
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: Gg4lxGyhDqtZ8edTur7vAkjzCvC4Gv8hXPED3wGGagE=
Subject key identifier: 78:7E:84:1E:D8:6D:E4:AB:E6:FA:6A:07:0A:64:7D:26:61:74:02:A0
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 019CAB34179ACD5D67AA54EF8762209AC4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:00:43 +0000
Manifest this update: Sun 01 Mar 2026 21:00:43 +0000
Manifest next update: Mon 02 Mar 2026 21:00:43 +0000
Files and hashes: 1: 3rjMBVFe8uKBxeuV296UIWDteN0.roa (hash: BWIf1Yq2kYJ+acS7y1zpLt/FLnKlwt4+VzDbiu9Tn9U=)
2: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: jObhq1UX508uV19HxY+3oI2TpxDrDvOW+Nr+FPPXmME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:17:9a:cd:5d:67:aa:54:ef:87:62:20:9a:c4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Mar 1 21:00:43 2026 GMT
Not After : Mar 2 21:00:43 2026 GMT
Subject: CN=787e841ed86de4abe6fa6a070a647d26617402a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:db:d9:4b:97:b3:ba:29:40:17:42:9c:4b:
01:76:cd:35:73:85:eb:54:e7:6f:85:0e:f5:4a:be:
51:4e:38:74:af:96:8c:fa:6c:0e:24:04:f4:ab:17:
76:5e:e1:d8:73:a8:0d:03:6c:f9:15:c5:66:4b:2a:
ea:9c:60:6e:a4:81:a9:1c:08:49:a3:ca:1f:30:c3:
74:b4:64:3b:24:b7:75:fa:aa:ec:dd:e1:d4:2f:c6:
71:4f:ec:cd:bd:4c:0c:b8:43:ea:12:fa:b8:36:a7:
ab:a6:58:51:c2:d1:e2:93:95:0a:7a:d4:12:5a:a8:
d5:8f:4b:94:7e:46:94:3c:84:e4:61:0c:1e:fa:97:
81:86:b3:b2:3e:c3:0e:e5:49:fd:03:fd:84:0b:75:
56:1f:54:3a:39:09:90:0e:74:ee:dc:5e:de:77:84:
7e:99:83:f2:f5:e7:f4:3b:d4:e9:4c:f3:7f:7d:ce:
61:60:1c:77:38:8b:d7:29:3b:49:70:44:d3:c7:8b:
1c:4c:f7:36:44:d6:ba:d9:23:e0:4e:a8:10:21:a3:
d5:f5:03:7a:7c:25:b0:c9:d8:4a:06:3d:95:fc:a8:
df:b6:75:2d:0c:7c:72:bd:15:12:4f:7d:1d:92:7b:
5a:6c:8f:ae:a5:22:66:1e:6d:8e:fd:bf:bc:70:70:
a5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7E:84:1E:D8:6D:E4:AB:E6:FA:6A:07:0A:64:7D:26:61:74:02:A0
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4c:1c:ef:3d:ab:b6:40:d5:8e:60:09:c2:cb:84:8d:3a:3b:
e2:47:bc:81:fb:c5:dc:d1:59:d5:5b:c1:7c:f9:b7:e2:e3:d3:
7a:45:62:4f:5d:d1:3f:19:cf:1d:1f:2a:ed:fa:59:fb:b6:59:
7a:2a:f9:f7:ae:87:9f:fc:3e:6f:9f:a9:50:27:c0:5f:de:39:
14:ae:c9:43:a6:f6:10:20:06:e0:8e:cc:91:c1:83:11:9a:d9:
a9:f9:58:ff:30:98:45:9d:41:e0:72:cc:0b:87:7b:62:8f:66:
d8:8e:20:98:0b:e3:0a:dc:be:d9:0c:9f:d8:7e:7b:2c:49:8d:
31:5b:98:85:30:04:17:1d:2e:c3:8c:0f:12:41:fc:e5:b7:9e:
31:44:53:40:e4:35:dd:92:4e:b9:98:5b:21:b8:06:1e:db:7f:
71:d2:bd:12:5a:e5:3c:ad:71:f6:7a:c6:dc:33:17:61:7e:d9:
cd:e0:0b:e9:90:b3:1f:e7:d1:e3:64:63:cc:17:92:f1:64:3b:
87:3c:76:28:35:6e:37:d4:00:c6:8e:1c:81:5e:a3:7e:da:6a:
db:4c:55:2c:8b:a3:73:35:33:a8:13:fb:aa:84:03:c3:fc:2e:
fa:2f:49:12:a2:fb:c0:6d:04:d7:05:52:3d:a0:0c:b6:f9:9f:
db:8b:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:52 2026 by rpki-client