Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
File: f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft (raw, json)
Hash identifier: y58VrkFt6O2xC2C+Wty7MmdTxvT4B4582FaVz0XGgTc=
Subject key identifier: C9:18:0B:C5:F0:13:3D:44:13:DC:DD:F0:5B:49:6F:92:1D:88:FC:C4
Authority key identifier: 7F:FB:1C:81:9F:5C:6E:B7:39:D6:94:55:9B:33:1E:6F:4B:3F:2A:CF
Certificate issuer: /CN=7ffb1c819f5c6eb739d694559b331e6f4b3f2acf
Certificate serial: 019D38D327AD81FBD51A72EFD3819D7525E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
Manifest number: 2F
Signing time: Sun 29 Mar 2026 09:00:55 +0000
Manifest this update: Sun 29 Mar 2026 09:00:55 +0000
Manifest next update: Mon 30 Mar 2026 09:00:55 +0000
Files and hashes: 1: NwGyrarXznEP79mpSfk4-aoAcss.roa (hash: kWL+oTlCQ4M6RuD7dSjXf+gw9XkHswGxJGJoJ/U5AMw=)
2: f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl (hash: RKUDsp9teKUAJW6iukXxdblJpXnseetD5vFRK4Sm1z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:27:ad:81:fb:d5:1a:72:ef:d3:81:9d:75:25:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffb1c819f5c6eb739d694559b331e6f4b3f2acf
Validity
Not Before: Mar 29 09:00:55 2026 GMT
Not After : Mar 30 09:00:55 2026 GMT
Subject: CN=c9180bc5f0133d4413dcddf05b496f921d88fcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:38:29:b2:09:1f:4c:32:34:4d:a8:6b:b6:42:
8b:d0:dc:dc:75:fd:15:89:62:79:7a:fc:fa:04:43:
e8:3d:72:de:34:fc:64:49:73:c7:f4:84:99:8c:a4:
de:fb:e9:33:18:d0:43:38:e3:98:47:59:73:70:ef:
5b:20:0a:10:61:d5:3a:cd:0e:04:1c:bc:9e:79:2a:
d7:45:71:60:e1:d3:b9:b1:be:38:f5:63:95:e3:49:
aa:2e:09:05:a7:f3:06:50:3e:9d:c3:2f:1e:e9:c9:
bf:b3:c2:fb:59:b8:fd:83:38:48:ce:09:c3:3b:cf:
b8:12:9b:d9:4c:39:c6:b6:11:d3:cf:1c:9c:cb:9b:
a7:a6:19:0e:ad:08:03:c6:4f:a8:12:cb:87:68:5c:
81:c2:73:26:17:65:8a:4c:18:58:58:17:ea:ff:0f:
c6:8d:2c:e1:24:ac:2f:32:81:32:8b:bd:35:77:33:
94:16:cb:45:cc:ee:35:52:b2:5d:df:5c:39:67:8a:
26:c2:d9:fa:62:80:fc:34:af:f8:1f:76:13:78:4e:
78:a2:5a:14:f8:36:2c:3e:b3:81:65:4a:4f:62:3e:
7d:82:77:82:ad:01:1a:7b:9a:69:84:6b:0a:28:d7:
89:9e:1b:f3:7f:78:51:91:3c:52:d2:87:f8:48:4d:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:18:0B:C5:F0:13:3D:44:13:DC:DD:F0:5B:49:6F:92:1D:88:FC:C4
X509v3 Authority Key Identifier:
keyid:7F:FB:1C:81:9F:5C:6E:B7:39:D6:94:55:9B:33:1E:6F:4B:3F:2A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e5:fc:9e:e4:d9:08:ac:6c:4c:76:82:27:20:5b:18:5b:99:
3c:fe:11:08:7c:77:46:b1:cc:68:8b:e4:5b:19:09:e0:bf:77:
d6:ee:4b:6f:be:fd:da:15:c6:3c:18:00:9c:a5:53:cd:81:e8:
5d:8c:6c:ae:5d:49:d9:98:34:30:e0:d7:da:fd:a0:83:8b:c2:
83:b9:03:b9:e6:54:53:9a:50:8c:b2:be:7f:ce:ca:fb:39:cd:
3d:19:37:25:57:29:74:81:fb:02:ce:f1:5b:7b:5a:d4:0c:63:
02:6a:5b:a6:0a:9f:69:c5:d5:75:47:4a:67:6d:3b:d7:8e:40:
20:a0:91:f0:cf:14:4f:b3:37:ee:28:35:83:42:35:36:9a:43:
ee:ed:30:f0:d2:a3:14:8e:36:f4:36:10:9d:40:0e:38:98:c6:
27:59:d8:1d:2b:e7:e0:32:65:94:0d:a3:b7:54:40:27:c7:3f:
8d:b5:bb:7f:c3:f5:50:9d:ce:d7:4d:1e:be:94:c7:97:81:13:
a0:c9:f0:78:bf:42:32:ea:56:95:ab:12:89:ee:60:ca:fe:11:
79:be:56:5f:bc:3e:43:07:96:50:c1:9b:6d:2d:7b:e4:9c:c8:
cd:d4:16:57:ed:d8:be:c3:a9:28:64:b6:e4:d5:c2:8e:25:a6:
d9:7d:6e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:29 2026 by rpki-client