Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: Q42/8TF+O51DfUVaREfiax72ZSNXrEdVZgSqPBq7/IU=
Subject key identifier: 7E:14:BF:AE:FA:1F:20:2C:9F:A2:81:E8:92:70:AB:CC:20:41:7F:A3
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 01A17B4D0416FC9F59B5AFC371A8A11FEF79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 03:00:07 +0000
Manifest this update: Tue 27 Oct 2026 03:00:07 +0000
Manifest next update: Wed 28 Oct 2026 03:00:07 +0000
Files and hashes: 1: 3rjMBVFe8uKBxeuV296UIWDteN0.roa (hash: BWIf1Yq2kYJ+acS7y1zpLt/FLnKlwt4+VzDbiu9Tn9U=)
2: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: uRYM33QUBfn/NRfK6suMBMB6AY3MghPciRr0FRiv04I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:04:16:fc:9f:59:b5:af:c3:71:a8:a1:1f:ef:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Oct 27 03:00:07 2026 GMT
Not After : Oct 28 03:00:07 2026 GMT
Subject: CN=7e14bfaefa1f202c9fa281e89270abcc20417fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:d1:35:ce:27:a9:60:a5:0e:38:7b:a2:51:
1a:9a:92:bb:04:fc:63:4b:fb:00:d1:70:1f:e5:a8:
c8:90:13:68:d7:c1:b8:1e:a7:03:4c:70:51:28:73:
88:3c:6b:fc:1a:f0:18:5e:d0:f3:4e:9c:1c:76:ef:
03:02:c1:9e:5c:bd:53:6d:10:3d:3c:dd:ac:76:db:
38:9b:33:89:8a:f7:83:28:b4:d6:9f:09:df:74:4e:
4a:83:58:c7:a3:3a:9e:c6:b0:cb:2d:2d:0e:19:96:
e4:6b:b4:45:d5:10:dc:55:81:9c:86:82:01:19:7a:
b5:8f:b5:c8:07:ca:ef:c6:0a:91:64:a2:af:8e:2e:
7d:2b:c6:58:33:31:7b:fb:d6:f1:f6:a0:7b:3f:d5:
ee:7b:c8:44:91:97:90:43:62:58:ad:66:0b:9d:70:
96:a6:41:76:ff:6b:ec:f5:87:ab:b4:0d:d8:48:ad:
b9:ed:86:cf:f4:2b:b2:55:07:2c:fe:88:7f:3f:64:
f0:80:9d:5a:08:12:25:ea:fd:2c:8c:3b:3e:8f:b6:
d4:d1:65:06:15:50:71:27:19:b8:1f:b0:13:b9:c1:
02:e5:6c:7e:86:a2:a3:5f:bc:d8:a3:20:53:86:69:
8f:7f:11:5c:0d:39:14:11:1d:51:ca:e1:11:4c:c0:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:14:BF:AE:FA:1F:20:2C:9F:A2:81:E8:92:70:AB:CC:20:41:7F:A3
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7c:3c:45:41:f2:ed:83:cb:68:d9:18:fd:e4:b0:32:3b:ab:
50:dd:59:83:00:eb:b6:7f:fa:14:b9:5f:5e:85:37:e3:79:88:
42:b7:36:9c:67:24:96:6e:2f:1a:21:28:15:66:98:03:53:ea:
9d:84:27:2c:9f:87:60:4f:42:99:cd:23:0e:05:10:f3:b7:9f:
03:9b:0e:c4:61:4f:a8:1d:94:94:63:14:8d:2e:3c:cb:a6:e6:
cb:78:a5:ff:53:89:97:0d:15:a5:fd:07:e5:c0:9d:02:83:a0:
b3:e4:44:fe:83:e7:0e:da:0e:8a:48:fc:e6:66:34:fa:a2:3b:
9d:6c:c2:29:f7:41:64:e0:0a:bc:52:94:92:60:36:e4:3f:1e:
3c:a3:f3:56:94:46:6c:42:4c:23:0d:fa:03:be:8e:9a:95:17:
9d:76:00:19:08:c4:a8:4d:df:a4:71:9a:e5:a2:6d:52:94:89:
f7:b7:0c:4b:95:0c:63:55:8e:de:bc:aa:d0:4c:51:47:df:f8:
e9:66:d3:72:76:fe:f2:32:4f:57:f0:91:ec:31:41:b1:3c:7d:
37:32:a6:20:29:b8:62:c9:53:c2:3a:ea:8e:e9:bb:3c:2e:c1:
69:1b:f6:a6:62:9f:27:f4:17:98:9b:7c:cf:53:4e:b5:3d:39:
a5:7b:09:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:03:29 2026 by rpki-client