Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
File: sCS1dKJD6FPfLfBUycnwke1H8aE.mft (raw, json)
Hash identifier: btiWxvQafRQ6Qv0E7c0Rh9hysiiVKWvOPUMY9jYHoPA=
Subject key identifier: 69:05:28:99:41:68:88:B3:75:99:8B:5C:5B:E9:8E:9B:8F:3F:C7:E4
Authority key identifier: B0:24:B5:74:A2:43:E8:53:DF:2D:F0:54:C9:C9:F0:91:ED:47:F1:A1
Certificate issuer: /CN=b024b574a243e853df2df054c9c9f091ed47f1a1
Certificate serial: 01A08C7B3C7B3699F63F7A8B0A3E0053F154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:21 +0000
Manifest this update: Thu 10 Sep 2026 18:01:21 +0000
Manifest next update: Fri 11 Sep 2026 18:01:21 +0000
Files and hashes: 1: oqX2gExMo-KlgfeVjBQNl-V9kYQ.roa (hash: AhjEc5iJ0saymH9KLRkLm0lyxGwUZpd99G/NbAW7jGw=)
2: sCS1dKJD6FPfLfBUycnwke1H8aE.crl (hash: Afpp1eG1t4DjOGWmIbZoOo/alKyNOhGzLJ1lI0vEEzs=)
3: wcZFZKJuAQyp04XCR7u-DhFRd3A.roa (hash: 5hph13qMNz8BJaZ5fOJ0lHqfAydPPEugNlEoJOSv5SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:3c:7b:36:99:f6:3f:7a:8b:0a:3e:00:53:f1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b024b574a243e853df2df054c9c9f091ed47f1a1
Validity
Not Before: Sep 10 18:01:21 2026 GMT
Not After : Sep 11 18:01:21 2026 GMT
Subject: CN=69052899416888b375998b5c5be98e9b8f3fc7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:3d:c3:1c:8b:bd:89:e3:5c:30:07:03:6b:
6d:93:55:47:62:5b:73:5f:70:50:1c:1a:35:0a:29:
a2:e3:cc:58:7a:7c:be:e8:c1:e3:a9:69:30:fd:88:
d1:99:e6:96:94:52:64:fe:e8:6e:55:39:bc:87:fd:
08:67:fd:1c:23:83:9f:86:0b:f0:95:ef:3d:a6:db:
6b:17:98:3f:18:d6:ec:07:37:75:37:63:f2:bf:5f:
56:af:d8:fe:3a:f5:95:bd:62:68:61:0a:03:bb:52:
1a:db:5f:b1:37:ca:ef:16:a4:5f:cf:5c:60:f0:56:
db:51:ca:74:f2:9e:72:1c:e0:c6:0f:70:de:10:d5:
52:e2:27:bb:e5:94:82:ff:80:67:c4:db:84:c4:a8:
06:57:84:2f:a2:15:5a:d7:60:2a:25:95:49:9b:ab:
ba:d0:28:0b:39:be:e8:92:72:08:53:f2:2d:6c:7e:
7e:0c:c4:b3:4b:bb:5d:66:50:a6:dd:d2:53:16:8d:
3b:15:66:09:65:a8:43:81:43:02:7f:3c:f1:16:a6:
d2:9c:53:2b:33:88:2a:0c:f6:fd:b3:be:b2:8a:3f:
a2:ce:71:d6:68:21:e5:7a:5c:5b:67:50:99:09:9b:
8a:1e:15:7b:65:c5:1a:b6:a6:10:6d:8b:19:72:3a:
8f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:05:28:99:41:68:88:B3:75:99:8B:5C:5B:E9:8E:9B:8F:3F:C7:E4
X509v3 Authority Key Identifier:
keyid:B0:24:B5:74:A2:43:E8:53:DF:2D:F0:54:C9:C9:F0:91:ED:47:F1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:05:97:28:ab:9d:4b:42:ab:f5:80:55:b5:76:26:f4:1b:8c:
17:be:7c:34:53:f2:51:df:d6:b3:2c:ef:cd:11:80:3c:b3:38:
40:7f:a1:7d:aa:6d:5b:92:c0:8d:62:72:a2:05:52:16:60:24:
1f:9d:e8:d5:ac:ac:c6:5b:5e:a6:20:ec:b5:dc:97:07:f9:6f:
30:da:95:29:43:fc:aa:24:9a:31:67:11:38:4a:73:72:14:3e:
06:70:65:92:ad:99:55:d1:fb:74:af:9f:1f:28:74:1a:d5:08:
57:fb:3d:87:df:d4:d4:2e:f6:85:fd:d0:9f:82:20:cd:a2:15:
f2:ba:52:d7:ad:d6:dd:6f:1d:9f:e6:da:a2:b3:dc:53:da:0a:
be:fb:2b:f1:6e:97:97:08:9b:23:55:df:f8:9e:f3:76:5b:dc:
00:38:1f:5a:ce:41:32:fc:64:a4:c0:84:3c:31:56:8b:48:44:
87:3a:42:34:af:67:97:76:1c:ad:96:8e:53:36:d4:85:e9:4f:
cb:21:bc:ac:bc:f8:03:9d:43:f0:d4:9e:5a:46:1f:c2:43:10:
c0:5d:dc:c4:47:79:14:d7:0e:da:fb:38:7c:79:74:47:d3:7e:
43:91:c6:7f:f7:a2:29:92:3c:e2:ad:b2:3b:80:9b:17:51:23:
7c:97:56:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:48:55 2026 by rpki-client