Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: E+GNQd0BolkVBpWSUgKhfEMAH734d/1CncIiY3eZGUE=
Subject key identifier: 51:DF:27:12:39:3E:89:F8:62:22:22:E0:90:9E:52:F5:1F:93:31:4F
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 01A089E77E2A37BB12EA740DABE65E421B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 06:00:44 +0000
Manifest this update: Thu 10 Sep 2026 06:00:44 +0000
Manifest next update: Fri 11 Sep 2026 06:00:44 +0000
Files and hashes: 1: 3rjMBVFe8uKBxeuV296UIWDteN0.roa (hash: BWIf1Yq2kYJ+acS7y1zpLt/FLnKlwt4+VzDbiu9Tn9U=)
2: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: 5AjdhnbuflkKJ1VwqjIDmD1c/gXa9S9RSiNfljX3gS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:7e:2a:37:bb:12:ea:74:0d:ab:e6:5e:42:1b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Sep 10 06:00:44 2026 GMT
Not After : Sep 11 06:00:44 2026 GMT
Subject: CN=51df2712393e89f8622222e0909e52f51f93314f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:cf:0b:a2:ba:24:2a:05:54:a4:fa:80:17:
3e:dc:13:19:ec:05:d0:d4:99:ec:d1:c1:ba:9e:a8:
4a:87:6a:b0:60:e0:96:f6:6b:34:97:7b:53:c2:87:
f3:c3:d3:62:53:db:c2:e9:63:52:fa:0e:17:68:03:
c1:2e:c7:f5:38:dd:c1:af:1b:7c:fc:7b:21:9e:34:
8e:d5:07:53:13:51:85:3e:d4:41:99:b5:b8:ca:4e:
2b:3a:4f:86:8b:a9:6d:4e:8e:de:66:02:43:28:3e:
56:68:3e:27:c0:75:a1:97:4b:07:a8:9f:cd:2d:1a:
89:70:6a:b4:32:ae:aa:e9:a7:ed:e5:b9:63:a9:d2:
54:1a:f2:18:b8:50:8b:b0:a8:ca:c2:8f:46:e9:9e:
21:21:b6:1a:bb:20:e6:83:e5:e9:4d:a6:f7:2b:63:
16:e6:65:fd:0c:36:d9:e0:83:ec:ed:43:05:0d:97:
40:26:0b:2e:1a:da:55:48:f4:99:ad:94:b5:b2:09:
88:cc:5a:f0:26:f9:54:8e:65:5e:81:b9:b3:ce:00:
76:92:d4:cc:f8:94:80:0b:c4:30:e8:a8:6b:b6:d6:
8d:b3:d3:a1:d6:57:89:56:74:4c:b4:f9:ad:47:1b:
bc:d3:b7:cf:d1:43:fe:5d:83:17:3a:c1:88:2d:a9:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DF:27:12:39:3E:89:F8:62:22:22:E0:90:9E:52:F5:1F:93:31:4F
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1f:37:71:8f:83:c1:56:65:7f:bb:82:95:b3:1e:63:f6:3c:
5b:44:e1:aa:b8:a2:c8:16:cd:d1:53:4d:b8:7e:ce:14:cb:8f:
78:44:b2:a9:9f:13:f3:28:58:9c:6a:b8:79:08:6a:53:9b:92:
1b:09:a1:13:ed:b8:4a:a0:d2:17:b7:57:e3:6c:f9:62:b1:ed:
14:13:21:89:d9:65:c3:c7:6b:9f:9e:02:7a:19:31:9d:40:61:
00:a4:41:95:c1:e0:e7:18:6c:f0:94:a0:d4:b4:9f:78:25:f8:
3d:63:91:38:f4:91:51:db:c7:6e:be:10:d0:39:38:2b:75:16:
35:6f:19:4e:fc:bf:1b:11:bc:ac:64:af:88:42:13:0e:d3:1d:
5d:cb:71:ce:c8:08:1b:90:f3:e1:f1:ec:fd:88:7e:e4:4b:73:
4c:a7:5c:86:47:cb:11:4c:91:4f:c8:eb:fb:25:80:4e:95:09:
27:f9:25:1e:ac:33:e0:9a:19:89:a0:d4:93:b0:e1:8a:2f:b3:
2f:1a:7e:3d:8a:f1:bc:c7:4e:a6:b5:d9:6e:22:15:1f:22:90:
1e:f5:8d:12:22:e0:81:22:93:1d:fd:1b:fc:cc:d4:3e:69:79:
0c:86:fe:1c:63:4f:e5:c1:e5:bf:84:7f:cd:35:92:3e:ed:9e:
08:41:71:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:13:47 2026 by rpki-client