Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: ZWh+xznqSowea/KrBciNLjJt8iuvLpyol/b8b77xhkA=
Subject key identifier: 78:35:A9:46:11:A0:F2:AE:EC:08:9A:31:D3:9F:D7:13:51:45:1F:D3
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 019D38D3C6E6D44077CEFB6BB9CF98E55F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 09:01:36 +0000
Manifest this update: Sun 29 Mar 2026 09:01:36 +0000
Manifest next update: Mon 30 Mar 2026 09:01:36 +0000
Files and hashes: 1: LUGSDv7DrtC6uhqKMg1-4tFi0x8.roa (hash: fV+caAzqEo99T8yXb9ytJ67VOc9pjgshPYU0owP7CNs=)
2: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: 6rRcDrmx2UrZasq1oW7vebKo2kG7aQ9nhBfWRWdvQc4=)
3: duU8-DqcrbJR-jS_G7eKQiKxR-8.roa (hash: cFWSCbveByhBThDaIpOI1aib6oTyv0EzcL769gpyL08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c6:e6:d4:40:77:ce:fb:6b:b9:cf:98:e5:5f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Mar 29 09:01:36 2026 GMT
Not After : Mar 30 09:01:36 2026 GMT
Subject: CN=7835a94611a0f2aeec089a31d39fd71351451fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1b:92:b3:b8:67:01:a8:cd:ab:93:dd:55:8b:
04:16:ae:ae:cc:ed:fb:2b:cf:db:79:47:4d:e6:c1:
e7:a4:da:22:9d:28:fd:32:a9:b0:b2:20:e0:a4:f5:
6d:0a:cd:7d:9a:76:34:0d:0a:70:3d:32:4a:22:e3:
93:90:9d:74:aa:68:b9:b7:d4:d2:fd:6c:c0:5a:6f:
6f:ec:4a:b3:38:2d:d1:ad:bf:3f:08:52:c4:23:a2:
3d:72:a6:5e:06:33:a2:50:5f:83:f8:f5:73:ed:32:
69:06:52:38:03:be:f1:7f:74:55:c0:36:28:75:78:
63:d4:d9:14:15:9d:e0:00:4c:04:38:8b:40:53:6e:
7d:ca:82:e0:93:77:77:2a:64:9b:4c:4a:6d:2a:69:
8c:30:60:03:69:fb:87:e9:98:28:bd:c3:bb:89:58:
df:f3:6c:61:67:25:64:1d:bc:67:cd:8f:93:6c:be:
d9:f8:d2:68:bd:35:83:a6:c6:c1:87:0d:5e:fc:e2:
b6:9a:89:d5:63:06:e4:ce:6f:78:b2:bf:ab:89:80:
28:22:ad:3f:4c:a0:85:55:55:8b:98:cd:7e:c1:5f:
78:2d:46:e3:ba:f8:70:92:1f:9a:9d:b5:24:29:f8:
32:a6:db:b3:27:9f:1d:87:5b:a5:16:05:3d:22:a7:
7e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:35:A9:46:11:A0:F2:AE:EC:08:9A:31:D3:9F:D7:13:51:45:1F:D3
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2f:26:19:23:08:45:c1:0b:68:72:c4:8d:83:6f:d3:7a:9b:
16:ae:e8:25:9c:aa:f9:bd:20:5b:0c:4a:09:39:c6:bf:c6:de:
ec:71:85:c1:d5:c3:07:83:a7:e9:66:9d:e0:74:18:74:ea:ea:
47:2c:96:08:c3:a4:5a:bc:3f:79:27:7b:1e:3e:f8:9c:90:68:
4a:b2:a6:75:5d:cb:74:59:cb:f2:b6:c1:1b:82:be:0c:8d:c9:
65:14:f8:d4:94:f5:b1:c7:de:b0:ae:71:5a:65:75:bb:54:a9:
38:b4:b6:77:bf:0d:0c:6a:e4:89:d2:14:c8:3c:63:08:25:42:
d8:ed:9a:ec:1e:f5:8a:71:ba:d6:c2:f2:62:3e:ad:6f:97:da:
b1:6d:2f:bd:09:62:36:a6:d3:50:d8:bc:a8:74:9d:47:e3:81:
d8:15:40:f2:91:74:57:ff:02:15:44:64:53:80:eb:b2:03:5b:
67:50:2f:3e:3e:15:ac:66:65:d9:13:c7:9a:13:13:30:86:81:
e4:91:11:1a:a8:6b:cb:cb:b9:88:7c:c8:5f:73:68:12:05:01:
ed:ca:5a:f6:59:88:c0:be:7e:83:ef:07:12:95:a2:ca:08:8d:
02:43:2f:ce:dc:0c:6e:41:2b:4e:a0:4d:8e:5f:78:0d:84:4d:
e0:3f:03:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:14 2026 by rpki-client