Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: OwItQKqYYMPIbWF0gjM61BMcfxecdZktCKBPQsH44Vs=
Subject key identifier: A3:32:77:39:56:23:19:E2:E3:9F:B6:46:E6:39:0E:80:B9:00:C8:1F
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 019F11F800F38B4B96640FE6A074050906BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 1989
Signing time: Mon 29 Jun 2026 06:01:33 +0000
Manifest this update: Mon 29 Jun 2026 06:01:33 +0000
Manifest next update: Tue 30 Jun 2026 06:01:33 +0000
Files and hashes: 1: LUGSDv7DrtC6uhqKMg1-4tFi0x8.roa (hash: fV+caAzqEo99T8yXb9ytJ67VOc9pjgshPYU0owP7CNs=)
2: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: L7N2Gfl1U9imLhzOw8umskilknaEuXynE6idcqeqCkU=)
3: duU8-DqcrbJR-jS_G7eKQiKxR-8.roa (hash: cFWSCbveByhBThDaIpOI1aib6oTyv0EzcL769gpyL08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:00:f3:8b:4b:96:64:0f:e6:a0:74:05:09:06:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Jun 29 06:01:33 2026 GMT
Not After : Jun 30 06:01:33 2026 GMT
Subject: CN=a3327739562319e2e39fb646e6390e80b900c81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:a3:89:6e:aa:2e:f5:ee:db:27:e4:77:ef:
b3:d5:cf:89:8e:70:09:ee:f9:d6:24:83:90:35:e3:
c2:ef:6e:83:33:cd:45:f9:ec:5c:42:08:de:4b:1c:
a8:51:54:17:3f:fc:69:0c:82:74:be:04:0f:bf:a5:
d8:62:0a:c2:57:32:55:46:38:b7:36:fa:d8:a4:37:
8d:61:aa:4c:7d:db:0d:f9:8f:7b:80:3f:6e:17:2e:
0b:d2:e4:7d:64:23:64:0c:39:0f:e8:74:18:ad:45:
89:09:9d:02:27:f2:6f:d4:d6:44:42:a3:1a:cc:8b:
28:d6:00:8f:4c:95:f2:bb:40:8a:20:19:f0:e3:28:
85:b5:99:5e:97:9b:47:7e:cf:e4:25:99:10:00:a0:
b1:6a:95:47:5e:2e:d2:1d:4b:2e:8a:50:19:34:78:
98:ff:1d:9e:4a:1c:5b:aa:7d:2f:e5:85:13:98:e6:
b9:ca:f6:6f:fb:f1:fb:99:54:56:4e:f2:87:b1:94:
c4:d0:8f:dd:f8:5d:7b:ab:96:c1:9f:54:b6:75:33:
7e:9a:1f:ca:b7:54:7c:71:90:7b:97:18:26:8f:a5:
4d:ce:fc:22:1d:cd:a7:f2:b9:2a:db:4e:c3:92:ae:
f5:5b:01:8d:21:a2:5d:20:bb:dd:98:e9:e8:ba:c1:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:32:77:39:56:23:19:E2:E3:9F:B6:46:E6:39:0E:80:B9:00:C8:1F
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:14:7e:56:8f:33:53:1b:98:fb:d2:5a:9e:e4:57:b6:3b:35:
75:8e:46:98:4b:72:a8:5c:d4:40:91:0f:e8:e3:ae:23:74:80:
88:61:2c:2a:d1:e9:3c:59:66:82:b2:d5:5c:9e:7f:86:a4:95:
e0:f4:95:c8:10:45:b4:19:4a:d7:bb:f3:58:bd:94:92:1f:bf:
0a:78:ca:1e:b8:cd:fb:fa:d3:f0:73:ac:c8:91:ea:bc:34:3f:
08:8e:e4:97:a0:76:46:f9:b8:8d:5b:df:2d:e1:cb:9f:ca:8c:
32:60:be:c5:ab:df:5b:57:a3:6d:76:66:66:3c:0c:9b:eb:fa:
d5:c6:ca:a5:ee:1b:e7:ad:83:71:c1:51:8b:44:5c:d0:4c:cf:
93:41:f1:82:b3:ea:01:af:9d:33:eb:78:69:0d:45:bd:aa:38:
ec:cf:23:37:af:9a:66:6e:71:81:33:30:1f:07:51:5d:90:00:
a2:cc:54:f0:6a:93:50:d7:30:35:27:7f:c3:64:06:76:0e:70:
71:57:2f:fa:5a:50:22:78:9f:87:62:81:e1:10:08:78:b0:c0:
34:24:7a:fb:5c:7b:38:2f:ea:73:46:c6:0a:69:61:6a:ee:01:
f4:26:9e:48:96:e9:36:7a:90:46:10:5b:ab:55:14:0e:78:12:
d6:bc:62:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8R+ADzi0uWZA/moHQFCQa/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjcxMjRkOTgwM2E3ZGU1NDg4MzE2NGEzNzZlYTcyZTNj
NjNlYWYwHhcNMjYwNjI5MDYwMTMzWhcNMjYwNjMwMDYwMTMzWjAzMTEwLwYDVQQD
EyhhMzMyNzczOTU2MjMxOWUyZTM5ZmI2NDZlNjM5MGU4MGI5MDBjODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEmjiW6qLvXu2yfkd++z1c+JjnAJ
7vnWJIOQNePC726DM81F+excQgjeSxyoUVQXP/xpDIJ0vgQPv6XYYgrCVzJVRji3
NvrYpDeNYapMfdsN+Y97gD9uFy4L0uR9ZCNkDDkP6HQYrUWJCZ0CJ/Jv1NZEQqMa
zIso1gCPTJXyu0CKIBnw4yiFtZlel5tHfs/kJZkQAKCxapVHXi7SHUsuilAZNHiY
/x2eShxbqn0v5YUTmOa5yvZv+/H7mVRWTvKHsZTE0I/d+F17q5bBn1S2dTN+mh/K
t1R8cZB7lxgmj6VNzvwiHc2n8rkq207Dkq71WwGNIaJdILvdmOnousGd2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMydzlWIxni45+2RuY5DoC5AMgfMB8GA1UdIwQY
MBaAFEknEk2YA6feVIgxZKN26nLjxj6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMt
ZjAxNTBjODFhY2Y1LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMtZjAxNTBjODFhY2Y1
LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuRR+Vo8z
UxuY+9JanuRXtjs1dY5GmEtyqFzUQJEP6OOuI3SAiGEsKtHpPFlmgrLVXJ5/hqSV
4PSVyBBFtBlK17vzWL2Ukh+/CnjKHrjN+/rT8HOsyJHqvDQ/CI7kl6B2Rvm4jVvf
LeHLn8qMMmC+xavfW1ejbXZmZjwMm+v61cbKpe4b562DccFRi0Rc0EzPk0HxgrPq
Aa+dM+t4aQ1Fvao47M8jN6+aZm5xgTMwHwdRXZAAosxU8GqTUNcwNSd/w2QGdg5w
cVcv+lpQInifh2KB4RAIeLDANCR6+1x7OC/qc0bGCmlhau4B9CaeSJbpNnqQRhBb
q1UUDngS1rxiQg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 15:45:33 2026 by rpki-client