Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: rdO1v51RPCdA7K7XK5Q/GfQ+B75qXdqIj9SxAgjDziM=
Subject key identifier: B5:CD:1E:71:BE:9C:23:E8:6B:45:4E:98:DA:0D:5F:22:F7:A6:2F:57
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 01A08B31427CC925C1DDA535D3402AFFD0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 13AE
Signing time: Thu 10 Sep 2026 12:00:56 +0000
Manifest this update: Thu 10 Sep 2026 12:00:56 +0000
Manifest next update: Fri 11 Sep 2026 12:00:56 +0000
Files and hashes: 1: 1--uR84TmxMmj_tqc32k0ls6g_r4.roa (hash: IA0jf36x0dXydwjCq4BOEj93DRAJ8PodXiTOIuTYy3Q=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: gdM0jCDY3tmp7aUUdc4DusD2jz5H5UiwxhaKYst392g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:42:7c:c9:25:c1:dd:a5:35:d3:40:2a:ff:d0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Sep 10 12:00:56 2026 GMT
Not After : Sep 11 12:00:56 2026 GMT
Subject: CN=b5cd1e71be9c23e86b454e98da0d5f22f7a62f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:a3:51:88:d1:51:58:d5:d1:dc:9d:d5:c1:
52:28:11:35:02:4a:62:5a:f0:d6:c8:fc:fd:0f:1f:
cf:c7:c5:27:59:98:4a:ab:c0:1a:43:ca:3c:65:c8:
4b:46:7d:3c:9c:e6:7a:b7:13:e4:19:07:30:84:28:
e5:d7:da:a3:13:9a:ee:d0:64:ac:f5:94:fe:34:76:
fa:3a:75:fd:70:db:4d:40:35:00:8b:8f:88:ab:09:
4e:ce:cd:df:f2:cd:03:90:e2:28:42:85:65:71:ba:
10:40:31:fa:84:6c:6b:3c:26:5b:27:8d:7a:66:14:
70:12:42:6b:e8:cd:b9:44:f7:8d:4f:ee:6f:bd:4a:
30:33:96:7c:ac:7a:98:e0:76:59:35:e1:f4:23:c7:
3f:aa:4b:c2:82:cd:cc:b0:08:eb:15:c4:76:bd:9e:
5c:e3:74:bc:4e:00:69:90:1a:28:89:9b:71:15:dd:
53:d6:3b:48:95:6f:34:fd:c7:28:83:1e:df:e9:7e:
85:1f:26:b5:5f:ba:8d:05:80:40:d3:8b:9a:04:7b:
57:6a:ee:9f:52:e7:7a:d8:02:de:26:fc:15:c6:5d:
39:44:f6:aa:1d:d3:f8:b4:4b:fd:b3:5a:2e:b2:bd:
90:b1:62:f3:da:4e:ca:5b:ed:34:be:b6:4d:34:01:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CD:1E:71:BE:9C:23:E8:6B:45:4E:98:DA:0D:5F:22:F7:A6:2F:57
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b0:7a:03:10:8e:61:dd:dc:a0:65:89:b8:ea:9a:03:69:7f:
d7:2c:43:cb:fe:15:5f:3a:57:8e:1c:9a:63:3e:ed:45:e5:23:
bd:1a:5a:a1:90:17:1a:f3:cb:ab:60:d9:58:6b:47:31:31:eb:
75:57:82:53:7c:bd:4f:b4:2f:1f:19:a4:a6:47:5e:c7:84:f8:
d2:0d:6b:a1:eb:dd:39:30:6b:0b:68:0b:76:17:f7:ad:32:a3:
f3:6d:ea:f6:1d:63:47:a6:bf:f1:34:f7:c2:a1:85:da:c7:81:
98:af:2e:3c:70:33:c5:54:4a:07:17:9c:db:81:ca:ca:18:99:
97:8c:4d:c3:fd:ad:be:c1:6f:8d:1b:3f:13:53:0e:f9:98:42:
2a:d4:b1:72:40:57:ae:5c:e3:bd:18:3c:ea:d7:45:a3:ee:df:
5f:82:d9:f4:fa:8f:18:cd:a0:85:41:29:13:64:80:36:73:91:
78:13:e6:73:cc:35:81:68:52:3d:b6:74:01:95:19:45:3d:8a:
cf:8f:ea:29:09:39:bd:cc:1e:60:71:6e:c2:22:49:99:ee:70:
81:a9:f0:ae:41:5a:fe:cb:b2:d2:f6:61:34:26:dc:4a:b7:33:
ac:73:66:1a:1e:fe:b5:a4:57:78:95:5d:91:f6:2b:19:94:4c:
bb:03:71:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:25:20 2026 by rpki-client