Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
File: lSC_jHciaj-ojr4RzI8RacxWCnk.mft (raw, json)
Hash identifier: p8OGOL66aYIGAzpU2m59NWMBF5rQDIP9lTSj2biMDnw=
Subject key identifier: 42:9A:90:A9:8B:9E:3A:D6:81:16:42:D5:EB:FC:A2:6F:12:21:C1:A3
Authority key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
Certificate issuer: /CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Certificate serial: 019D9A74F702343F6B13B529CB8E7487B48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
Manifest number: 0FDC
Signing time: Fri 17 Apr 2026 08:00:49 +0000
Manifest this update: Fri 17 Apr 2026 08:00:49 +0000
Manifest next update: Sat 18 Apr 2026 08:00:49 +0000
Files and hashes: 1: 1-4k_j5tlYDY-0PvjETD04LazkDs.roa (hash: dUn8gRxx7kqyKB4xZnZt/reCOUYtE+UapqvIfJ65GYw=)
2: lSC_jHciaj-ojr4RzI8RacxWCnk.crl (hash: Xt8FMncHJhlD8J1sv4CCZy8lW0wyEsGnhclQKhyrcyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:f7:02:34:3f:6b:13:b5:29:cb:8e:74:87:b4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Validity
Not Before: Apr 17 08:00:49 2026 GMT
Not After : Apr 18 08:00:49 2026 GMT
Subject: CN=429a90a98b9e3ad6811642d5ebfca26f1221c1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:9e:88:6a:f7:ca:9b:99:69:c4:9d:1a:18:
7f:ee:ec:e1:ca:6a:b8:e6:5c:f7:94:ea:a8:f2:1f:
3c:a0:29:9a:57:0d:5d:74:b7:a2:40:ac:d3:33:63:
ad:5b:d2:59:f5:74:96:3c:a3:cd:c9:d7:62:61:8d:
29:2b:40:9f:b1:93:1e:ea:c9:d5:ef:2f:1a:45:d1:
dd:a8:7b:3a:a8:ff:a4:0b:68:8d:b4:a2:3c:2a:d8:
ee:98:b8:70:ee:86:b9:0e:29:cc:2d:dc:c7:ae:f8:
77:ca:a0:58:3e:ed:60:28:5d:6e:51:be:a3:64:f0:
a5:48:2d:eb:04:36:46:65:29:c9:57:f0:45:7d:e8:
3b:c8:45:cb:6b:70:07:1d:98:6b:f8:ac:b5:1c:bb:
90:d4:52:3d:92:da:31:53:f1:c1:78:50:78:f6:22:
75:52:bd:15:1a:ea:eb:f1:a9:27:8b:7d:9f:dd:65:
b6:e0:36:2e:2b:ef:92:35:c8:eb:98:d8:3e:5b:71:
d6:76:34:6d:c7:07:f9:10:93:09:03:04:49:6b:3b:
d3:bc:6f:88:a6:f3:8a:4a:72:1d:3f:0c:bb:6f:3d:
33:6f:f9:54:8e:a9:75:9f:df:2c:59:6d:53:43:85:
dc:76:0c:26:7f:73:ed:c8:8e:a3:13:a6:2a:76:a6:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9A:90:A9:8B:9E:3A:D6:81:16:42:D5:EB:FC:A2:6F:12:21:C1:A3
X509v3 Authority Key Identifier:
keyid:95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:af:3f:b4:d1:b6:dd:57:8b:9a:e8:c9:01:16:4b:2b:c1:4f:
04:91:32:db:1a:5d:42:8d:13:43:1f:dc:3a:68:33:6e:b0:9d:
