Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier: Q8F0sq1kAAXH05qB6fW77heEJ3Csdh0Du+wtm3zBssA=
Subject key identifier: 17:AB:9A:8D:1E:5A:9C:2E:CB:7C:54:52:8E:14:0F:D2:B7:81:B6:4F
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial: 01A08CE8BCCC35A8A05853BE03E3961C1685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 20:00:57 +0000
Manifest this update: Thu 10 Sep 2026 20:00:57 +0000
Manifest next update: Fri 11 Sep 2026 20:00:57 +0000
Files and hashes: 1: geYG7jgB_IZyvx4sV17jbEgt41M.roa (hash: qoLpQdomqm+vqekuFSAQcJ4kiUnpRFshCLt0DR6rKD4=)
2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: KWoMmYLcMdwtR5EFEhfgJiIdNphFLW+34EkXkKOO2z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:bc:cc:35:a8:a0:58:53:be:03:e3:96:1c:16:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Validity
Not Before: Sep 10 20:00:57 2026 GMT
Not After : Sep 11 20:00:57 2026 GMT
Subject: CN=17ab9a8d1e5a9c2ecb7c54528e140fd2b781b64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:cc:5f:15:33:41:d2:7c:47:76:4e:65:3d:
2b:f4:49:d6:3d:4b:96:44:fb:af:74:b2:33:16:5e:
d7:68:b2:30:69:c6:1a:58:42:1b:4b:0c:1e:a2:63:
80:01:41:ca:0e:36:e2:43:ff:32:b5:31:72:93:ca:
4b:96:2c:e8:0c:7b:b9:00:67:74:0e:2c:82:dc:6e:
6b:59:d6:b7:83:a3:64:03:a0:86:bb:35:61:05:32:
ed:80:05:ad:c0:94:4f:eb:c8:85:ac:e1:7c:0b:dc:
eb:c8:aa:43:8e:27:0c:88:03:96:fa:9d:0c:5c:e9:
29:20:d8:8d:76:bf:62:ec:0d:02:ac:87:0e:cf:39:
6a:38:b9:ad:42:5e:67:c8:d0:cc:0b:a0:23:e7:04:
86:fd:d7:7d:36:05:b0:40:b5:b1:b5:7d:1d:bd:61:
9f:b6:b8:c1:c0:41:57:d6:25:4c:0c:65:8b:32:79:
86:e5:64:03:36:7f:68:6f:2e:bf:4e:e7:68:73:e2:
b6:18:8b:5b:01:0c:cd:c8:c1:aa:ef:98:cb:0c:95:
7f:1e:13:c4:ec:4f:cf:55:04:c6:ca:f0:a0:6b:ba:
f0:b6:9f:ee:5c:cf:f6:07:30:fd:23:eb:f9:2f:c9:
33:82:66:15:d6:c3:ad:cc:10:1f:12:f2:26:14:31:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AB:9A:8D:1E:5A:9C:2E:CB:7C:54:52:8E:14:0F:D2:B7:81:B6:4F
X509v3 Authority Key Identifier:
keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1c:94:45:90:20:f3:9a:01:93:76:82:84:51:35:5a:af:c2:
eb:ec:27:c6:27:26:86:96:2f:0e:eb:a8:dd:83:6f:76:fc:87:
e7:61:94:ba:2e:12:67:99:08:59:8d:59:78:54:58:c7:1f:bb:
2a:b4:e9:98:2d:23:60:0c:d0:b9:7e:e5:b1:93:9f:c4:3a:fa:
fc:84:c6:86:43:35:6d:c8:39:80:03:3d:53:32:49:b6:92:20:
b3:d2:fe:6f:4f:66:e0:34:c2:2c:cf:0d:e0:46:d8:f1:a6:d7:
86:ab:55:f3:0a:26:cc:a6:ae:f8:ce:d4:4a:92:9e:61:3e:7b:
54:dd:17:0e:7b:d7:f5:ab:5c:f5:54:72:b6:ee:e1:ed:ce:56:
10:4c:b7:e3:f4:6c:41:e4:38:d4:56:dd:45:3d:24:3e:17:00:
c2:2f:e9:62:ad:b8:90:ce:4b:e5:f9:c8:71:60:1d:e9:9e:3e:
01:3e:74:cc:3d:cb:c5:6c:43:b6:91:5c:90:11:10:87:8e:bc:
8d:97:21:ab:7e:fc:20:62:ed:a2:ac:4a:df:94:a9:3d:15:38:
b8:77:4d:e2:5e:72:2c:55:3e:e1:9a:27:d4:12:66:11:1d:9b:
d3:c7:ef:10:0b:37:43:fe:c4:d0:c0:ba:35:87:fc:1b:52:6d:
a6:92:0f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:56:26 2026 by rpki-client