Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: Lv7xGYnPzivHGiuBRpl+rKQDED+szce+G46gRdMoJlg=
Subject key identifier: 2E:94:8C:B2:DD:7D:84:0C:5D:0F:9A:17:E4:DB:94:17:15:56:62:6D
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 01A08BD67306FF7F4138B9787E5B8D0E1CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0D04
Signing time: Thu 10 Sep 2026 15:01:22 +0000
Manifest this update: Thu 10 Sep 2026 15:01:22 +0000
Manifest next update: Fri 11 Sep 2026 15:01:22 +0000
Files and hashes: 1: L3zQrDly_cgu2DtWRJFHDzULtOQ.roa (hash: i7m+qZMXIsGxhkbEdh7EZAa733fER6ODAhYCosRl/wk=)
2: Xf4ZTszORkzpOtgjWs0sQXLkCfM.roa (hash: f/UijPcLGJI8l2y80NoFTGhFWkou3AIufub5lbOoRas=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: QhsXUHVNy2wvEdp0Cy7Ri8rpvwMtChMBeSXCmY1LP6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:73:06:ff:7f:41:38:b9:78:7e:5b:8d:0e:1c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Sep 10 15:01:22 2026 GMT
Not After : Sep 11 15:01:22 2026 GMT
Subject: CN=2e948cb2dd7d840c5d0f9a17e4db94171556626d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:c9:c7:62:c3:15:2b:b3:35:d5:5a:23:c1:
5e:3e:9c:65:c2:ba:0a:9a:d1:a4:c6:df:55:64:2d:
9d:a8:b5:72:cc:f1:af:6f:16:f2:9d:9d:26:48:12:
0d:82:a2:06:73:4c:09:19:0a:b1:e6:b4:30:82:d6:
20:6e:47:c2:d7:76:dd:ae:03:a1:2c:8a:a6:e6:d0:
d1:d8:d4:cf:72:e6:9c:20:a8:be:10:cb:87:af:32:
30:76:dc:fb:ac:57:21:6f:74:9b:79:00:03:f1:f3:
ef:79:d8:74:00:dd:87:27:1e:25:90:4e:d0:e4:14:
8b:a6:15:d0:62:99:b1:5b:49:97:5a:fd:40:df:06:
fd:26:88:2d:ef:f0:de:97:49:ce:56:01:4e:35:d7:
1e:18:f0:b3:f2:dd:b5:29:4b:34:0a:e2:92:8a:28:
a0:1c:da:c9:af:87:b0:aa:73:4c:38:2c:50:39:48:
70:2d:11:a0:cb:7a:7a:e1:37:00:74:45:21:20:e2:
14:ac:ec:67:d4:13:f3:e8:88:25:c7:d6:38:6a:5a:
1d:47:af:b9:8b:9b:8a:4c:58:a6:36:e2:e0:b1:ff:
a3:df:ec:1d:6d:5b:49:6b:f4:ae:d2:5e:84:13:dc:
d4:85:9e:85:97:1f:d7:28:61:01:e3:00:6b:2c:09:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:94:8C:B2:DD:7D:84:0C:5D:0F:9A:17:E4:DB:94:17:15:56:62:6D
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:15:61:d4:bb:cc:76:db:7b:5e:bc:e1:87:b0:8c:87:97:78:
ac:96:24:d0:f3:1f:40:d3:bd:43:1e:12:0c:fe:03:8a:de:2a:
38:d6:15:8f:66:da:d6:e6:51:77:2c:8e:46:70:a7:55:9c:11:
64:7e:37:12:53:23:65:5c:b9:98:8a:9d:75:e5:86:cc:39:fd:
84:29:a2:1e:68:f0:9b:98:8a:cb:29:16:9d:44:8b:97:fd:5e:
11:c4:aa:6a:c2:31:7a:34:87:e5:03:a1:da:f5:a2:aa:f3:d8:
4a:84:05:1d:dd:d0:50:fe:0b:3e:99:86:32:f3:3c:6a:9b:cc:
b1:da:97:5b:e7:dc:f9:59:54:be:45:46:c4:61:2c:09:c0:a4:
b8:11:d5:86:e9:a1:42:18:50:d3:7b:9a:65:98:fb:51:96:2b:
a8:e6:aa:51:18:9f:ff:e9:28:64:8c:5e:1f:6c:ae:9d:d4:d5:
20:43:1e:a2:7d:ea:a3:9c:a2:36:d2:df:ec:67:23:6f:b3:bb:
f7:f5:db:41:9e:fb:0e:85:0a:ab:18:47:a5:60:83:2c:64:35:
e0:07:0d:99:29:c2:bf:3d:87:fb:b5:3b:32:31:8b:b0:29:3d:
ce:e1:2d:bb:04:5d:48:36:a0:7e:7c:2c:cf:2d:08:c6:1e:3d:
87:11:8a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:19:56 2026 by rpki-client