Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: 2dxNwgaJKU88d6PN62jmVZw9lK5Szzgx+jumZV/Ui0k=
Subject key identifier: 8A:88:06:43:A2:AE:86:16:14:80:69:38:80:3A:D9:BC:7C:39:D1:D5
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 019E1DFE70AB3E0EBB1FA8CFD4CB1E52475F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 21:01:14 +0000
Manifest this update: Tue 12 May 2026 21:01:14 +0000
Manifest next update: Wed 13 May 2026 21:01:14 +0000
Files and hashes: 1: 3rjMBVFe8uKBxeuV296UIWDteN0.roa (hash: BWIf1Yq2kYJ+acS7y1zpLt/FLnKlwt4+VzDbiu9Tn9U=)
2: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: u29pONvYl9jZMV1IgyAWxQh1hD7s/4YvLNPzvMb6z6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:70:ab:3e:0e:bb:1f:a8:cf:d4:cb:1e:52:47:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: May 12 21:01:14 2026 GMT
Not After : May 13 21:01:14 2026 GMT
Subject: CN=8a880643a2ae861614806938803ad9bc7c39d1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:72:0b:b0:a3:33:6d:67:fc:2b:7e:0c:13:
15:cd:87:4e:66:de:c7:ad:17:c4:c4:0e:89:5a:e2:
a5:e8:b9:77:23:d5:f8:07:a3:f5:33:9f:e7:d3:0a:
0c:9e:b0:00:23:22:c0:32:74:61:41:70:76:20:9f:
46:e0:f5:3f:30:49:97:de:a2:c2:75:43:fc:2b:f4:
fd:67:61:7a:71:6e:30:6c:e8:e3:4b:50:33:80:5c:
a8:9d:56:c6:67:a2:01:19:6b:f1:9a:da:c9:b8:e6:
21:33:7b:5c:9e:e3:50:2e:fc:e3:00:a3:8a:d4:df:
fd:00:3b:55:81:bf:93:41:b7:99:ef:9e:01:dd:e1:
4a:a4:2b:b4:24:4c:55:7c:41:0f:00:1e:e4:e1:39:
ea:26:19:a1:90:71:ef:31:4a:4b:2b:88:a5:94:99:
49:6d:ec:22:63:a9:0f:67:e0:37:04:83:15:d7:8f:
e3:b6:53:70:e2:00:a3:73:0f:c2:8b:c0:97:46:ad:
98:1d:8e:bd:4e:96:14:c0:29:04:e7:a3:a3:13:94:
0a:1c:a0:29:28:af:07:f3:60:db:c4:bc:a5:83:ed:
28:e7:87:3d:64:d6:0c:ff:99:14:5a:2d:b3:fc:fd:
9e:4c:c0:ff:16:ff:19:9d:e4:bf:31:f4:12:4e:b0:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:88:06:43:A2:AE:86:16:14:80:69:38:80:3A:D9:BC:7C:39:D1:D5
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a6:a5:29:06:1e:11:ae:6c:cf:e5:b5:e2:7d:ac:a7:49:99:
25:f3:b5:5d:73:d5:b0:32:d3:57:e6:29:44:3b:61:34:b6:c9:
bb:51:04:dc:7a:17:c9:09:20:a8:58:32:21:e5:d3:2d:72:72:
80:9b:e2:a5:12:c7:22:fb:77:a2:f2:8b:58:43:ab:63:55:eb:
95:15:7d:89:76:d2:14:43:22:98:d1:82:66:eb:c0:f9:45:42:
d4:84:20:a7:6e:24:9c:1f:e6:45:34:0e:c5:54:45:c4:70:45:
77:ee:16:11:ce:d6:47:d8:8e:53:0a:ec:44:66:9a:ef:15:e1:
9c:1d:30:f8:90:54:92:c6:f9:9e:4e:de:07:4f:55:3e:d4:20:
17:01:06:d1:68:a6:6a:6b:d9:33:0b:db:86:cd:fb:df:0a:a8:
7f:d2:47:d1:5f:92:7d:c6:04:65:04:aa:50:87:14:cb:8c:3c:
17:3e:89:eb:4c:bb:21:81:86:c2:d7:c2:1f:dc:e4:88:61:a7:
ba:d9:8e:92:8e:8e:88:59:52:bd:99:92:99:3c:46:3f:07:95:
a7:b1:89:ef:a5:cc:0a:24:95:af:21:3e:f3:53:f6:9e:b7:e3:
94:3d:e0:f1:0c:f2:c9:01:79:a0:bf:17:c2:e1:b5:c7:d7:00:
4f:df:72:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/nCrPg67H6jP1MseUkdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjA5MzE1MGY0YTQ2MTAxYWNkN2VhM2EyNmJiNDM4NTEz
MTIzYjUwHhcNMjYwNTEyMjEwMTE0WhcNMjYwNTEzMjEwMTE0WjAzMTEwLwYDVQQD
Eyg4YTg4MDY0M2EyYWU4NjE2MTQ4MDY5Mzg4MDNhZDliYzdjMzlkMWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNpyC7CjM21n/Ct+DBMVzYdOZt7H
rRfExA6JWuKl6Ll3I9X4B6P1M5/n0woMnrAAIyLAMnRhQXB2IJ9G4PU/MEmX3qLC
dUP8K/T9Z2F6cW4wbOjjS1AzgFyonVbGZ6IBGWvxmtrJuOYhM3tcnuNQLvzjAKOK
1N/9ADtVgb+TQbeZ754B3eFKpCu0JExVfEEPAB7k4TnqJhmhkHHvMUpLK4illJlJ
bewiY6kPZ+A3BIMV14/jtlNw4gCjcw/Ci8CXRq2YHY69TpYUwCkE56OjE5QKHKAp
KK8H82DbxLylg+0o54c9ZNYM/5kUWi2z/P2eTMD/Fv8ZneS/MfQSTrDqCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqIBkOiroYWFIBpOIA62bx8OdHVMB8GA1UdIwQY
MBaAFJUgkxUPSkYQGs1+o6JrtDhRMSO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQt
ZTgwNGRjYmRkNzYyLzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQtZTgwNGRjYmRkNzYy
LzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaalKQYe
Ea5sz+W14n2sp0mZJfO1XXPVsDLTV+YpRDthNLbJu1EE3HoXyQkgqFgyIeXTLXJy
gJvipRLHIvt3ovKLWEOrY1XrlRV9iXbSFEMimNGCZuvA+UVC1IQgp24knB/mRTQO
xVRFxHBFd+4WEc7WR9iOUwrsRGaa7xXhnB0w+JBUksb5nk7eB09VPtQgFwEG0Wim
amvZMwvbhs373wqof9JH0V+SfcYEZQSqUIcUy4w8Fz6J60y7IYGGwtfCH9zkiGGn
utmOko6OiFlSvZmSmTxGPweVp7GJ76XMCiSVryE+81P2nrfjlD3g8QzyyQF5oL8X
wuG1x9cAT99yWQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:09:36 2026 by rpki-client