37:58:c3:fe:e5:cc:9b:c2:51:53:23:aa:b9:d6:76:3c:99:54:
29:88:2e:0c:52:ae:f5:64:7c:f3:d1:8c:e4:ba:6d:a4:fb:37:
af:2d:70:fd:0a:4f:c0:6e:24:8d:e8:65:fe:37:9c:88:45:e4:
8d:0a:5d:e8:42:aa:e1:fc:fd:e9:b6:39:e7:6d:8d:7f:1a:05:
dc:b6:8d:31:3a:49:a8:b9:95:94:13:e7:c9:25:3a:4d:a2:c4:
0e:ce:a9:d3:f9:8c:40:37:31:3e:39:86:91:28:b5:de:e0:a6:
52:9d:75:36:60:e2:44:f2:a1:0d:c1:5b:d8:17:01:44:60:65:
2e:f8:76:f5:b6:7c:aa:bb:56:a6:f7:dc:4f:63:c6:ca:8d:a7:
9e:10:7b:0b:96:94:1c:3e:a4:f0:58:28:4a:25:58:8a:bf:ee:
ec:34:00:4c:00:c2:07:65:5b:ed:24:5f:46:eb:84:42:9f:82:
68:cf:4d:97:1b:67:82:a8:f9:04:94:d4:d5:46:99:61:94:ad:
64:9a:6d:59:c7:0b:fa:56:7a:5e:db:f0:37:15:b6:ad:1d:bb:
a7:f6:cb:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adPcCND9rE7Upy450h7SLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjBiZjhjNzcyMjZhM2ZhODhlYmUxMWNjOGYxMTY5Y2M1
NjBhNzkwHhcNMjYwNDE3MDgwMDQ5WhcNMjYwNDE4MDgwMDQ5WjAzMTEwLwYDVQQD
Eyg0MjlhOTBhOThiOWUzYWQ2ODExNjQyZDVlYmZjYTI2ZjEyMjFjMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/KeiGr3ypuZacSdGhh/7uzhymq4
5lz3lOqo8h88oCmaVw1ddLeiQKzTM2OtW9JZ9XSWPKPNyddiYY0pK0CfsZMe6snV
7y8aRdHdqHs6qP+kC2iNtKI8KtjumLhw7oa5DinMLdzHrvh3yqBYPu1gKF1uUb6j
ZPClSC3rBDZGZSnJV/BFfeg7yEXLa3AHHZhr+Ky1HLuQ1FI9ktoxU/HBeFB49iJ1
Ur0VGurr8akni32f3WW24DYuK++SNcjrmNg+W3HWdjRtxwf5EJMJAwRJazvTvG+I
pvOKSnIdPwy7bz0zb/lUjql1n98sWW1TQ4Xcdgwmf3PtyI6jE6YqdqY/SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKakKmLnjrWgRZC1ev8om8SIcGjMB8GA1UdIwQY
MBaAFJUgv4x3Imo/qI6+EcyPEWnMVgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNDX2pIY2lhai1vanI0UnpJOFJhY3hXQ25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mMDlhN2YtNTc2MS00NWE3LTljY2It
MWYzZWQ2ZDg4MWI4LzEvbFNDX2pIY2lhai1vanI0UnpJOFJhY3hXQ25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mMDlhN2YtNTc2MS00NWE3LTljY2ItMWYzZWQ2ZDg4MWI4
LzEvbFNDX2pIY2lhai1vanI0UnpJOFJhY3hXQ25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJa8/tNG2
3VeLmujJARZLK8FPBJEy2xpdQo0TQx/cOmgzbrCdN1jD/uXMm8JRUyOqudZ2PJlU
KYguDFKu9WR889GM5LptpPs3ry1w/QpPwG4kjehl/jeciEXkjQpd6EKq4fz96bY5
522NfxoF3LaNMTpJqLmVlBPnySU6TaLEDs6p0/mMQDcxPjmGkSi13uCmUp11NmDi
RPKhDcFb2BcBRGBlLvh29bZ8qrtWpvfcT2PGyo2nnhB7C5aUHD6k8FgoSiVYir/u
7DQATADCB2Vb7SRfRuuEQp+CaM9Nlxtngqj5BJTU1UaZYZStZJptWccL+lZ6Xtvw
NxW2rR27p/bLpA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:27 2026 by rpki-client