Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: P8UZRtV4NR8PyfQEvOesEB24dd4pr8KZQ+7ynL3Zr4g=
Subject key identifier: 98:83:9B:95:2D:1E:9B:A3:93:85:12:D5:6D:27:4E:62:BA:75:AB:D8
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 019FA2296E5AA89C441635A9C80344C6F7FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0C8B
Signing time: Mon 27 Jul 2026 06:00:51 +0000
Manifest this update: Mon 27 Jul 2026 06:00:51 +0000
Manifest next update: Tue 28 Jul 2026 06:00:51 +0000
Files and hashes: 1: L3zQrDly_cgu2DtWRJFHDzULtOQ.roa (hash: i7m+qZMXIsGxhkbEdh7EZAa733fER6ODAhYCosRl/wk=)
2: Xf4ZTszORkzpOtgjWs0sQXLkCfM.roa (hash: f/UijPcLGJI8l2y80NoFTGhFWkou3AIufub5lbOoRas=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: kXCaIAdlVWYtdI/dkByvRD4wSUTye/Oe2Ks/E2nccnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:6e:5a:a8:9c:44:16:35:a9:c8:03:44:c6:f7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Jul 27 06:00:51 2026 GMT
Not After : Jul 28 06:00:51 2026 GMT
Subject: CN=98839b952d1e9ba3938512d56d274e62ba75abd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:a3:14:4d:7c:91:62:76:ec:26:d0:72:37:
0a:aa:8b:20:b8:24:e5:6e:20:ed:5c:28:5e:12:76:
13:d0:ad:8d:c2:7b:c4:b5:91:5c:bd:e9:b3:a9:d3:
07:19:f0:06:52:4f:56:e8:10:91:3b:f9:30:b5:2b:
42:f0:95:28:47:60:65:40:97:44:06:15:9d:ce:ce:
3f:3c:e0:60:d8:63:4d:3e:f0:3b:46:d2:3c:b8:8a:
dd:78:c0:a6:ce:4f:2a:f9:e2:24:a7:e7:7c:82:17:
40:b9:0d:e5:af:34:d5:11:0e:da:ef:20:f6:31:db:
ec:a5:6a:1e:2d:00:90:44:05:99:9e:4d:e5:a9:7d:
66:86:f2:28:29:08:18:11:90:bb:f3:fe:0a:85:ba:
d8:90:6c:04:33:80:dc:02:e5:f9:53:f3:7a:b6:bb:
c4:c6:b8:9d:f8:9b:d9:eb:2d:38:9d:b0:ce:d4:78:
f9:59:87:e1:31:36:d7:67:72:8e:2b:28:e2:68:b8:
3d:12:b5:05:b9:cb:6c:b5:52:41:6f:a1:fb:26:94:
b8:1b:32:89:4a:01:00:0c:59:2d:ef:52:6a:3c:16:
d3:eb:ad:ae:77:58:96:8c:44:bc:19:b4:a9:60:c7:
62:d0:8c:32:07:a9:1e:56:41:6e:3d:5b:44:ad:7b:
4a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:83:9B:95:2D:1E:9B:A3:93:85:12:D5:6D:27:4E:62:BA:75:AB:D8
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f0:d8:c1:cc:45:2b:49:39:3e:e7:1f:96:44:69:a2:8f:72:
19:9f:fb:0d:c7:b2:a8:05:34:83:cb:d0:71:35:ac:7a:d6:e7:
08:24:2a:c8:af:7d:4f:d6:87:e8:29:67:6c:4e:8b:59:b5:72:
d3:de:51:8e:10:88:bd:bb:5e:c4:04:9d:a7:c5:94:7b:56:bc:
c2:7a:fc:53:f8:fd:43:17:d2:2d:26:1c:cd:a3:da:7c:d5:02:
7b:14:69:4a:dc:e4:64:ee:a5:3c:3b:ee:c4:21:db:89:2e:33:
3c:02:02:69:26:ca:fd:a5:0a:58:87:ec:cd:84:14:ff:80:b8:
56:4e:93:c5:72:e2:36:10:bc:63:7d:02:5e:cf:c9:be:31:a6:
88:eb:da:2b:26:06:67:c2:66:ea:31:d6:c9:94:9a:3f:b5:bf:
25:93:01:60:3b:01:6b:68:f7:da:42:b6:e9:d0:40:40:f6:9b:
87:ca:76:48:da:d0:49:88:8c:e9:a6:17:97:2d:45:bf:f4:c7:
1a:24:38:70:35:14:e8:a2:10:d7:a5:de:bf:7f:54:63:2d:c3:
e3:d8:55:52:01:e9:ba:94:ca:7d:7c:03:81:cd:34:31:9a:6f:
89:c4:9d:6b:90:b5:fb:ee:54:c4:54:33:11:f9:fd:5d:00:81:
2a:b7:d8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:33 2026 by rpki-client