Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
File: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft (raw, json)
Hash identifier: JjJtjdB0VVDkyeFV0bDW4MoWjzjnM/Nll5oDjtLhq+w=
Subject key identifier: A3:F1:FB:DC:0B:FB:85:EE:2B:BF:BF:5E:F2:B1:DF:04:B6:FE:EB:66
Authority key identifier: B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04
Certificate issuer: /CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
Certificate serial: 019D38658BAFFBC96A06F90EDA3BF054DBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
Manifest number: 0B0A
Signing time: Sun 29 Mar 2026 07:01:12 +0000
Manifest this update: Sun 29 Mar 2026 07:01:12 +0000
Manifest next update: Mon 30 Mar 2026 07:01:12 +0000
Files and hashes: 1: kRCAFZBrRoONasIbXU7cwNRHK_w.roa (hash: FRFbyFJqSQc0W6om6W1H1sQ3Wt2tS+CaPxjLXjaHs5w=)
2: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl (hash: v/9TqAFe7ZstU5Q6QhdIoRVbsxL9vpmgwlqwd5hjdtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:8b:af:fb:c9:6a:06:f9:0e:da:3b:f0:54:db:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
Validity
Not Before: Mar 29 07:01:12 2026 GMT
Not After : Mar 30 07:01:12 2026 GMT
Subject: CN=a3f1fbdc0bfb85ee2bbfbf5ef2b1df04b6feeb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0f:d3:03:c9:37:a2:eb:70:e0:39:23:72:35:
a8:6f:ca:cb:be:37:2e:0b:16:61:74:8f:ae:9a:b6:
61:21:33:67:f3:13:75:db:1c:b0:54:c4:3c:b5:72:
2b:77:2a:af:1d:5e:60:a2:64:1a:e0:2f:3a:4a:a3:
d8:fa:3d:bc:15:b8:d5:62:6a:53:48:8f:79:aa:65:
68:dd:b3:dc:15:ca:62:04:6b:bc:ce:81:6d:fd:48:
f6:8a:dd:1e:fc:69:2f:d3:6a:06:d8:d0:cc:a7:66:
dc:2a:78:f0:b2:51:9a:0f:7b:65:4c:37:18:8b:fe:
a2:c8:9f:ef:02:ed:dc:e4:a8:a3:9c:72:2a:51:19:
57:29:a0:65:87:46:6e:74:29:e5:bf:f0:87:7e:c7:
37:d7:ba:d1:98:23:3f:f1:18:95:a9:da:eb:ac:8a:
d7:16:b0:d3:bf:1a:e7:f4:44:d4:8f:1b:43:6d:29:
72:f0:0f:b1:0a:ca:fd:69:a1:7a:79:47:af:83:de:
9a:2d:58:29:3d:23:91:ce:cf:9f:da:19:17:87:77:
50:9a:ad:8b:3d:3e:2e:28:37:3a:da:92:b1:39:5b:
2a:fc:ce:65:73:28:bd:71:4e:14:7c:e6:b2:ec:23:
a2:7f:5b:93:8b:d4:a7:c6:b8:5b:52:b9:d6:0a:e0:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F1:FB:DC:0B:FB:85:EE:2B:BF:BF:5E:F2:B1:DF:04:B6:FE:EB:66
X509v3 Authority Key Identifier:
keyid:B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:92:7b:6a:0c:ba:e0:ed:e1:d4:ac:8c:50:97:1d:0e:10:18:
da:ae:22:94:c9:0e:e5:a8:ba:a2:a9:87:80:0e:f1:14:65:c2:
b6:27:0e:f4:ff:a5:46:c4:e4:f1:09:1f:82:6f:e8:1c:68:b8:
ea:68:85:a2:5f:64:bc:08:9a:5c:ac:82:74:5a:d7:23:e3:60:
6b:8f:97:9c:58:c6:1a:00:58:3a:32:c1:48:5c:87:2e:f9:f5:
bd:7d:8c:19:e3:23:20:7c:02:a6:b0:d5:e9:83:a6:46:d6:a7:
35:7f:e6:78:57:a2:df:1e:a0:ab:11:b8:c4:99:b4:19:00:87:
66:94:de:c5:c9:a9:d6:50:76:2f:03:91:29:10:c2:df:c6:6f:
79:51:b5:e1:5c:16:a0:e5:67:01:c0:45:56:85:15:6b:ef:a6:
af:73:4b:4b:cc:6e:a6:77:36:ae:62:c4:a0:e3:0c:6b:ea:6b:
af:fc:f2:40:da:a4:55:29:8c:42:b0:98:fb:b8:9f:3f:6c:dd:
74:ea:d3:60:af:41:f7:9e:78:a0:ea:a0:82:d2:bd:80:9d:ca:
a9:b5:49:89:e1:99:ae:57:a6:7e:68:3d:3f:35:3a:5a:ee:49:
97:a1:53:9a:16:4e:ec:c3:44:93:56:ea:aa:3e:98:1b:94:12:
92:e7:7b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:42 2026 by rpki-client