Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: s02tK1l2rVLH0qwzvEkUDa8fFws7EjFJWHtng64u4KE=
Subject key identifier: DB:1A:85:CC:D5:48:B9:9A:BE:36:08:88:D3:26:FA:98:0E:87:EE:0B
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 019E2A39582FE5DDF62C3F5836FA99BEEC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 1911
Signing time: Fri 15 May 2026 06:01:01 +0000
Manifest this update: Fri 15 May 2026 06:01:01 +0000
Manifest next update: Sat 16 May 2026 06:01:01 +0000
Files and hashes: 1: LUGSDv7DrtC6uhqKMg1-4tFi0x8.roa (hash: fV+caAzqEo99T8yXb9ytJ67VOc9pjgshPYU0owP7CNs=)
2: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: BPQoB4zJ9rbAZohuFNALdPdwCfgQ90u0NirGnI4riI8=)
3: duU8-DqcrbJR-jS_G7eKQiKxR-8.roa (hash: cFWSCbveByhBThDaIpOI1aib6oTyv0EzcL769gpyL08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:39:58:2f:e5:dd:f6:2c:3f:58:36:fa:99:be:ec:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: May 15 06:01:01 2026 GMT
Not After : May 16 06:01:01 2026 GMT
Subject: CN=db1a85ccd548b99abe360888d326fa980e87ee0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:b1:cf:fd:b1:80:8d:ad:3e:07:e0:3a:75:
8c:6c:55:0b:b8:7b:69:81:9e:55:59:84:53:de:d7:
5d:df:09:0f:a3:44:7a:d0:13:d2:38:8f:6a:f6:21:
13:3c:d0:cc:e6:fc:9f:a7:ac:6e:4d:75:75:10:05:
9a:76:96:12:0e:54:08:eb:5c:19:18:5c:9d:d6:27:
48:ba:fb:be:c3:f2:ff:2b:31:0a:d5:84:7f:be:06:
6c:72:26:37:7a:84:1d:e8:cf:29:d9:11:23:c8:f4:
e9:3d:5d:8c:2f:47:ca:af:9d:22:13:2b:31:71:1e:
cc:1d:5a:b6:21:ce:61:03:dc:89:3f:a5:f4:55:63:
c2:97:16:d4:0e:6d:79:25:5f:5d:23:9b:57:f8:dc:
f5:6f:e7:87:99:2b:8e:e8:b2:3a:fe:44:c6:94:64:
4d:a7:2f:79:c0:04:05:5f:28:8c:e5:0e:51:ad:eb:
d3:77:ba:69:c0:b8:80:3a:94:ed:5a:57:f8:db:77:
2e:a2:00:a3:c6:8f:2a:d9:32:ce:e5:06:cf:c2:ed:
49:2b:e4:20:06:a4:09:94:0f:b9:08:7c:c8:17:1b:
dd:c3:b1:c2:4e:31:d6:11:ca:5c:10:af:f3:d1:81:
b8:bd:70:07:24:49:5c:61:40:d5:cb:96:97:3a:4a:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1A:85:CC:D5:48:B9:9A:BE:36:08:88:D3:26:FA:98:0E:87:EE:0B
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8a:8f:a2:53:21:0b:a4:38:50:0a:52:ba:ab:0f:f3:b1:3f:
66:11:10:b2:1e:8c:3f:36:45:00:61:a2:18:38:d2:a6:77:d4:
bb:b0:1e:22:7f:ba:aa:bb:8f:ea:7b:9c:48:d3:e3:4f:74:ee:
f4:81:70:2c:15:09:51:83:a4:d2:db:97:e4:d3:f7:66:19:d0:
76:28:e4:54:8b:42:8d:04:18:63:4b:58:b9:19:85:19:9c:27:
98:d8:36:11:f1:52:56:49:8e:c8:fd:c2:4f:39:f2:be:76:84:
17:55:75:ad:c2:17:ab:07:c3:6f:67:0a:0e:8a:47:af:33:4f:
87:c0:d7:41:1d:cc:8b:42:e2:5a:b5:55:88:af:ba:9e:88:d0:
60:09:22:5f:f3:b9:b8:ee:05:b3:3d:25:31:10:9c:3f:b9:f7:
9f:2d:88:09:07:1c:b7:35:58:b0:b0:bf:dc:0b:7c:d0:73:dc:
1e:42:e0:38:f3:96:cb:86:68:f7:3e:5e:ef:b2:65:f3:09:e5:
fd:ec:14:89:67:e1:b7:91:6e:34:21:2c:32:0a:22:49:3f:08:
b9:b7:68:22:39:37:01:bd:50:da:03:58:c6:cd:dc:a8:21:39:
4f:9e:a2:bd:31:60:af:c8:ee:d1:4d:fd:23:11:37:62:c3:f2:
1f:6f:5b:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qOVgv5d32LD9YNvqZvux9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjcxMjRkOTgwM2E3ZGU1NDg4MzE2NGEzNzZlYTcyZTNj
NjNlYWYwHhcNMjYwNTE1MDYwMTAxWhcNMjYwNTE2MDYwMTAxWjAzMTEwLwYDVQQD
EyhkYjFhODVjY2Q1NDhiOTlhYmUzNjA4ODhkMzI2ZmE5ODBlODdlZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRqxz/2xgI2tPgfgOnWMbFULuHtp
gZ5VWYRT3tdd3wkPo0R60BPSOI9q9iETPNDM5vyfp6xuTXV1EAWadpYSDlQI61wZ
GFyd1idIuvu+w/L/KzEK1YR/vgZsciY3eoQd6M8p2REjyPTpPV2ML0fKr50iEysx
cR7MHVq2Ic5hA9yJP6X0VWPClxbUDm15JV9dI5tX+Nz1b+eHmSuO6LI6/kTGlGRN
py95wAQFXyiM5Q5RrevTd7ppwLiAOpTtWlf423cuogCjxo8q2TLO5QbPwu1JK+Qg
BqQJlA+5CHzIFxvdw7HCTjHWEcpcEK/z0YG4vXAHJElcYUDVy5aXOkoixwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsahczVSLmavjYIiNMm+pgOh+4LMB8GA1UdIwQY
MBaAFEknEk2YA6feVIgxZKN26nLjxj6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMt
ZjAxNTBjODFhY2Y1LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMtZjAxNTBjODFhY2Y1
LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIqPolMh
C6Q4UApSuqsP87E/ZhEQsh6MPzZFAGGiGDjSpnfUu7AeIn+6qruP6nucSNPjT3Tu
9IFwLBUJUYOk0tuX5NP3ZhnQdijkVItCjQQYY0tYuRmFGZwnmNg2EfFSVkmOyP3C
TznyvnaEF1V1rcIXqwfDb2cKDopHrzNPh8DXQR3Mi0LiWrVViK+6nojQYAkiX/O5
uO4Fsz0lMRCcP7n3ny2ICQcctzVYsLC/3At80HPcHkLgOPOWy4Zo9z5e77Jl8wnl
/ewUiWfht5FuNCEsMgoiST8IubdoIjk3Ab1Q2gNYxs3cqCE5T56ivTFgr8ju0U39
IxE3YsPyH29bYg==
-----END CERTIFICATE-----
Generated at Fri May 15 09:08:15 2026 by rpki-client