Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: saPEZQIC7goRSyLRBAaJwWSg0/gQqCFXJ+ULlDzRA4w=
Subject key identifier: 73:5D:14:15:CE:EC:83:54:2B:5E:F5:AD:9B:38:3F:E1:6E:17:EF:A4
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 01A0CD7F15CDD39470491FF98C4807D1C957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 09:00:52 +0000
Manifest this update: Wed 23 Sep 2026 09:00:52 +0000
Manifest next update: Thu 24 Sep 2026 09:00:52 +0000
Files and hashes: 1: 3rjMBVFe8uKBxeuV296UIWDteN0.roa (hash: BWIf1Yq2kYJ+acS7y1zpLt/FLnKlwt4+VzDbiu9Tn9U=)
2: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: CFXBLSJVw6/CHuogkcJWVF9SMesNmqJ2VNTr15AaPJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7f:15:cd:d3:94:70:49:1f:f9:8c:48:07:d1:c9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Sep 23 09:00:52 2026 GMT
Not After : Sep 24 09:00:52 2026 GMT
Subject: CN=735d1415ceec83542b5ef5ad9b383fe16e17efa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:f0:76:8f:3b:d1:d0:37:b8:c3:27:08:66:
0b:a1:67:41:0e:27:83:c6:4e:c4:45:77:36:c7:20:
5a:42:38:7d:d2:4d:1c:a9:45:b9:20:b0:a5:0a:a9:
00:9e:38:8f:b1:61:35:17:34:a6:7c:c5:72:f6:fa:
96:eb:09:09:57:cd:e0:9d:2c:6b:e4:02:de:00:87:
8f:16:d6:35:b4:69:98:1c:84:6c:90:b5:63:d4:db:
72:b0:f6:cb:30:c5:80:65:7a:f0:d5:ea:90:49:d5:
d1:cd:14:bc:b7:a0:bb:1b:5a:aa:1c:6b:08:be:e6:
dc:34:e9:4f:e8:ee:9a:49:8b:bd:de:00:38:5a:ae:
51:4b:dc:52:47:03:72:30:f4:8a:32:fe:31:42:99:
b2:66:07:20:21:81:46:36:d2:3d:55:47:c6:26:77:
3a:27:3d:db:1d:4e:de:73:fa:df:c5:22:67:f3:f7:
fc:38:5d:9f:c7:98:98:e6:cd:50:24:49:b5:ab:a4:
31:99:47:dd:97:37:b9:15:98:61:55:e3:2e:c9:f3:
50:4e:19:17:c7:0e:c4:c3:4b:a3:1e:5c:e3:32:4a:
b8:09:f5:0f:72:67:3d:3c:c0:93:61:7a:c7:26:70:
9b:1c:1a:92:07:11:e0:aa:6f:2b:bc:e8:4d:78:f8:
e9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5D:14:15:CE:EC:83:54:2B:5E:F5:AD:9B:38:3F:E1:6E:17:EF:A4
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:94:b1:a0:36:e7:09:27:2d:f7:4a:8c:21:63:68:a5:91:04:
e5:d2:5c:69:85:c9:a6:3c:38:a5:5c:b5:5f:c2:7e:81:fd:0a:
20:d3:9a:17:a8:0e:2f:be:48:ef:70:b7:ea:e1:55:16:84:5c:
6c:29:dd:27:a9:54:db:de:02:70:b8:c7:cb:dd:d2:d6:de:3f:
15:5c:02:ae:52:cf:98:23:dd:ec:ee:69:83:0f:29:9a:d2:47:
72:3e:7f:2c:ef:a5:bb:92:40:66:31:28:f6:a6:dc:0e:94:17:
17:b0:15:44:9d:ae:0a:35:24:50:68:a7:4b:40:36:97:7b:7f:
5d:7a:ad:6b:dd:43:85:99:1b:fe:10:df:96:71:c6:61:3a:16:
f3:46:a5:47:d8:af:20:89:49:85:d5:28:89:ff:72:97:af:cb:
70:d6:0d:20:1e:a7:57:83:de:5b:01:6f:35:b1:d0:4f:60:42:
b1:c6:3c:c9:41:a2:6e:df:67:d2:ac:3e:d9:cd:91:06:29:27:
79:35:2f:78:83:f0:8e:80:12:9f:d6:a3:38:34:70:db:b1:36:
8a:0c:55:1a:71:66:ac:de:9f:d3:e6:35:3d:5e:58:24:1b:d5:
3d:45:14:41:0a:97:b9:03:c5:05:34:4c:11:78:de:5c:88:89:
c7:22:25:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:24:01 2026 by rpki-client