Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: zN8LOte56paIhjL8enbI5h5njpmKJfak4K5q+eXvE3k=
Subject key identifier: 19:F3:7E:7A:B2:94:CA:A1:73:F7:75:DF:98:F9:ED:84:30:34:CC:FE
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 019D382E930EAC0D7FDF7F5773EBA9FCB31D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: 3rjMBVFe8uKBxeuV296UIWDteN0.roa (hash: BWIf1Yq2kYJ+acS7y1zpLt/FLnKlwt4+VzDbiu9Tn9U=)
2: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: klHU06oVhffX5eh40O62wxpi8YqSULd8yrMuns7lZF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:93:0e:ac:0d:7f:df:7f:57:73:eb:a9:fc:b3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=19f37e7ab294caa173f775df98f9ed843034ccfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:3a:ac:45:d7:ae:ad:4c:aa:e7:34:d9:5e:
75:40:74:4b:d4:28:92:70:a1:22:65:6f:57:5f:88:
34:0c:f1:be:3c:06:ef:44:00:ce:60:27:27:eb:6d:
b0:67:08:87:c5:7a:85:6c:b4:c4:12:33:88:d4:5c:
ca:35:0f:39:5f:ee:e7:d4:0d:a8:89:e0:1a:37:f8:
22:a0:22:0b:2c:0c:01:a9:1d:d0:2c:a9:48:58:41:
9b:4a:6f:54:48:1c:9c:eb:77:d4:80:07:86:2e:81:
9f:63:7c:26:0e:e5:04:df:96:ea:3d:e2:b3:66:91:
86:52:0f:06:a5:89:72:9e:77:f9:cd:20:f0:95:ba:
58:7f:26:24:3b:d0:f0:d8:ad:8c:af:88:00:65:b1:
c7:4e:18:60:73:f0:57:1e:07:f1:3b:81:81:56:28:
71:a8:61:c8:6e:56:b2:d5:59:9e:d9:24:c7:3b:56:
e3:3c:21:7d:97:f7:1b:40:87:fa:16:ff:05:fc:cd:
56:85:46:f8:5a:08:90:98:0e:70:84:46:a1:1e:7e:
cc:42:cf:47:62:dd:95:d6:33:b8:11:06:72:d0:7f:
4a:48:dc:90:e0:bf:ef:63:f5:2b:66:1e:6e:50:db:
33:4d:2a:90:07:2a:4e:3e:ad:34:78:ab:28:38:8a:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F3:7E:7A:B2:94:CA:A1:73:F7:75:DF:98:F9:ED:84:30:34:CC:FE
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:49:06:eb:20:b2:2e:c7:7e:d5:fc:be:e7:66:5c:ec:59:d8:
01:d5:42:99:fc:2c:f9:52:d6:c9:fd:3f:9f:b6:0c:14:54:07:
9b:0d:13:d2:b7:d2:12:45:8d:56:5c:06:cb:b9:6c:98:65:83:
a1:be:cc:ea:ef:c2:75:6a:a4:45:d4:19:a1:05:3e:db:25:a9:
5b:ed:4b:9f:c7:aa:cc:15:be:2d:5a:99:3b:35:b5:77:7a:a8:
7a:c1:e4:24:b3:68:e0:cd:e7:dc:be:a3:e4:2a:d1:f8:b6:f2:
e1:33:9b:be:57:f6:4b:e8:d8:6d:6c:0b:8c:eb:a1:0b:f4:b1:
f6:d9:68:14:e0:1e:a8:56:a7:a3:42:f1:6e:0e:49:38:21:6a:
77:9a:79:0a:2a:b1:c6:56:2e:00:3b:e7:56:7d:fc:54:96:69:
3b:6a:87:b8:7e:04:92:8f:bf:cd:ed:85:e3:41:66:17:94:c8:
c7:32:61:38:27:ea:f9:12:5e:60:1f:4e:7c:bb:4d:7e:a3:94:
3c:4e:0f:e1:0a:12:49:8b:e0:04:11:55:80:f1:c5:86:2c:b7:
76:9b:0f:31:46:4c:68:02:f1:ec:01:2e:58:a8:db:0c:90:d4:
8e:3a:fe:66:a3:19:69:48:0c:64:fa:a3:47:ac:10:1d:76:31:
98:56:dd:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LpMOrA1/339Xc+up/LMdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjA5MzE1MGY0YTQ2MTAxYWNkN2VhM2EyNmJiNDM4NTEz
MTIzYjUwHhcNMjYwMzI5MDYwMTA5WhcNMjYwMzMwMDYwMTA5WjAzMTEwLwYDVQQD
EygxOWYzN2U3YWIyOTRjYWExNzNmNzc1ZGY5OGY5ZWQ4NDMwMzRjY2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSE6rEXXrq1Mquc02V51QHRL1CiS
cKEiZW9XX4g0DPG+PAbvRADOYCcn622wZwiHxXqFbLTEEjOI1FzKNQ85X+7n1A2o
ieAaN/gioCILLAwBqR3QLKlIWEGbSm9USByc63fUgAeGLoGfY3wmDuUE35bqPeKz
ZpGGUg8GpYlynnf5zSDwlbpYfyYkO9Dw2K2Mr4gAZbHHThhgc/BXHgfxO4GBVihx
qGHIblay1Vme2STHO1bjPCF9l/cbQIf6Fv8F/M1WhUb4WgiQmA5whEahHn7MQs9H
Yt2V1jO4EQZy0H9KSNyQ4L/vY/UrZh5uUNszTSqQBypOPq00eKsoOIrzvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnzfnqylMqhc/d135j57YQwNMz+MB8GA1UdIwQY
MBaAFJUgkxUPSkYQGs1+o6JrtDhRMSO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQt
ZTgwNGRjYmRkNzYyLzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQtZTgwNGRjYmRkNzYy
LzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0kG6yCy
Lsd+1fy+52Zc7FnYAdVCmfws+VLWyf0/n7YMFFQHmw0T0rfSEkWNVlwGy7lsmGWD
ob7M6u/CdWqkRdQZoQU+2yWpW+1Ln8eqzBW+LVqZOzW1d3qoesHkJLNo4M3n3L6j
5CrR+Lby4TObvlf2S+jYbWwLjOuhC/Sx9tloFOAeqFano0Lxbg5JOCFqd5p5Ciqx
xlYuADvnVn38VJZpO2qHuH4Eko+/ze2F40FmF5TIxzJhOCfq+RJeYB9OfLtNfqOU
PE4P4QoSSYvgBBFVgPHFhiy3dpsPMUZMaALx7AEuWKjbDJDUjjr+ZqMZaUgMZPqj
R6wQHXYxmFbd+Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:53 2026 by rpki-client