Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: MoO4Z92K2l/E2olrzBoMDR5dNGnBMZnNHsYUbmlokgw=
Subject key identifier: 9C:93:44:05:A8:82:8B:BA:A5:E5:03:29:E1:E6:27:CA:65:9D:7E:39
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 019FA9E274FCCAB21660039C3210747D8B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 18:00:18 +0000
Manifest this update: Tue 28 Jul 2026 18:00:18 +0000
Manifest next update: Wed 29 Jul 2026 18:00:18 +0000
Files and hashes: 1: 3rjMBVFe8uKBxeuV296UIWDteN0.roa (hash: BWIf1Yq2kYJ+acS7y1zpLt/FLnKlwt4+VzDbiu9Tn9U=)
2: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: HJzD0xYI2vLHXZkhFPZC4VyfMzQT12zgUnpQcy3pNAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:74:fc:ca:b2:16:60:03:9c:32:10:74:7d:8b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Jul 28 18:00:18 2026 GMT
Not After : Jul 29 18:00:18 2026 GMT
Subject: CN=9c934405a8828bbaa5e50329e1e627ca659d7e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:e6:a8:a4:61:86:f9:9e:f4:de:95:ee:84:
16:99:5d:9b:df:ad:95:f7:34:5b:1c:5c:77:fb:67:
7a:d1:eb:30:b8:d5:62:b7:98:e8:09:f0:ec:aa:32:
12:ee:ac:9f:f9:ee:0c:ef:07:6b:08:1b:ee:23:a4:
8a:16:d4:8c:26:10:8e:6d:db:ad:d1:7c:50:a1:c2:
ef:bb:02:da:97:53:ae:f0:2c:07:64:a5:f6:96:f8:
1b:69:7f:1d:3b:b0:d1:ba:05:98:57:19:20:7d:8a:
c6:a1:92:d3:ac:5b:16:79:79:9d:ba:2b:f9:c9:9f:
3c:99:4b:4e:50:50:7c:53:b1:69:2b:80:28:41:43:
7a:35:3f:75:85:13:44:ee:79:e8:61:57:45:90:6d:
90:d4:a9:92:9e:46:d1:98:c4:25:86:53:0d:b4:58:
81:ec:93:17:5a:86:5c:6b:6b:47:f8:be:7d:cc:7e:
c6:f9:cb:22:74:ab:20:f7:94:e4:ff:2a:e2:c7:03:
c0:ea:a6:4f:c8:5e:67:75:82:08:46:74:ae:1a:24:
ce:8c:04:45:11:a5:7b:bb:42:6b:9a:01:48:4f:b7:
e2:36:cb:f0:cd:36:19:fb:66:93:43:5f:ae:4b:28:
b9:05:9e:74:1f:3e:14:47:64:28:97:ab:47:f0:93:
b3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:93:44:05:A8:82:8B:BA:A5:E5:03:29:E1:E6:27:CA:65:9D:7E:39
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:bb:86:f8:d2:51:f8:b7:ad:af:25:26:83:e4:44:11:72:40:
f1:23:33:e5:ee:b4:01:82:2a:f2:2b:39:4d:e4:cb:8b:75:2b:
ef:61:73:f2:cc:22:f3:74:4a:b2:ce:38:e3:f3:69:39:62:b5:
2b:fe:b6:e6:3f:69:19:05:82:32:ca:92:1c:64:ca:f3:9d:8a:
2a:64:8f:c9:f4:80:b0:88:93:1b:7d:d5:a8:6b:7c:eb:d7:b8:
44:4e:bd:55:2a:c7:08:d8:9c:c8:3d:8b:b3:d6:4c:58:a4:3d:
35:92:d0:73:27:36:7c:84:05:85:d8:7e:31:16:30:4c:91:08:
86:f4:d0:9a:c3:a6:b2:d9:31:11:ac:49:ff:11:4e:26:cf:40:
9f:93:d4:13:95:be:1e:ad:9e:f4:71:42:6a:47:9b:e1:3f:62:
c1:a3:a6:80:46:c8:66:25:cc:bf:56:d1:20:7c:df:e2:36:db:
20:03:5a:78:cc:cc:06:40:33:58:94:f1:17:a9:c1:73:a0:9f:
88:30:fe:e4:40:46:13:7f:e0:c8:ed:a7:ef:ca:60:3b:76:25:
65:b9:e2:50:4e:8c:2d:53:89:04:23:8f:22:12:40:d1:52:63:
2c:6a:26:dd:bd:7b:fe:d0:97:5d:ec:f7:c4:e7:f5:a3:fc:fe:
da:0d:da:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4nT8yrIWYAOcMhB0fYs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjA5MzE1MGY0YTQ2MTAxYWNkN2VhM2EyNmJiNDM4NTEz
MTIzYjUwHhcNMjYwNzI4MTgwMDE4WhcNMjYwNzI5MTgwMDE4WjAzMTEwLwYDVQQD
Eyg5YzkzNDQwNWE4ODI4YmJhYTVlNTAzMjllMWU2MjdjYTY1OWQ3ZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nTmqKRhhvme9N6V7oQWmV2b362V
9zRbHFx3+2d60eswuNVit5joCfDsqjIS7qyf+e4M7wdrCBvuI6SKFtSMJhCObdut
0XxQocLvuwLal1Ou8CwHZKX2lvgbaX8dO7DRugWYVxkgfYrGoZLTrFsWeXmduiv5
yZ88mUtOUFB8U7FpK4AoQUN6NT91hRNE7nnoYVdFkG2Q1KmSnkbRmMQlhlMNtFiB
7JMXWoZca2tH+L59zH7G+csidKsg95Tk/yrixwPA6qZPyF5ndYIIRnSuGiTOjARF
EaV7u0JrmgFIT7fiNsvwzTYZ+2aTQ1+uSyi5BZ50Hz4UR2Qol6tH8JOzGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyTRAWogou6peUDKeHmJ8plnX45MB8GA1UdIwQY
MBaAFJUgkxUPSkYQGs1+o6JrtDhRMSO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQt
ZTgwNGRjYmRkNzYyLzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQtZTgwNGRjYmRkNzYy
LzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7uG+NJR
+LetryUmg+REEXJA8SMz5e60AYIq8is5TeTLi3Ur72Fz8swi83RKss444/NpOWK1
K/625j9pGQWCMsqSHGTK852KKmSPyfSAsIiTG33VqGt869e4RE69VSrHCNicyD2L
s9ZMWKQ9NZLQcyc2fIQFhdh+MRYwTJEIhvTQmsOmstkxEaxJ/xFOJs9An5PUE5W+
Hq2e9HFCakeb4T9iwaOmgEbIZiXMv1bRIHzf4jbbIANaeMzMBkAzWJTxF6nBc6Cf
iDD+5EBGE3/gyO2n78pgO3YlZbniUE6MLVOJBCOPIhJA0VJjLGom3b17/tCXXez3
xOf1o/z+2g3ayA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:09 2026 by rpki-client