Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: eujAHB2LHm5SqTX3hMNbO3T6wSNMQ1IYOSgu2SpXjO4=
Subject key identifier: AF:C0:7A:9C:1B:DB:20:B3:09:33:AC:CB:1F:50:33:39:FF:9C:02:D6
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 01A180740C663D82D9E64F0ABD9FB345EEA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 142D
Signing time: Wed 28 Oct 2026 03:00:51 +0000
Manifest this update: Wed 28 Oct 2026 03:00:51 +0000
Manifest next update: Thu 29 Oct 2026 03:00:51 +0000
Files and hashes: 1: 1--uR84TmxMmj_tqc32k0ls6g_r4.roa (hash: IA0jf36x0dXydwjCq4BOEj93DRAJ8PodXiTOIuTYy3Q=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: PSQFJPwxaOIhBgWQq5TUboE72tE8TCc0L3fGXkALXxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:0c:66:3d:82:d9:e6:4f:0a:bd:9f:b3:45:ee:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Oct 28 03:00:51 2026 GMT
Not After : Oct 29 03:00:51 2026 GMT
Subject: CN=afc07a9c1bdb20b30933accb1f503339ff9c02d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:69:2f:e8:11:7a:35:94:58:ce:e9:0d:59:
bd:75:62:58:72:4a:ab:77:ea:e0:07:1a:e2:46:59:
87:0e:1c:3d:1c:c8:48:2c:bc:11:d4:61:66:a0:a9:
56:b2:84:b9:df:a6:b5:1a:f5:b0:db:19:53:06:26:
67:70:f9:ae:44:9f:61:60:b8:9e:3e:68:71:9d:f3:
4a:31:70:5d:27:0b:ec:b7:31:bb:2e:ab:ad:e5:9f:
3f:86:ee:7b:ad:af:b9:e3:6e:ce:bb:8f:ff:e2:7d:
53:38:e1:0c:95:48:4d:a8:2c:af:3a:50:d4:20:75:
a2:bd:3c:b8:00:9c:b6:37:b8:27:0b:60:9c:6e:8d:
a9:23:e8:45:23:8a:e8:de:16:25:e9:1b:f3:77:4d:
6c:65:70:bf:50:ae:32:21:70:18:49:75:5c:b6:f9:
8c:77:b0:e0:5a:b2:30:00:72:30:10:ea:63:1c:e6:
88:44:4c:b7:c2:00:42:26:fb:c3:3f:42:d2:c1:36:
c4:6a:e7:a3:2c:f9:7c:e4:f6:fa:53:f9:b4:81:21:
ec:33:cd:3f:4b:52:a8:eb:d6:6d:db:68:0e:b8:87:
d6:79:b4:81:78:3d:65:0f:50:11:6c:8f:18:39:61:
51:2f:19:a9:39:2e:41:e6:94:6a:34:00:b2:41:c8:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C0:7A:9C:1B:DB:20:B3:09:33:AC:CB:1F:50:33:39:FF:9C:02:D6
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:27:b8:16:85:b4:a0:f1:8b:34:7b:e9:86:e4:ba:01:e4:a5:
31:dd:af:99:dd:48:51:2c:94:7f:9d:1e:69:6e:bf:9e:d3:a0:
7d:c1:bb:7b:33:c8:ad:c7:08:65:cc:46:cc:9b:49:cd:c1:96:
9b:bf:fe:69:b6:a8:a0:cc:09:3f:c6:a5:76:26:f1:b4:28:84:
55:1c:ac:57:b0:1b:43:6a:8c:24:5c:3e:08:89:05:78:84:d5:
6e:53:41:6a:72:f3:45:21:01:f4:f9:70:46:23:8c:0f:d0:c3:
bd:29:d4:17:d8:06:98:2b:e2:07:c7:6e:a4:c9:6d:df:0e:ac:
7b:3e:16:5a:db:f5:19:14:37:86:48:e7:60:0e:fc:dd:61:19:
8f:d6:b4:29:1d:09:48:93:6e:2c:2d:4e:67:c6:b0:df:8a:01:
62:99:0b:2d:c8:d0:53:02:91:be:fb:21:67:be:ab:62:8c:e8:
97:04:c0:7a:c3:d8:71:6f:32:6e:ad:8e:75:e1:4f:ee:20:80:
e6:04:4f:fb:78:ee:99:d9:d5:0b:d9:ce:e5:86:2d:27:ae:04:
7b:28:57:60:85:0d:8e:07:b1:86:29:8d:a8:ff:d0:23:41:a4:
ad:c1:89:c3:20:3f:6e:c4:1a:42:3a:cb:b2:26:22:3d:d0:59:
21:87:f0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:27:11 2026 by rpki-client