Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier: 4VxSPf12Y6+9wTK6sIN5F7P+u6g7143dj2lzjaIR8NQ=
Subject key identifier: 17:D4:85:5F:37:40:CD:F0:64:B4:6F:9B:B0:17:24:26:B8:46:E0:07
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial: 01A186088E0C54E55DB579D4F075F8FAD32C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number: 1AC9
Signing time: Thu 29 Oct 2026 05:01:09 +0000
Manifest this update: Thu 29 Oct 2026 05:01:09 +0000
Manifest next update: Fri 30 Oct 2026 05:01:09 +0000
Files and hashes: 1: geYG7jgB_IZyvx4sV17jbEgt41M.roa (hash: qoLpQdomqm+vqekuFSAQcJ4kiUnpRFshCLt0DR6rKD4=)
2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: Ii62duckv7w4BT52hgRn8T46p/lVna5fVF+/g0wxklc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:08:8e:0c:54:e5:5d:b5:79:d4:f0:75:f8:fa:d3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Validity
Not Before: Oct 29 05:01:09 2026 GMT
Not After : Oct 30 05:01:09 2026 GMT
Subject: CN=17d4855f3740cdf064b46f9bb0172426b846e007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:f3:4b:a4:29:af:95:b5:50:b2:cc:f0:cb:
f3:54:ac:ce:66:a4:56:1c:d0:6d:63:2d:a5:c6:cb:
95:9c:67:56:d1:5f:8a:b9:6d:5e:5d:1e:96:67:08:
08:e8:e8:75:78:07:ce:69:4b:e7:40:e9:88:35:33:
03:16:9a:84:85:7f:61:c5:54:05:c5:6e:7b:7a:80:
b2:15:0d:e5:c0:58:8f:e2:22:fb:db:2a:cb:5c:3e:
14:46:4b:2d:32:96:68:5c:13:3b:66:18:bb:7d:3c:
f2:b2:06:83:32:2f:5f:be:09:c9:bd:50:72:78:41:
76:dc:93:d7:3a:83:8c:ac:2e:4e:49:71:02:a9:d8:
ec:e7:2e:38:8d:45:2a:fd:04:06:25:2e:ba:3a:bc:
d7:e2:bf:3f:84:8e:9c:af:52:8f:93:3d:76:c2:82:
c5:49:f6:77:7d:a1:18:a0:03:ca:74:db:49:08:62:
ab:d6:0f:be:15:7b:9b:7d:57:fe:a6:e4:cc:28:81:
2f:f9:29:5a:c9:ca:cc:f2:17:9d:f2:7d:29:2a:85:
db:ed:15:07:bc:f8:0a:1d:8a:17:e4:13:df:1f:1e:
32:64:3d:67:e4:57:97:fd:2a:29:65:ea:a0:e4:51:
9d:f0:ae:5b:72:e5:4a:96:03:3d:9c:7b:6c:38:a0:
f0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D4:85:5F:37:40:CD:F0:64:B4:6F:9B:B0:17:24:26:B8:46:E0:07
X509v3 Authority Key Identifier:
keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d2:cf:97:c9:8c:81:64:a4:60:57:ba:3e:44:70:02:62:17:
5b:c6:a5:ac:50:d0:f2:9d:ce:a0:de:4e:ab:de:6d:16:5c:a4:
1a:90:bb:c4:be:6e:97:36:01:cd:24:86:97:a3:53:e9:b1:75:
e8:4b:ea:81:84:3f:fd:52:6d:0a:25:a8:fd:94:d1:b2:56:29:
4a:52:1b:e2:8c:fa:92:ab:82:24:14:04:b2:c5:0a:79:f6:ca:
26:00:b1:7b:68:49:a1:f6:72:d4:29:2c:48:a6:37:99:01:ec:
d1:fb:13:4e:8d:e0:77:0d:b9:b4:58:e0:e0:2a:71:79:39:ab:
64:de:cf:dd:16:fc:1a:0c:4f:83:52:e6:f2:dc:f6:f4:ff:e4:
8e:79:f0:5b:9c:8b:f3:a0:71:a1:68:cd:b3:68:ed:0d:1b:3a:
96:4d:34:be:79:fb:80:ec:95:18:a9:ae:f2:13:e8:56:9e:a2:
f2:da:4e:af:13:72:f6:f4:08:c9:77:b1:99:ea:2a:21:2b:b1:
45:25:34:f2:c5:ba:a8:db:25:18:84:60:07:92:47:22:d6:4c:
02:59:d2:53:07:bb:ed:b8:1e:63:9b:14:16:ee:1d:ee:f6:e3:
bf:df:37:93:5c:11:f8:27:53:80:39:8f:64:01:ef:a3:da:ed:
04:a3:ae:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 10:15:30 2026 by rpki-client