Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
File: sCS1dKJD6FPfLfBUycnwke1H8aE.mft (raw, json)
Hash identifier: bgoONgju4lufJBvQ/zae7V8cR09SvtLzoXiPMls3m8k=
Subject key identifier: DA:C2:FC:B9:D4:EA:E9:E9:77:89:FC:B6:92:4E:0D:C3:32:D8:F9:64
Authority key identifier: B0:24:B5:74:A2:43:E8:53:DF:2D:F0:54:C9:C9:F0:91:ED:47:F1:A1
Certificate issuer: /CN=b024b574a243e853df2df054c9c9f091ed47f1a1
Certificate serial: 01A187889ED4159794A121BE602500420B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
Manifest number: 0144
Signing time: Thu 29 Oct 2026 12:00:39 +0000
Manifest this update: Thu 29 Oct 2026 12:00:39 +0000
Manifest next update: Fri 30 Oct 2026 12:00:39 +0000
Files and hashes: 1: oqX2gExMo-KlgfeVjBQNl-V9kYQ.roa (hash: AhjEc5iJ0saymH9KLRkLm0lyxGwUZpd99G/NbAW7jGw=)
2: sCS1dKJD6FPfLfBUycnwke1H8aE.crl (hash: 7ZC+YFHyPp/1k6JQq4tnHazll6sAAl9fL4SVDnlaMc4=)
3: wcZFZKJuAQyp04XCR7u-DhFRd3A.roa (hash: 5hph13qMNz8BJaZ5fOJ0lHqfAydPPEugNlEoJOSv5SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:88:9e:d4:15:97:94:a1:21:be:60:25:00:42:0b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b024b574a243e853df2df054c9c9f091ed47f1a1
Validity
Not Before: Oct 29 12:00:39 2026 GMT
Not After : Oct 30 12:00:39 2026 GMT
Subject: CN=dac2fcb9d4eae9e97789fcb6924e0dc332d8f964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:58:65:09:a1:bb:e5:46:0f:2c:49:67:07:
c1:79:57:f7:82:99:6a:30:6b:08:33:ea:70:44:2f:
3c:77:30:86:0a:08:ff:db:90:31:0d:18:0a:d6:fc:
98:63:25:2f:b6:aa:87:2d:6f:63:78:81:19:a0:06:
3a:3d:81:b9:d7:01:eb:5e:86:03:7f:97:e5:b3:83:
3a:94:38:79:8a:f0:78:05:d6:01:20:e7:dc:a7:62:
40:84:d7:53:81:4f:2d:b9:70:e8:cf:9d:ca:77:bb:
00:bb:7d:85:93:a3:2b:b2:a4:d6:d8:2b:e0:f9:cd:
40:33:af:0a:f6:1b:50:c2:a7:7a:5c:4e:18:f1:cc:
d5:f8:cd:70:cb:eb:b8:c3:0c:67:91:3a:9a:b0:ce:
3c:7a:f2:01:73:da:d4:d7:e1:0d:30:bf:fa:a0:4c:
e6:e7:78:9f:95:55:e7:54:59:71:91:05:6b:fc:28:
2d:2b:75:41:49:05:ee:fa:31:9f:cb:71:06:92:e2:
2f:0e:5b:43:35:4c:98:65:4c:a8:be:d6:46:2a:d8:
b7:aa:78:f2:ac:b7:ef:28:f0:5d:1d:b1:4d:1d:57:
84:be:7d:34:af:d8:8b:c1:2c:b8:d9:34:61:da:38:
ef:09:79:d1:9f:26:68:f4:35:5f:20:9c:72:f0:42:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C2:FC:B9:D4:EA:E9:E9:77:89:FC:B6:92:4E:0D:C3:32:D8:F9:64
X509v3 Authority Key Identifier:
keyid:B0:24:B5:74:A2:43:E8:53:DF:2D:F0:54:C9:C9:F0:91:ED:47:F1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:71:5d:11:21:f9:e1:d8:51:1f:9e:a3:20:95:a4:d1:6a:d0:
f6:1e:33:71:a5:22:fb:82:c5:5a:26:81:b0:43:57:4f:da:35:
1e:ba:02:59:1d:28:69:62:54:20:f7:c6:bd:f3:00:87:ab:61:
97:7c:06:d4:a1:c4:6f:87:f0:4e:b4:ec:6d:03:80:85:9d:53:
be:09:18:74:87:24:c7:03:ea:32:9c:05:04:76:33:2b:99:19:
de:82:96:82:26:ef:a6:2a:cd:ac:d9:12:49:4f:b9:f5:ce:1d:
85:6f:ac:18:13:d1:a4:e1:2b:f1:34:b7:70:0e:94:0f:71:49:
5e:17:7c:c3:49:f6:93:41:c6:f2:87:f7:d3:9b:e2:01:2c:9c:
6b:27:4c:b4:a8:99:71:c5:9a:87:e9:b6:d4:1f:e0:d3:2d:a4:
df:04:af:13:a6:0c:c1:f5:04:65:d1:6e:02:1c:24:d4:ed:c4:
c9:b3:24:76:07:0c:46:cd:65:6e:64:e4:84:39:04:df:3e:d3:
7d:52:cb:dc:7d:87:fe:d1:b5:87:b0:65:47:94:38:af:26:49:
f9:8e:44:4f:ac:e5:35:2c:1a:c4:df:3d:30:f6:90:4d:96:0f:
43:77:24:f5:e9:92:80:d1:29:bc:36:7d:31:7f:57:ce:b6:80:
1c:cf:6c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:57:15 2026 by rpki-client