Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: HMGRkdtiq9EZRZ747oZmjGa5e9aU2Uwjg4ZvHjuWhcI=
Subject key identifier: 2E:92:0C:45:28:EB:7A:25:86:34:87:3F:69:53:D7:B6:68:80:83:AF
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 019D28BB4247AD5666CE85CCC1C82235AD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:00:53 +0000
Manifest this update: Thu 26 Mar 2026 06:00:53 +0000
Manifest next update: Fri 27 Mar 2026 06:00:53 +0000
Files and hashes: 1: 3rjMBVFe8uKBxeuV296UIWDteN0.roa (hash: BWIf1Yq2kYJ+acS7y1zpLt/FLnKlwt4+VzDbiu9Tn9U=)
2: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: FveapO4/Tz74wnHNtfvYSjG1enARfRDN4PzshOJhSPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:42:47:ad:56:66:ce:85:cc:c1:c8:22:35:ad:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Mar 26 06:00:53 2026 GMT
Not After : Mar 27 06:00:53 2026 GMT
Subject: CN=2e920c4528eb7a258634873f6953d7b6688083af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:65:e0:57:ef:9c:0d:26:bc:58:79:30:9f:
a0:f9:21:4f:11:74:92:cf:f2:6f:71:af:9f:bc:f1:
77:1f:ac:28:9a:30:80:ff:5f:b1:e0:e3:d2:e3:7d:
21:1d:9a:b5:d0:44:6f:5c:38:53:a1:51:b6:6d:cc:
d0:28:c7:75:49:02:3b:a4:17:2b:6a:9c:34:a5:08:
d6:95:f8:89:7c:e6:e9:1d:99:11:b6:46:a5:ab:2e:
e5:7f:21:db:89:00:44:a3:e6:72:4c:13:65:f4:d3:
d9:cf:45:8f:59:43:76:4c:28:92:a1:78:5d:43:65:
4d:2c:b8:0c:67:88:fa:6b:c7:96:10:65:c7:fe:a6:
81:fe:19:50:86:9a:b1:bd:ad:2d:2f:dd:8b:aa:5b:
5b:b2:ca:19:78:46:96:83:42:32:aa:36:64:50:d9:
c4:41:a9:a7:14:c1:54:bf:45:ea:48:b7:b4:0f:dd:
ca:ab:db:e1:bd:b9:ba:56:79:b9:8e:52:f6:66:60:
6d:fc:23:07:31:09:3b:02:11:65:c7:52:15:44:16:
4a:96:44:05:26:0a:81:51:0d:9a:a7:c2:bc:28:68:
fd:23:24:30:e6:15:64:09:4d:96:83:2f:ac:46:a6:
74:96:d3:ac:8e:1f:f8:dd:33:b4:9c:dc:9d:2b:7f:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:92:0C:45:28:EB:7A:25:86:34:87:3F:69:53:D7:B6:68:80:83:AF
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:94:46:ca:a8:9b:f5:f7:07:11:66:37:8c:8d:43:d3:88:3c:
c0:65:75:b4:20:35:58:32:20:3e:ab:91:f7:4d:a6:55:35:2d:
80:0b:ac:28:ae:22:e7:fd:bc:47:81:63:f1:c9:4e:33:75:3c:
19:b7:a9:50:66:29:df:d1:b4:3d:f3:db:d6:e6:f0:09:6c:71:
14:7b:45:58:ea:b6:fa:bd:1a:43:5c:a9:99:4b:e6:77:ad:4f:
11:d5:9c:9e:24:5a:fc:4b:11:c6:78:84:3e:41:43:36:cf:3a:
2a:8f:8e:27:83:25:cf:4c:53:13:16:58:5c:ab:71:5f:b0:d6:
f5:c2:7f:ce:d0:36:a3:8f:05:1b:0c:46:9b:4e:84:37:48:aa:
b6:cd:db:ae:77:1d:fb:30:47:27:55:cc:d5:c8:df:00:73:90:
d2:9c:87:2a:9f:12:69:18:4e:fa:31:7a:64:20:ea:4b:e9:06:
c7:15:37:b5:4a:9c:9a:92:d2:5e:d3:46:05:08:ee:87:a4:c4:
2f:4a:f8:5e:9f:08:94:ea:16:2c:66:88:dd:e7:c6:ae:fc:28:
0b:73:c6:54:7d:54:77:6e:1a:5c:23:09:a6:b4:01:ed:74:5e:
14:17:de:7e:ad:97:b8:97:4e:7b:bf:98:75:91:43:dd:5c:11:
fb:51:c3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:18 2026 by rpki-client