Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: za6WzGn4/uuhoBF2exkNgxgErtIPhzlvtH2HaAw62PY=
Subject key identifier: 33:A7:BB:D1:F9:85:50:B0:26:85:A8:2E:16:3B:1A:61:59:94:56:EF
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 019FA373311AC3087FED1211D22115B96515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 1336
Signing time: Mon 27 Jul 2026 12:01:03 +0000
Manifest this update: Mon 27 Jul 2026 12:01:03 +0000
Manifest next update: Tue 28 Jul 2026 12:01:03 +0000
Files and hashes: 1: 1--uR84TmxMmj_tqc32k0ls6g_r4.roa (hash: IA0jf36x0dXydwjCq4BOEj93DRAJ8PodXiTOIuTYy3Q=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: rKgDf5ZJ74pFW3pX1UWHj7apdB99S/TCgJSQF5M3Yxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:31:1a:c3:08:7f:ed:12:11:d2:21:15:b9:65:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Jul 27 12:01:03 2026 GMT
Not After : Jul 28 12:01:03 2026 GMT
Subject: CN=33a7bbd1f98550b02685a82e163b1a61599456ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:34:7b:eb:8b:ac:92:dc:58:63:a7:5f:f5:
df:ba:29:70:70:9c:6e:86:c9:20:05:ff:6d:50:ae:
c7:7b:b1:50:10:be:dd:9f:b8:ae:2b:92:1a:01:ff:
99:2e:60:16:dc:4e:f1:6a:93:95:59:bb:5f:65:27:
4d:a2:87:b7:d4:c8:21:d8:ed:fe:bb:ea:16:09:ce:
e8:5b:9c:95:d2:f4:01:ab:95:56:fa:e9:f2:f0:e8:
aa:e5:96:ef:fb:f2:86:31:37:2c:78:2b:22:ff:b5:
9e:b0:f4:d5:da:81:aa:b9:68:b3:2c:a6:17:9d:f0:
66:75:55:46:09:31:d2:3b:e9:d1:7d:29:b5:ee:1b:
aa:c4:59:80:f3:82:4c:9e:7b:88:45:8f:b1:d5:be:
16:a8:32:fc:36:93:3b:5e:7a:6f:95:44:94:78:72:
a6:a5:93:7b:e1:f0:fb:fd:64:3b:6b:a7:5a:5f:0d:
66:9d:b5:68:20:91:97:77:98:22:e4:50:99:86:f5:
a7:ee:b2:cc:31:9d:67:bf:ee:4c:fb:95:18:2c:b4:
74:59:0c:97:fe:4d:24:80:c6:77:4a:7f:ed:06:da:
c0:3f:5c:29:d9:80:d7:6f:da:a7:b4:6f:f5:12:28:
ff:63:84:77:62:65:88:ae:2d:62:3e:af:78:b1:25:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A7:BB:D1:F9:85:50:B0:26:85:A8:2E:16:3B:1A:61:59:94:56:EF
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:88:da:61:e8:df:20:19:39:6c:5b:38:52:24:4d:be:dc:0c:
41:d3:aa:d9:64:7d:ce:e1:93:ad:bd:36:d6:23:d2:74:ea:ca:
10:7a:eb:c2:61:c9:bc:03:68:50:49:01:3e:f9:59:58:f9:3a:
79:15:e3:2d:8e:a6:ad:2e:56:37:d6:5a:a2:24:59:43:cd:9d:
da:49:38:fa:f3:b8:c8:f4:50:49:a3:1f:18:39:fa:f3:f0:23:
01:e3:31:5b:33:33:77:5b:b0:76:30:3d:39:b3:08:ee:13:d6:
39:8e:cc:82:66:4c:60:4e:cf:a7:e0:5a:4d:ca:e0:d9:25:37:
32:20:88:2b:6b:41:85:b1:2c:4d:bd:d5:ba:d2:de:e1:89:46:
7c:4e:89:9d:ae:93:11:43:14:d9:1b:cf:bb:d1:70:62:20:17:
88:37:14:31:43:b2:60:b1:db:4d:db:71:4e:f8:14:c7:fd:94:
88:bb:42:25:e7:09:e5:e7:08:4d:d0:66:79:17:c5:f9:71:68:
75:68:61:5b:b8:f1:9f:17:0a:22:01:60:ce:ee:7d:0c:05:be:
c4:3a:9b:61:0b:63:ed:04:dd:e0:ea:0e:4e:b4:c5:dd:51:42:
70:dd:23:f7:bd:58:30:a5:a7:95:f8:58:fb:77:ba:2f:92:5e:
4a:f7:1e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:18:58 2026 by rpki-client