Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: CnXqRHyk9XXEicg1FMOvJQQ1NosfCBKOyX9+0m83lWE=
Subject key identifier: E3:37:BB:44:45:0E:E4:E5:65:AF:39:B9:23:47:9B:B2:B1:5E:04:BB
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 019D9AABA444BE3F93E63CC7C25849ACF599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 09:00:33 +0000
Manifest this update: Fri 17 Apr 2026 09:00:33 +0000
Manifest next update: Sat 18 Apr 2026 09:00:33 +0000
Files and hashes: 1: 3rjMBVFe8uKBxeuV296UIWDteN0.roa (hash: BWIf1Yq2kYJ+acS7y1zpLt/FLnKlwt4+VzDbiu9Tn9U=)
2: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: ONoTEE+8ADvo12Ju+x8kDkteyXIQuXvU5t5qYwnm0j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:a4:44:be:3f:93:e6:3c:c7:c2:58:49:ac:f5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Apr 17 09:00:33 2026 GMT
Not After : Apr 18 09:00:33 2026 GMT
Subject: CN=e337bb44450ee4e565af39b923479bb2b15e04bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:50:6b:bd:50:9d:b8:c4:35:99:f5:cc:06:3c:
23:95:e8:42:78:a1:51:fc:0d:0d:c3:de:b7:19:30:
02:b3:9b:20:8e:89:b9:ef:f9:6a:2a:35:da:20:89:
46:5c:57:0d:5b:64:3f:df:1a:1c:d2:7c:ec:ae:80:
5c:ab:70:4f:eb:e7:8b:a5:81:1e:be:d0:b3:aa:1b:
72:9e:40:a1:06:bb:a1:7f:e6:53:ab:ac:1a:22:2c:
f7:08:3b:bf:f0:a5:2a:e8:3c:fa:7a:1f:0a:0e:be:
77:f1:66:7e:79:f6:11:44:eb:fd:33:ff:05:f0:2a:
6d:ae:05:cd:a2:f5:44:09:f2:9a:12:a8:d5:4b:6e:
3c:ef:12:a2:a2:68:98:88:bd:c3:0c:1e:b6:06:41:
a5:db:7a:03:a2:a5:26:19:26:89:d5:dd:68:eb:7a:
13:83:dd:ee:7f:3a:df:f6:91:df:b1:a7:51:1f:ba:
c4:65:c0:d1:4d:be:ef:be:01:17:b7:d0:06:13:57:
64:56:7a:71:c4:02:56:0f:f1:ae:45:4c:38:66:14:
5c:0b:7a:de:e2:ab:03:b2:50:f8:c5:40:03:79:da:
e3:83:02:ef:4f:59:20:ad:6b:85:ba:6b:4a:57:ff:
a2:87:e0:24:52:99:bb:d6:48:85:7e:01:7c:37:25:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:37:BB:44:45:0E:E4:E5:65:AF:39:B9:23:47:9B:B2:B1:5E:04:BB
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5a:a7:3a:13:0c:9e:77:01:28:3c:66:b3:6f:e0:66:0f:6e:
24:0d:ff:cb:75:9b:3a:4a:00:ff:41:c7:85:78:38:f6:2e:92:
1d:dd:9d:5d:0c:e1:b3:b9:c5:5e:f7:7b:b5:eb:3f:6d:21:d3:
c7:f8:04:6c:f4:80:d9:d6:c7:8a:25:82:04:3b:b0:86:d8:f8:
39:ea:c6:65:93:07:d2:81:b7:8b:f3:98:8b:fc:46:c2:a5:3b:
c9:82:10:70:1d:21:2c:b4:47:ef:99:4f:b5:ff:42:26:8a:87:
26:6e:97:70:67:9d:ba:32:2f:d6:27:b6:d0:3d:83:0a:20:4d:
ab:2f:75:7e:04:48:6e:0f:86:e4:bc:db:78:fd:c8:e9:62:01:
cd:98:f3:77:d4:bb:e0:9e:6c:bd:15:9f:82:16:0d:95:02:d7:
fb:dd:b0:f9:a8:3f:08:d4:3c:eb:4d:20:8c:d2:f0:c9:93:0b:
38:da:e6:f6:1b:47:04:56:35:56:af:6f:df:f6:0f:e6:b3:3d:
c6:bb:b4:f9:51:0a:f6:6c:e8:a0:14:2f:bb:d7:30:bd:96:ee:
58:d0:e6:ae:84:7e:4e:7a:44:fd:c9:ea:71:54:93:c8:0c:81:
44:dc:3c:2c:0d:40:7e:73:42:65:60:e3:40:f1:fd:67:ef:84:
b9:db:0f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:06 2026 by rpki-client