a:5d:7c:46:13:74:eb:76:
7d:dc:d7:57:c7:25:b0:2a:86:8d:6c:7c:b9:2a:12:9b:8a:33:
d9:5f:0f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:23:08 2026 by rpki-client