Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: elXpxLIrVSi/KBAOZSpoTnYKALuT4YEXsBcxhEo9HDk=
Subject key identifier: 32:5A:81:8F:47:8B:14:EF:FD:B8:3B:3E:FC:2D:57:CC:FD:BF:42:8E
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 01A0C5C5A798ED8729AB0B913F88AA656E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 21:01:00 +0000
Manifest this update: Mon 21 Sep 2026 21:01:00 +0000
Manifest next update: Tue 22 Sep 2026 21:01:00 +0000
Files and hashes: 1: 3rjMBVFe8uKBxeuV296UIWDteN0.roa (hash: BWIf1Yq2kYJ+acS7y1zpLt/FLnKlwt4+VzDbiu9Tn9U=)
2: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: YDeGxjvNUnTLlMb9iWOsgpwpWa2Y/FZxobtZ5HjLL/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:a7:98:ed:87:29:ab:0b:91:3f:88:aa:65:6e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Sep 21 21:01:00 2026 GMT
Not After : Sep 22 21:01:00 2026 GMT
Subject: CN=325a818f478b14effdb83b3efc2d57ccfdbf428e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:97:b4:3a:4e:f1:45:87:19:ba:84:72:40:
19:8a:64:60:2c:44:08:57:b5:0b:14:ea:62:f1:4e:
ca:47:a4:df:b6:61:16:cd:e2:07:23:cc:11:7c:e0:
9a:a9:d2:0a:09:3b:d2:58:c4:d5:5f:aa:cf:1c:a3:
43:52:1b:e0:86:ce:00:3b:94:da:f6:c8:36:9b:9d:
2a:fe:48:53:d3:03:b3:7b:c1:ab:86:f3:ef:bd:68:
ad:51:66:73:60:23:c9:d3:f6:18:54:a0:f1:98:3b:
42:17:fa:ef:8a:a0:98:f0:93:75:45:12:b8:f5:6d:
8f:02:bb:98:85:79:25:08:54:38:4b:c2:4e:fa:c2:
a1:91:5f:9e:83:d3:53:94:c5:2d:74:0f:85:fa:9f:
91:de:d9:51:83:cc:61:67:6a:d6:4d:ea:7e:ea:a0:
15:58:59:a7:00:da:22:bc:c6:2f:9f:f4:6a:bd:fb:
c4:f5:af:58:4e:5e:ab:91:c1:0f:24:50:7f:59:24:
73:f6:7a:a9:53:88:93:a6:eb:27:d4:1d:80:eb:b8:
46:fa:85:05:7b:05:ca:9e:5c:ad:89:b1:0a:c2:ae:
b6:01:d3:0e:e7:9d:03:ce:14:94:32:ac:6a:88:48:
fb:92:35:4b:56:10:26:9f:e0:da:a9:ca:05:b9:52:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5A:81:8F:47:8B:14:EF:FD:B8:3B:3E:FC:2D:57:CC:FD:BF:42:8E
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:2f:03:b6:ae:1d:11:03:ec:04:44:17:1a:8c:fc:95:6d:76:
cc:8a:42:37:20:01:54:c9:df:cd:f3:a6:19:10:df:45:13:b9:
33:ad:04:03:49:68:ef:80:e1:7d:26:0f:11:32:da:55:46:ac:
b9:7c:db:ef:39:c5:a1:01:82:bf:cd:e2:0c:21:ba:7a:4d:45:
2e:cc:2f:e5:ce:cf:d1:cb:55:29:13:e4:ae:8d:28:43:c4:26:
c2:00:cf:14:06:91:eb:d1:19:b5:71:61:45:72:5a:d9:05:89:
c1:bb:2c:ba:57:69:1e:0a:d5:dd:58:01:5d:3a:dd:81:48:ad:
c4:d5:c5:21:61:7d:d9:4c:46:dc:f4:5f:3c:dc:43:21:9d:56:
4c:68:24:fc:c2:df:15:9c:29:c2:b5:70:d8:07:84:f8:29:0c:
75:ef:32:eb:25:43:2e:23:63:39:51:49:4e:7d:4a:98:48:04:
89:db:6d:76:ff:65:4c:81:ec:95:9a:e1:5f:84:15:48:5a:ec:
f3:37:22:84:0d:e3:15:f5:9f:c6:12:6f:7a:95:64:77:e3:d0:
ff:57:04:5f:9a:cd:98:38:0b:9e:37:62:45:1d:f2:23:16:2c:
30:10:a6:2a:30:ee:9c:e4:d2:1f:9e:fa:e8:a5:6a:ed:4c:e6:
07:f2:76:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:05:28 2026 by rpki-client