Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: 4vIg5KN4ihmgM6X7Bb2Mqxpo0gLSt85XK6kPoyZ9Ftw=
Subject key identifier: 35:71:E4:2E:FA:9C:D6:8B:5D:D4:05:C5:20:55:59:92:55:B1:B5:59
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 01A1795E9E16929C179D2FB676C1EDAFE6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0D7F
Signing time: Mon 26 Oct 2026 18:00:06 +0000
Manifest this update: Mon 26 Oct 2026 18:00:06 +0000
Manifest next update: Tue 27 Oct 2026 18:00:06 +0000
Files and hashes: 1: L3zQrDly_cgu2DtWRJFHDzULtOQ.roa (hash: i7m+qZMXIsGxhkbEdh7EZAa733fER6ODAhYCosRl/wk=)
2: Xf4ZTszORkzpOtgjWs0sQXLkCfM.roa (hash: f/UijPcLGJI8l2y80NoFTGhFWkou3AIufub5lbOoRas=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: WGwkpTmGzxqdci0svTYh9NTKGfN1mlFjP3TGa+uE09c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:5e:9e:16:92:9c:17:9d:2f:b6:76:c1:ed:af:e6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Oct 26 18:00:06 2026 GMT
Not After : Oct 27 18:00:06 2026 GMT
Subject: CN=3571e42efa9cd68b5dd405c52055599255b1b559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:21:f6:21:83:2f:24:d8:68:73:8b:c7:37:
57:bc:8e:2f:6c:d5:b9:71:80:b6:75:63:54:55:23:
75:4b:19:5f:79:ab:f4:85:46:74:39:98:db:16:6e:
72:53:ac:2c:7e:20:0e:34:4b:dd:c7:50:22:84:6e:
66:30:25:73:8c:51:dd:ee:e5:18:7f:ab:07:d6:12:
15:1a:3a:3d:18:6f:c6:83:47:e4:dc:3b:72:0a:aa:
94:df:56:b0:eb:65:56:58:03:56:af:f9:8d:7f:3b:
e5:db:c1:59:d8:19:b4:75:0d:ed:ec:39:05:a2:35:
6a:63:1e:fc:52:e6:34:f4:4f:22:c5:2e:01:77:1d:
bc:d9:18:e9:a5:06:8f:aa:e8:f8:74:07:cb:02:71:
1e:2a:f2:a4:86:a4:b8:e8:18:a7:bc:07:e4:c3:af:
f2:d7:07:0b:57:a0:54:65:7f:51:c2:68:7c:3b:60:
bb:b7:3b:de:8d:eb:a7:32:52:17:e1:3b:d4:b4:ea:
b5:8e:b1:31:e7:92:41:37:9e:a9:56:0a:bb:e0:5b:
47:cb:61:96:00:5b:7f:56:e6:1b:ef:77:45:33:64:
23:83:55:fd:0b:2f:99:f7:6f:e6:1c:26:67:a9:d1:
b2:df:2c:64:70:d8:b5:21:8c:01:0a:ad:c3:2c:a5:
60:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:71:E4:2E:FA:9C:D6:8B:5D:D4:05:C5:20:55:59:92:55:B1:B5:59
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:44:52:63:15:10:c6:df:74:ce:1a:d6:fc:ab:92:5e:52:83:
70:d0:6f:b7:5a:69:53:3a:a4:78:17:19:c9:68:54:47:09:ea:
c0:73:2f:ec:fb:d7:86:53:3b:a7:48:b8:a8:7b:84:d7:51:e8:
1a:42:6c:a9:0e:54:6e:db:cb:d3:8b:34:ff:b5:dc:da:f6:7c:
83:83:41:52:85:df:a8:7a:eb:c6:0a:26:de:ca:16:c8:ea:02:
ce:65:ae:68:51:c1:d2:5a:10:b5:1c:5b:a7:15:3e:2b:fc:5f:
a9:61:08:62:c9:78:be:f4:9c:0b:e7:ba:51:40:4c:93:96:c8:
4d:4c:cf:ad:b9:cc:26:95:2f:91:5c:ac:dd:fd:42:21:79:d8:
93:24:ff:56:d9:2a:22:07:c9:7a:86:7c:29:f1:40:c0:63:bc:
f8:f0:57:ec:0b:01:b9:ea:07:cb:74:e3:f9:f2:0e:d5:b3:a8:
3d:33:a9:5f:cf:11:aa:ba:71:88:a4:4e:ce:8f:7b:b4:79:16:
0e:58:93:32:ef:81:36:aa:11:77:2e:f7:8c:cc:c7:38:47:24:
fc:ee:30:19:f6:89:57:64:24:43:c2:54:76:b4:4a:ae:1d:27:
c9:25:b3:6f:33:14:02:af:1b:aa:7d:a1:0d:ae:c6:ae:dd:75:
85:cf:36:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:02:42 2026 by rpki-client