Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
File: lSC_jHciaj-ojr4RzI8RacxWCnk.mft (raw, json)
Hash identifier: jVu/uuvvFJ/7BEigCIeMpjFYy5mQ4bK3FAkJ5yTgXhk=
Subject key identifier: 76:28:8D:CC:59:27:C2:C9:4A:52:A6:AE:1F:6D:A5:14:77:77:DD:B1
Authority key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
Certificate issuer: /CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Certificate serial: 019CAAFCFA157CF3A922F7E5C18691431CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
Manifest number: 0F60
Signing time: Sun 01 Mar 2026 20:00:31 +0000
Manifest this update: Sun 01 Mar 2026 20:00:31 +0000
Manifest next update: Mon 02 Mar 2026 20:00:31 +0000
Files and hashes: 1: 1-4k_j5tlYDY-0PvjETD04LazkDs.roa (hash: dUn8gRxx7kqyKB4xZnZt/reCOUYtE+UapqvIfJ65GYw=)
2: lSC_jHciaj-ojr4RzI8RacxWCnk.crl (hash: k1ETIGuJfk4s3ybMReWpS+/Ge22cdi0F65yJdtMSBk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:fa:15:7c:f3:a9:22:f7:e5:c1:86:91:43:1c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Validity
Not Before: Mar 1 20:00:31 2026 GMT
Not After : Mar 2 20:00:31 2026 GMT
Subject: CN=76288dcc5927c2c94a52a6ae1f6da5147777ddb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:52:af:47:70:ef:24:ed:c2:a0:09:73:13:
78:f8:b5:30:6d:f9:c2:88:5d:6a:cd:fa:68:56:be:
4f:a0:8e:8c:ca:7c:6b:48:4d:c5:14:aa:3e:ce:64:
a1:80:71:05:ce:16:8d:cb:d4:2a:78:c3:a6:86:b0:
b2:ad:49:0b:8a:89:01:dc:11:b6:91:b6:9b:13:1f:
e9:99:17:50:96:72:07:be:17:05:88:e8:77:53:ea:
82:49:0e:84:47:6d:b3:80:ce:c1:c8:cb:6f:a7:84:
a1:94:0d:4d:64:19:6f:77:f4:d5:4b:19:b5:03:56:
6a:aa:35:7d:c2:c3:1f:37:83:bf:58:44:0d:db:7c:
48:42:cd:e8:8a:87:11:9e:3e:72:7a:a0:51:30:fd:
2e:4e:2d:44:68:e0:8e:32:c1:a8:d1:b9:79:e3:14:
3e:07:25:f7:e9:e4:cf:2d:79:e8:2b:2e:2c:9c:91:
91:5e:1e:3e:80:cd:99:6a:8c:14:b8:64:5d:a9:5b:
cb:5a:78:1d:77:72:7c:f9:27:a2:a5:e0:54:c4:8d:
4c:80:ef:2c:bd:9b:32:1b:95:9f:1d:54:b3:d0:ee:
2a:35:6b:47:a2:52:4c:af:69:52:a3:82:66:a0:69:
f3:2b:e2:c5:b2:e4:0d:6e:97:a9:a9:53:6f:3d:8c:
9a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:28:8D:CC:59:27:C2:C9:4A:52:A6:AE:1F:6D:A5:14:77:77:DD:B1
X509v3 Authority Key Identifier:
keyid:95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:11:73:b8:29:24:5c:56:25:59:70:5f:6c:fe:23:d3:82:76:
93:f6:63:8d:e7:b4:62:c6:85:65:b6:0d:14:13:97:57:f9:ed:
a6:f8:03:8c:31:aa:14:eb:ff:28:79:0f:45:12:87:28:e7:fa:
df:11:cb:a2:31:a3:e7:49:b3:a3:e6:fc:1a:bd:3e:94:59:bc:
08:77:95:2d:44:97:8b:31:aa:58:b0:c1:d2:ed:90:ab:ed:1d:
af:ab:bb:3c:ee:8b:14:98:ce:61:4e:67:36:2e:33:3e:6c:98:
dc:cb:14:89:3e:e4:24:19:38:0e:14:2d:b3:eb:cd:75:b7:b5:
fe:aa:80:45:46:25:78:4c:6c:45:ca:36:5c:c5:2b:d7:6c:1d:
20:2e:e2:0d:54:c7:cb:e4:4c:72:9a:c7:03:bc:28:2e:e8:64:
51:38:46:95:75:23:82:5c:4f:18:a0:fb:47:68:1b:64:f9:95:
d8:15:8a:59:6b:4c:e4:75:e8:56:ec:3c:63:1c:f9:10:ad:fb:
33:1a:99:74:e4:36:80:75:f2:94:57:9b:53:e0:06:49:9d:2c:
a6:11:fa:68:4a:f5:b9:d6:f8:5c:3a:64:5f:55:72:68:f6:14:
06:b4:50:0a:69:61:0b:b7:60:a7:87:b2:f0:6b:a8:77:14:7d:
55:5d:c3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:17 2026 by rpki-client