Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: vGxX/zW9YiaNxBBkCi0hk6SYSPzyR7i3uz+CPctzYYc=
Subject key identifier: 5F:5A:92:A9:07:AB:6A:C0:ED:30:63:12:7A:56:6A:A6:90:3D:0A:E6
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 01A1D9EEE25614399FACCA8C740041DAC8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 1AF7
Signing time: Sat 14 Nov 2026 12:01:13 +0000
Manifest this update: Sat 14 Nov 2026 12:01:13 +0000
Manifest next update: Sun 15 Nov 2026 12:01:13 +0000
Files and hashes: 1: 3rjMBVFe8uKBxeuV296UIWDteN0.roa (hash: BWIf1Yq2kYJ+acS7y1zpLt/FLnKlwt4+VzDbiu9Tn9U=)
2: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: EQZ9LqAQkc4DQKitnBprxYIzHPUIpWnRrbzsvuYG2Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ee:e2:56:14:39:9f:ac:ca:8c:74:00:41:da:c8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Nov 14 12:01:13 2026 GMT
Not After : Nov 15 12:01:13 2026 GMT
Subject: CN=5f5a92a907ab6ac0ed3063127a566aa6903d0ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:13:e3:b9:00:5f:53:9e:09:c5:fd:fc:10:
52:ac:4b:07:9e:de:ef:c7:8b:c1:ad:fd:51:e4:ed:
46:51:76:3d:b9:41:55:e8:b4:f3:bb:83:e6:e0:39:
b1:3c:05:b2:7d:cb:e2:db:9c:12:32:5f:b7:6d:69:
80:d1:82:43:56:9e:fe:52:35:b7:5a:05:73:a9:eb:
3b:2c:03:7b:67:23:b1:76:18:82:6a:3f:58:76:ad:
d7:bc:95:1a:ae:ff:0d:00:73:b8:1a:93:08:21:5c:
33:65:82:5a:ee:a6:f3:f4:65:f3:eb:a6:26:dd:0d:
a1:b1:aa:a9:99:d1:9e:3a:ef:1d:ba:f1:0d:30:7e:
aa:b3:57:d6:d4:88:e2:1f:d1:63:ed:1e:27:65:d9:
8f:1c:de:c7:de:21:e4:d7:53:31:ec:53:22:de:89:
e5:cc:bb:40:43:7f:50:76:50:12:df:82:04:d3:5b:
b3:90:68:f5:4f:d3:73:1c:2b:5d:a9:87:cf:e7:73:
92:69:50:96:c6:5d:dc:5f:74:76:f4:fa:6e:c6:94:
3c:1c:5d:b8:9d:68:57:08:87:01:14:a1:ce:e2:79:
77:c5:ea:39:c5:30:c9:86:6a:c3:c7:33:16:d7:c5:
52:d8:7d:82:ee:8a:5e:c1:bb:a6:43:f6:9a:6f:db:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5A:92:A9:07:AB:6A:C0:ED:30:63:12:7A:56:6A:A6:90:3D:0A:E6
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f8:72:fe:36:5a:59:19:fa:23:84:fa:40:39:be:9d:18:50:
9f:17:73:72:20:bc:04:ef:a5:53:51:6f:a9:5c:1d:56:15:d4:
da:23:61:b9:93:b4:74:7d:82:27:2d:86:5a:82:83:83:92:72:
fc:32:9e:3f:57:96:40:a1:90:d1:3e:71:e6:45:99:69:b3:4a:
fc:b3:59:98:d9:2f:e6:35:43:92:2c:f2:ea:ff:95:b6:b0:d7:
7d:f2:8e:d3:1d:82:5a:58:6f:21:cd:ed:9b:d8:01:79:2f:4c:
39:10:29:20:8e:ef:09:98:20:a6:a6:60:72:6c:7e:e2:f7:83:
d6:a0:8b:e2:ad:55:eb:80:3b:81:4f:05:43:bf:53:b7:cd:06:
7a:dc:d1:48:9d:00:28:2b:87:ab:bd:83:39:9c:ec:61:7e:56:
3e:91:ed:8c:64:30:07:6d:37:6f:3e:41:6a:99:29:e1:16:2f:
f2:93:cb:57:08:fd:5b:8d:2f:98:2a:da:40:72:19:63:91:43:
55:d7:b6:ca:47:d9:4f:3d:2c:a7:01:72:86:12:a7:14:f3:18:
10:53:97:74:8c:14:31:94:3d:a0:e8:54:b0:d5:a1:04:b7:70:
d7:49:00:7b:8c:14:71:bf:5d:0a:f1:38:d8:15:9a:69:17:49:
70:21:5c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:46:30 2026 by rpki-client