Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: PL/o1d2rLG7Ud8z0p/ZvwS0O+D9Yv8jkyoAClpRUssA=
Subject key identifier: E5:BC:BE:02:3B:30:D3:03:35:F5:A9:DC:17:05:32:45:38:45:B4:02
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 019DCED0B162E532019B52C3AB3D275AFB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0B99
Signing time: Mon 27 Apr 2026 12:01:16 +0000
Manifest this update: Mon 27 Apr 2026 12:01:16 +0000
Manifest next update: Tue 28 Apr 2026 12:01:16 +0000
Files and hashes: 1: L3zQrDly_cgu2DtWRJFHDzULtOQ.roa (hash: i7m+qZMXIsGxhkbEdh7EZAa733fER6ODAhYCosRl/wk=)
2: Xf4ZTszORkzpOtgjWs0sQXLkCfM.roa (hash: f/UijPcLGJI8l2y80NoFTGhFWkou3AIufub5lbOoRas=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: /LzM1GOHFSqbBtrRD2K8FyHFBwAL6cVJzs0A4apRQ+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:b1:62:e5:32:01:9b:52:c3:ab:3d:27:5a:fb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Apr 27 12:01:16 2026 GMT
Not After : Apr 28 12:01:16 2026 GMT
Subject: CN=e5bcbe023b30d30335f5a9dc170532453845b402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:be:54:cc:61:2a:6d:48:a8:e4:ef:05:81:
01:88:ac:6c:8e:7f:70:f0:8b:a1:3a:1c:67:6e:3c:
ed:a6:8e:5f:5d:b0:d2:bc:81:bc:7c:ee:66:a9:ef:
92:be:38:33:94:8c:4d:53:0d:d3:9a:24:d2:bc:1f:
b6:0a:cf:d8:51:9c:ec:0a:2b:71:a4:fc:79:fd:1b:
3a:aa:1e:1f:3f:d6:96:83:3d:bd:10:ad:83:8e:bd:
7d:38:93:0c:c1:2f:ac:5b:96:d2:c7:1b:1c:81:77:
6d:94:87:51:6e:88:49:7d:73:a9:5a:e0:5b:51:be:
f1:dd:d8:94:b8:67:cd:60:d0:e0:eb:9d:86:7d:4d:
03:f8:0b:75:52:23:10:6f:51:58:df:3a:f7:d7:52:
68:c8:83:1b:2f:e3:65:dc:5a:6f:2b:24:3a:c8:86:
38:11:3e:4f:c7:96:78:19:4e:80:c6:55:71:90:d8:
a4:0b:b4:ef:55:09:48:80:db:fe:f4:61:45:88:07:
8d:9e:0c:72:df:1e:fe:57:d0:4e:9b:93:de:88:65:
62:57:fb:43:0c:bd:c4:34:8b:1d:a0:6e:d8:a5:ee:
fd:c8:60:09:05:51:cc:d8:5e:29:da:22:94:47:f8:
f2:2b:bc:43:78:68:ac:3f:03:6c:83:40:98:e2:2a:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BC:BE:02:3B:30:D3:03:35:F5:A9:DC:17:05:32:45:38:45:B4:02
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a4:5a:56:c6:b0:c0:08:b8:04:24:d5:d3:92:40:72:dc:e8:
c6:28:11:d3:04:26:b7:81:f6:99:3f:a6:f8:56:95:19:21:8b:
10:b5:fb:29:18:5d:54:d9:66:c1:f3:2f:ed:55:83:b9:97:08:
2b:5b:9d:fd:36:d6:80:ce:2c:19:22:f1:f4:a4:e3:3f:ff:63:
91:04:65:8d:02:06:e7:25:11:bb:36:01:f9:75:33:b4:70:1e:
57:f9:6e:b4:48:9d:d5:18:8b:18:70:e2:94:d2:e4:76:50:fa:
27:f1:05:e6:7b:8e:c1:65:4e:f7:33:2d:f5:2d:31:ac:0c:7e:
a3:6f:0a:e3:c6:e4:e7:f0:d3:d3:70:81:97:3f:bb:7b:c3:d7:
21:89:2f:40:2a:0f:7f:65:e6:75:6b:2d:41:c9:8b:10:45:46:
da:9d:8d:bb:0b:f2:56:80:1b:38:38:02:63:3c:45:c0:20:9e:
96:d4:39:05:50:08:c5:20:96:82:7f:d6:43:91:90:ca:f8:9f:
44:bd:27:96:d3:1e:ae:66:09:d3:93:35:fc:35:a8:25:22:e0:
39:70:f3:e4:cd:fd:47:23:0e:89:86:dd:4c:23:d3:f4:15:6f:
91:69:3f:5e:9c:44:90:15:94:37:1a:00:90:78:0b:0c:4b:71:
2a:d7:62:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:19:05 2026 by rpki-client