Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: DdczrVpknBzeWYLNJx6JNr2s3iROxk4Pj03ZvyXbZgs=
Subject key identifier: 40:17:E0:88:0B:F5:C6:F5:45:73:B9:2B:C2:34:EA:A8:27:4D:66:E0
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 019FA228FE15426C15FFA3E9634813F9B5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 06:00:23 +0000
Manifest this update: Mon 27 Jul 2026 06:00:23 +0000
Manifest next update: Tue 28 Jul 2026 06:00:23 +0000
Files and hashes: 1: 3rjMBVFe8uKBxeuV296UIWDteN0.roa (hash: BWIf1Yq2kYJ+acS7y1zpLt/FLnKlwt4+VzDbiu9Tn9U=)
2: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: Gz6ObFwvtPF3z+5lxIQx906DS7nlsQ0nkt8nSoy8Kqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:28:fe:15:42:6c:15:ff:a3:e9:63:48:13:f9:b5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Jul 27 06:00:23 2026 GMT
Not After : Jul 28 06:00:23 2026 GMT
Subject: CN=4017e0880bf5c6f54573b92bc234eaa8274d66e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:bf:1f:4b:91:2e:5e:5c:40:03:fe:ff:b2:
22:23:7b:1a:2b:f4:2d:ec:0f:3e:c5:7b:1e:77:d9:
91:e3:2e:00:18:84:e6:c3:5e:26:eb:a7:6c:70:b4:
8f:fa:4b:78:5a:9b:d8:f2:44:68:ab:04:cb:4c:9b:
e6:e5:f3:63:8e:13:70:4a:d2:6d:54:bc:05:c5:aa:
ef:ae:03:a4:63:95:b0:31:f7:d2:2e:c7:4f:ad:17:
c0:f7:50:0c:f9:31:0a:44:13:09:4e:ed:c9:04:1f:
72:d9:7a:40:fd:81:77:23:d0:26:84:1d:8f:7c:e0:
3b:39:f1:70:b9:67:1e:19:18:84:d0:54:54:d8:6e:
a8:0e:8a:eb:ac:42:62:9c:b2:9d:54:f0:e4:1f:99:
da:9f:94:03:4b:84:97:54:79:58:24:75:cc:bd:cc:
bf:88:54:26:a4:e0:1e:c7:7e:5f:d9:eb:9d:2d:c1:
31:88:f3:bd:03:3d:28:f1:3c:a1:be:4d:de:36:81:
dc:f0:58:51:94:13:be:91:a0:ad:5a:6b:3d:26:ac:
62:16:bc:bc:a4:d7:96:05:87:f8:21:f4:e6:be:7b:
92:e1:02:78:89:26:86:c1:bd:c2:cd:8a:be:b6:ae:
c6:05:bb:7d:c7:79:51:1e:43:c4:d2:54:4a:05:f8:
79:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:17:E0:88:0B:F5:C6:F5:45:73:B9:2B:C2:34:EA:A8:27:4D:66:E0
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4d:b0:50:7a:6c:a2:71:34:c2:6e:00:30:b5:89:0a:7e:e1:
e4:c5:e1:80:ad:d1:97:af:af:45:db:e4:8f:a2:b4:e0:f4:6b:
89:83:db:15:36:32:fe:20:92:8c:ab:57:23:ce:9e:39:49:14:
cd:e5:68:2a:1b:e3:6e:3d:47:81:e0:0d:2f:cd:c7:7d:9f:28:
2a:80:be:0c:c2:41:ba:0b:91:09:45:1f:b4:3c:dc:37:7d:f7:
e6:a6:7e:aa:2f:52:0b:e5:d2:79:15:59:da:d3:e7:75:e4:46:
2f:e6:4b:1a:f0:25:91:8d:a9:fa:46:9c:f0:36:74:8a:92:17:
25:99:17:04:c6:89:cf:72:e4:02:37:f2:0d:1e:08:28:04:c0:
fb:5a:b9:3a:4e:f1:3c:dc:a2:60:81:c4:84:77:f4:3d:c1:16:
06:05:14:9d:a3:86:bb:8a:d4:4d:d6:d1:36:3a:79:5c:9f:d5:
2a:bf:78:3a:09:c6:3e:ef:77:d1:23:a3:7a:8f:05:78:9e:25:
e6:d7:ab:9e:d7:c7:ac:ed:e0:d4:fa:04:fe:09:0e:20:f2:1c:
ad:6a:17:bf:19:7f:74:4b:3a:94:ea:22:93:04:51:6a:39:46:
c7:e9:3d:eb:ed:4e:0d:7e:8d:c2:26:db:86:6d:9c:7b:40:fc:
08:bc:ac:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:19:26 2026 by rpki-client