Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: GBXzb1tyYoNU+Ln9ZwImR29UIP0GONFH9pDIWERDmx4=
Subject key identifier: C2:7C:25:89:E5:C0:69:08:7A:E3:33:9D:1F:88:5B:94:EA:62:1E:77
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 019CE7120C652551855C78DA81011D0F63A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0B21
Signing time: Fri 13 Mar 2026 12:00:45 +0000
Manifest this update: Fri 13 Mar 2026 12:00:45 +0000
Manifest next update: Sat 14 Mar 2026 12:00:45 +0000
Files and hashes: 1: L3zQrDly_cgu2DtWRJFHDzULtOQ.roa (hash: i7m+qZMXIsGxhkbEdh7EZAa733fER6ODAhYCosRl/wk=)
2: Xf4ZTszORkzpOtgjWs0sQXLkCfM.roa (hash: f/UijPcLGJI8l2y80NoFTGhFWkou3AIufub5lbOoRas=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: OxuGZLmCscdu3YmGMCBkrsEJeK/5ggZfZJkf69F6+Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:0c:65:25:51:85:5c:78:da:81:01:1d:0f:63:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Mar 13 12:00:45 2026 GMT
Not After : Mar 14 12:00:45 2026 GMT
Subject: CN=c27c2589e5c069087ae3339d1f885b94ea621e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:61:cb:2d:d7:94:12:ef:93:67:fa:7b:9a:
67:11:a1:7e:bd:7f:b2:96:b5:62:eb:10:bc:c1:c3:
c8:07:de:2d:cf:e8:75:df:95:8f:61:30:99:10:e8:
91:e7:23:c4:ba:09:bb:ba:68:04:3d:a7:07:3c:45:
20:cd:d2:a4:ba:8e:e7:80:c8:5f:b1:19:75:75:bf:
84:63:e7:08:4d:60:e7:26:ed:3b:e3:db:7b:65:fa:
62:50:b9:73:76:83:8c:0a:a2:4e:fe:90:9f:8e:cd:
18:13:4b:b9:b9:cc:aa:14:23:4a:3a:e5:01:dc:fa:
8a:6c:7a:34:fc:14:38:37:4a:86:b4:93:9e:e5:d6:
e5:5a:9a:f1:fa:cb:19:93:4f:fc:64:7c:78:b0:6e:
eb:e1:66:ed:a1:4f:2f:da:b6:ad:94:41:28:df:2e:
be:31:16:94:31:4e:88:4c:5c:1d:6c:71:56:bc:d8:
04:3d:38:2d:da:09:0e:ab:ef:63:f9:17:31:c6:b6:
bd:7b:d3:42:a9:e5:b1:42:92:fe:6a:82:d6:fd:16:
91:8b:74:1f:34:61:cc:e9:c3:6b:e3:45:6e:3c:fb:
3f:97:16:6e:77:5a:84:9e:f4:b6:96:70:89:12:69:
a8:4a:63:4e:77:0f:92:84:7a:68:21:61:bf:40:58:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7C:25:89:E5:C0:69:08:7A:E3:33:9D:1F:88:5B:94:EA:62:1E:77
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ae:97:8f:07:43:ff:d5:5e:39:56:ad:d6:ef:21:db:65:9a:
99:49:ab:0b:8a:e2:3c:8c:54:e6:c5:24:24:0a:21:6e:12:84:
cc:ca:0d:02:b5:06:76:3f:25:69:ac:b3:60:10:ee:4b:8a:29:
78:13:94:ca:4d:7c:6b:3e:be:7a:75:73:0b:82:5b:65:7c:56:
65:98:72:7a:e5:96:29:6c:16:93:84:e0:48:78:97:1e:ad:41:
ac:1a:d1:fa:cd:c7:33:91:fa:98:45:59:45:57:2a:86:58:ea:
1e:ee:09:ea:a9:2e:93:9d:da:3c:71:c5:56:b9:56:65:11:e4:
99:41:1d:dc:cf:61:a3:96:37:8d:62:8e:e3:55:56:b5:b7:10:
90:0e:a7:11:49:bb:fa:b9:18:d8:1a:33:fd:d9:49:1e:fa:ba:
81:1d:63:94:60:dd:e9:44:d6:e6:84:ee:0e:6a:87:5c:71:89:
5b:82:4d:54:e1:7c:78:27:f5:5d:c5:5e:ce:c2:90:30:12:c8:
05:ae:6f:90:fa:ef:fa:20:62:ae:5f:93:33:a6:ee:80:35:7d:
e6:12:8e:b2:8a:ad:b6:89:01:dc:f2:18:a5:73:b4:d3:82:26:
52:7d:85:6b:7d:a0:b8:25:96:11:4d:43:35:6f:e8:ca:2d:31:
44:14:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:52:39 2026 by rpki-client