Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: wky28ZKcckWMJo2aNXq9ugXRxpFaBGIoUa9l7HpApv8=
Subject key identifier: 91:CB:75:85:78:43:27:35:A5:8F:32:AE:DA:14:15:AB:82:42:11:18
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 01A17B4D07E368042FAF1372720359A8EF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0D80
Signing time: Tue 27 Oct 2026 03:00:08 +0000
Manifest this update: Tue 27 Oct 2026 03:00:08 +0000
Manifest next update: Wed 28 Oct 2026 03:00:08 +0000
Files and hashes: 1: L3zQrDly_cgu2DtWRJFHDzULtOQ.roa (hash: i7m+qZMXIsGxhkbEdh7EZAa733fER6ODAhYCosRl/wk=)
2: Xf4ZTszORkzpOtgjWs0sQXLkCfM.roa (hash: f/UijPcLGJI8l2y80NoFTGhFWkou3AIufub5lbOoRas=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: sT/79tP0Lu3LTdJYIQkq8ji/WcuDDaafF+sE0rAOp3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:07:e3:68:04:2f:af:13:72:72:03:59:a8:ef:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Oct 27 03:00:08 2026 GMT
Not After : Oct 28 03:00:08 2026 GMT
Subject: CN=91cb758578432735a58f32aeda1415ab82421118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:a1:3b:d6:a6:bf:41:bf:e3:b3:06:24:2d:
b9:93:60:02:f0:a5:87:68:29:31:92:73:c6:ba:69:
86:60:fb:39:d9:30:8f:44:b5:1d:a3:32:3d:66:d3:
c6:0d:9d:fb:34:be:4a:e4:b6:5e:bc:0b:f7:23:e4:
39:45:6a:1e:ff:89:85:03:82:22:03:6a:0d:b5:45:
c1:12:b4:2c:9b:2c:a2:51:f2:59:8a:79:5b:ae:b2:
93:65:c9:0f:32:e1:b3:b4:2c:27:ca:e1:f1:a6:82:
3c:68:ba:f9:ac:76:55:bc:1d:78:07:94:5e:a9:ec:
9c:15:a3:9a:14:e0:35:f9:23:25:eb:e3:3b:d0:37:
62:1b:54:c7:1b:2d:c8:87:ed:db:81:9b:e7:43:d0:
e2:c5:8c:c9:e2:25:6c:79:7f:ab:9d:26:d6:72:e5:
90:c5:a9:bc:9c:19:f6:7a:22:cf:88:38:a4:de:ab:
8a:57:60:40:1d:72:7b:a7:3e:40:a1:34:f6:91:c6:
42:94:ee:34:f9:19:74:8d:e3:61:f5:b4:9f:5b:34:
60:52:5d:70:8f:06:35:54:cf:9f:b8:a7:f6:04:63:
35:72:c2:f2:66:d2:35:81:14:6a:a6:25:a0:34:c2:
c3:ec:48:fc:fe:ca:58:0d:60:48:5a:72:36:52:1a:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CB:75:85:78:43:27:35:A5:8F:32:AE:DA:14:15:AB:82:42:11:18
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2d:16:f4:f8:04:43:10:6d:66:b3:aa:6d:fa:cc:a8:99:f6:
1c:73:e7:2b:13:93:1d:5f:82:a7:cb:36:1b:00:68:6d:72:65:
95:15:25:00:7e:81:97:9d:9f:d9:8e:63:aa:d6:e6:38:98:2d:
03:fb:24:cf:d7:a1:a6:64:9c:40:81:0a:34:7a:3b:68:d7:39:
83:b2:93:25:56:74:5a:f7:cc:df:66:1f:ae:0c:1b:1b:5b:12:
7b:93:95:fb:56:73:66:65:7e:6d:37:41:4b:9d:7f:2e:b0:7e:
a3:58:b5:e0:78:c1:82:9f:f5:54:7c:8f:81:82:dc:b6:ef:09:
21:ec:c5:4c:2d:d3:c9:d6:4e:63:f9:a2:46:a6:92:8b:42:de:
e1:f8:65:8d:62:8c:f1:38:f4:89:ee:3a:a7:51:31:83:c5:d1:
25:4e:2a:2a:22:16:6a:96:eb:a2:87:fd:63:f8:b9:9e:cb:36:
30:22:cf:5f:18:2d:77:4b:1d:96:c9:cb:fc:37:73:b5:8c:23:
f7:e7:5a:05:33:bd:57:62:53:cb:5e:64:4e:54:98:c8:90:37:
1b:94:ad:fe:59:0e:11:bb:8d:0f:f8:1a:a4:03:0f:87:53:d1:
98:c8:48:b4:6b:67:15:86:05:40:8e:ff:61:c3:a0:a5:19:1c:
7a:3f:ee:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:00:06 2026 by rpki-client