Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
File: lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json)
Hash identifier: cNyEheW1NkSI6kjM9LbpsTN2FDEVm19x+6KK6kzZNfQ=
Subject key identifier: B4:E7:19:C8:EE:4A:C2:2E:7F:0C:96:4F:6F:43:43:43:38:28:30:03
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 01A0C0D587E50335C4C033C9956F9A08C557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
Manifest number: 1910
Signing time: Sun 20 Sep 2026 22:00:14 +0000
Manifest this update: Sun 20 Sep 2026 22:00:14 +0000
Manifest next update: Mon 21 Sep 2026 22:00:14 +0000
Files and hashes: 1: X52z7I8LU_F06bTG6wIq551tUBA.asa (hash: tPwUMb96PRYOGL7U42nGY4e6LgAf5Gbmjk9QWMHzIqY=)
2: Xq3SuMnZU62smroRMp98U4xq9mc.roa (hash: XEObqeJ3NLPZAeeZJznW5UF99OAYc4+AxleAkXeNlyo=)
3: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: uAwxgADNajYytAaJx8pW5qzMhr4agNyYIo9jSC5kyzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d5:87:e5:03:35:c4:c0:33:c9:95:6f:9a:08:c5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Sep 20 22:00:14 2026 GMT
Not After : Sep 21 22:00:14 2026 GMT
Subject: CN=b4e719c8ee4ac22e7f0c964f6f43434338283003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:55:f0:f6:53:be:f3:37:b6:58:7a:62:4c:
b3:e5:bd:29:63:23:3d:fd:2d:6e:cf:69:f6:07:7a:
96:84:2c:d8:cf:fb:be:59:bc:7c:13:c5:26:a1:ea:
90:0a:3e:98:87:5f:39:9c:bd:a3:a6:6b:c7:8a:72:
01:1e:02:80:28:c1:de:44:19:79:09:9d:bc:e5:83:
dc:3e:de:aa:13:8c:e9:40:fb:82:79:55:a4:fc:6a:
6d:ab:cf:80:f4:21:7b:d7:12:52:f1:63:2d:b5:ff:
f1:13:f7:41:c8:4a:5e:59:9b:b5:f2:6b:b6:bb:00:
b6:8a:6d:5b:f7:07:9f:8d:49:a0:e4:4c:ee:eb:f8:
5b:b3:32:ff:3d:01:82:ee:6c:0b:24:a9:51:35:fb:
8c:c1:e8:c0:10:eb:78:b0:ab:bf:99:2c:58:1c:3d:
a2:e7:56:61:6f:a0:8c:93:4c:df:54:f7:c0:55:6f:
57:88:92:26:f8:cb:b1:55:da:bd:89:d5:1e:e1:83:
1a:cd:40:32:97:98:62:b1:6b:31:5a:a4:c7:7a:81:
12:53:4a:5a:fc:6c:db:7a:e0:c9:d2:07:27:7b:71:
d4:77:a0:d0:1b:78:c8:41:0b:1f:6f:8e:62:bd:34:
8a:24:df:49:b5:a0:cd:9d:0d:d6:ec:e6:7b:86:05:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E7:19:C8:EE:4A:C2:2E:7F:0C:96:4F:6F:43:43:43:38:28:30:03
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:03:2f:96:6e:90:3d:6a:81:ba:1e:0a:9e:57:ba:38:c7:8e:
fb:76:aa:e0:1d:2c:09:25:57:ba:3b:4f:f2:20:1c:73:e2:54:
69:cd:f6:8b:a4:db:35:9e:88:37:53:48:03:af:54:83:bc:50:
70:8b:f5:c0:95:3e:44:18:73:60:3d:0a:6a:cc:95:fc:ad:cf:
6a:a5:a6:4f:0c:bc:2e:db:91:36:ae:03:0f:68:c7:32:6b:17:
23:73:73:8d:f2:e9:4e:57:04:b5:e3:f5:0d:b7:4d:5d:e3:53:
b1:df:a5:3d:b1:a8:c1:d7:ff:9f:f0:a9:6f:48:a9:e8:4b:4f:
38:07:99:d1:82:2b:e1:79:a4:74:c0:95:66:19:77:88:bb:92:
51:72:29:b4:4e:36:2b:51:9f:90:ae:6e:7c:19:cc:09:b2:d4:
b3:e7:e6:22:73:5d:46:6f:fa:62:af:66:19:cb:37:03:63:2d:
56:58:fa:7c:24:5c:56:90:5c:e3:44:ee:d3:04:cb:b3:71:e7:
ef:1e:90:fc:37:f8:8c:54:3f:ad:c6:8d:d8:68:4f:fe:fc:cd:
10:a1:31:5e:97:8b:2c:42:41:11:27:ea:d3:b6:e3:fa:ad:ab:
60:3c:2a:08:41:90:86:c1:99:3f:7c:9f:6d:42:de:8a:3f:85:
36:02:b4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:22:38 2026 by rpki-client