Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
File: lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json)
Hash identifier: xuh8Q/1Svbu4F0LH2B9UQwsSwNyah51Rbb8Lgp7rzM8=
Subject key identifier: A2:F4:47:1E:AB:41:1D:AC:32:52:D9:23:A4:C3:B9:8F:9F:B9:64:56
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 01A1005A1B4E110A21D9818AC9242CF01AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
Manifest number: 1933
Signing time: Sat 03 Oct 2026 06:01:07 +0000
Manifest this update: Sat 03 Oct 2026 06:01:07 +0000
Manifest next update: Sun 04 Oct 2026 06:01:07 +0000
Files and hashes: 1: LJwMNAoddFUvzpN6T8k-8rbjOKY.roa (hash: B2HxHsNXBHiudzjhLg1NzvTriQ3OOiMthM6mYYRuKxk=)
2: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: PcUWV9APeqmyYyHyG9b4sUUgl2ew1zZxvPKCK84i37s=)
3: xaaUcdShLftvURcWzuknVIrUAWE.asa (hash: yA9XLFOfnkqbEW4VyXQOYp042d83TYSUlS9do68R1XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5a:1b:4e:11:0a:21:d9:81:8a:c9:24:2c:f0:1a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Oct 3 06:01:07 2026 GMT
Not After : Oct 4 06:01:07 2026 GMT
Subject: CN=a2f4471eab411dac3252d923a4c3b98f9fb96456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:25:ec:cd:6a:1e:ac:22:ff:5d:3b:34:93:
dc:71:37:c2:0d:a4:d8:f0:b8:6d:1c:51:56:3e:f4:
77:ad:1d:fe:6a:9a:3d:36:5e:29:74:d8:12:6b:16:
11:94:f6:c2:bd:b2:a5:10:e8:d8:e3:ee:4d:14:04:
4b:f8:5d:30:00:5a:3e:1a:57:e5:da:2a:c6:a2:78:
f7:ee:50:db:48:28:27:66:ae:fe:d0:86:6a:4f:37:
ed:31:e7:0c:c7:d7:21:60:34:be:2c:f7:70:13:5d:
94:a2:57:08:97:e3:8b:37:b2:c1:e9:65:c1:48:30:
2d:e6:95:c9:43:c0:98:7c:6c:35:3a:06:dd:e6:0b:
81:35:52:7f:eb:e7:f0:94:29:e2:18:53:ab:8b:43:
d9:be:b6:4c:c7:23:a6:a0:d3:e8:d3:6d:5f:fa:98:
91:31:c2:23:8a:98:b3:e7:cf:f3:23:0a:49:12:74:
98:28:65:02:cf:58:e5:2c:cb:3c:85:4d:d2:8a:cb:
5c:de:8d:02:78:65:45:77:88:98:0b:52:58:d4:cf:
d8:cd:7d:d4:28:59:80:cf:1e:bb:c0:6a:47:f9:fe:
83:a5:98:8c:0e:0e:0e:af:2b:fd:32:6d:16:7c:bd:
fe:20:e9:4d:53:a7:7d:10:a1:c4:50:97:49:ed:a8:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F4:47:1E:AB:41:1D:AC:32:52:D9:23:A4:C3:B9:8F:9F:B9:64:56
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7b:fb:45:97:c7:6d:fc:a8:c0:b7:24:49:7d:5f:9b:e4:bf:
a8:06:24:34:42:02:99:e5:c0:4d:e5:ec:70:2a:83:60:ce:af:
ab:76:8a:be:bd:fe:ea:c5:00:0f:e5:af:f0:22:6c:18:a5:25:
ab:18:cc:3d:78:34:aa:0f:c5:87:98:ad:55:24:86:ad:49:58:
6b:fb:56:e3:32:3e:3e:b6:74:4b:c1:5a:da:8b:b6:3b:50:36:
85:27:76:36:dd:52:72:13:12:48:de:93:e0:28:7c:1e:7f:e0:
a3:d7:47:0b:4d:69:3d:1d:55:61:e4:54:75:57:f4:77:ab:09:
4f:4f:27:db:b4:e0:3e:13:3c:64:62:8d:cd:1d:bb:02:73:29:
36:63:1e:f3:c8:54:e2:d5:1d:5c:67:48:5d:ba:54:2d:31:32:
da:a8:65:05:24:e8:af:d8:bf:d7:9a:e4:62:03:25:d0:93:b9:
1b:a5:06:7c:18:37:e7:bc:cf:9a:d8:5d:54:6d:9d:5a:9c:1a:
71:41:c4:25:11:9c:2b:5f:eb:7c:71:00:73:e4:2d:f6:ae:25:
8d:22:17:20:db:72:e7:8d:d4:cf:77:cf:b8:22:d8:76:d6:17:
73:e0:b1:eb:a2:f2:51:36:c9:9c:ed:fa:cb:19:dd:f5:87:51:
b6:a1:9a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:35:47 2026 by rpki-client