
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
File: sCJf0DWnzmSnyIveca61YPNIOXQ.mft (raw, json)
Hash identifier: 4dNc6zogJ7eTc8nw4HrnJ1PugUeXYzkNWIZNG52e5WE=
Subject key identifier: CF:C2:C9:93:57:A3:91:34:1D:21:03:67:80:CE:42:06:26:8C:22:7E
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 019EE4437608DB11D07D91E7F99180BD58B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
Manifest number: 0291
Signing time: Sat 20 Jun 2026 09:01:26 +0000
Manifest this update: Sat 20 Jun 2026 09:01:26 +0000
Manifest next update: Sun 21 Jun 2026 09:01:26 +0000
Files and hashes: 1: 75dJ9l9pm2mLQKlmsqkMPbP5nLU.roa (hash: y9JQO9ERriwN1YTQ2JmQZB4kivefmPeXhn7RTehloi0=)
2: AEeBq3XFkbn8pyHJEeb3isWEmIA.roa (hash: gkDvS6y+2rhPnDPFUFxFEdfe5IUZN7R+qqVkzML65dE=)
3: EJPyee4QWkKrpHzgKl_UfRlSQ4k.roa (hash: UftVkTCY6ZFe1hDTUIcqILq/ecU3GKzDfqSPxTid57Y=)
4: IIIXZtSualOwJL3v5moeDxfjfvI.roa (hash: 7rMLEXqsuij2IE2v0cNkJojz7+yY0hLnMUTfWDw4n9Q=)
5: S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa (hash: w5hcZAmF4buAGhakgXjQA0sa4vpLG5fCK2GR/ajM+u0=)
6: dNXYaX82NX51pSFvpQpCqsG2lPo.roa (hash: 35cWo5gZ7UeSrOUHr9i+uJyPsLCbl8OtXgjF+qTOIsg=)
7: sCJf0DWnzmSnyIveca61YPNIOXQ.crl (hash: VRAzR+LFnZRVOp51usCoyexA7avcAe6CkA93AXH97to=)
8: wJQhpUcYRE9YbrS1hrhEwceSpsw.roa (hash: pKy+CJ0dPgWvUI++SXNGLH/W/2Tj4mADcaq6t4MuXsE=)
9: wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa (hash: VxkO6fBbTYMBO4jXH/JD3dN5+ZLMhiKDYjCspmghV5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:43:76:08:db:11:d0:7d:91:e7:f9:91:80:bd:58:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: Jun 20 09:01:26 2026 GMT
Not After : Jun 21 09:01:26 2026 GMT
Subject: CN=cfc2c99357a391341d21036780ce4206268c227e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:6e:9e:4a:3d:1a:19:de:43:07:49:04:79:
69:3e:a2:68:45:cb:cb:7e:d3:39:f2:fe:fb:1e:5b:
be:15:48:17:bc:f2:40:79:44:1d:6d:b2:c9:89:14:
54:6c:90:c9:b6:da:e1:a6:25:ea:62:95:c4:36:26:
59:e4:a7:d8:d5:f4:ad:c1:94:94:f8:fe:8a:15:b4:
4f:c0:d0:d5:d1:56:67:e4:f3:7a:be:a7:8e:f3:e0:
cc:b8:b4:23:32:92:c0:25:73:04:52:be:c3:53:d8:
7d:36:69:3f:9b:15:60:de:a9:df:40:14:0f:81:31:
64:af:e2:a2:e3:89:08:4a:d2:1f:da:b6:c9:88:14:
75:90:ad:f6:4c:46:5c:5f:75:b4:9c:fc:27:bd:fa:
b4:5a:6d:4c:a1:9a:23:06:f8:e1:a4:1f:c3:30:d5:
91:d5:a4:28:db:69:9d:48:e9:3a:51:62:b2:99:d7:
62:62:43:f8:a1:51:7f:3e:a3:22:78:b4:07:45:f4:
46:e9:d4:97:e4:c8:5c:e0:fd:fc:c2:b5:7c:e5:17:
49:71:10:01:2d:99:57:8d:c0:98:ba:f5:e6:8d:19:
fe:8c:2b:96:1c:0a:c8:6a:c2:da:a2:04:d1:a4:10:
83:3b:76:b6:2a:b3:19:e3:39:8b:67:02:2a:66:f5:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C2:C9:93:57:A3:91:34:1D:21:03:67:80:CE:42:06:26:8C:22:7E
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:8a:04:d1:d3:39:27:6f:53:cf:2d:9a:d6:b0:62:5c:0b:0c:
a6:c9:c4:95:ba:5f:e4:b2:22:a4:36:37:dc:e2:39:56:a7:7a:
cf:a9:9f:f9:ac:e8:bd:42:1c:63:b4:41:b1:fe:6c:ca:91:d6:
55:51:d0:97:6a:9b:05:14:3f:50:dd:42:cc:04:72:96:7e:e3:
24:4f:41:1f:29:be:9b:22:80:76:11:73:4c:bf:3f:c5:ba:d2:
c7:1f:ae:25:e2:7a:6e:f8:ae:48:66:97:a9:55:11:44:3f:28:
34:e7:75:fa:be:17:a4:82:b6:ef:46:d2:60:d5:dc:e2:ff:2c:
cb:dd:06:8b:ee:fa:23:81:d2:82:1a:60:0b:5b:5b:13:e0:a6:
53:96:03:50:33:ff:1e:45:0c:54:2e:d1:ab:8b:4d:bf:38:aa:
63:93:92:10:a4:bc:8b:76:3e:04:f9:9e:95:3f:b7:12:5d:8f:
25:d5:6a:94:55:b0:4f:fb:aa:a5:cc:5d:38:b6:8e:2a:93:77:
0e:ad:a7:d6:5c:2a:4d:1b:72:c0:c8:89:da:53:ce:8d:bb:e1:
0f:0e:07:6b:3b:76:19:d2:7c:8b:9f:f1:a4:6c:0b:2e:5c:4c:
6b:a1:ca:fc:3a:c6:93:97:5e:f4:f7:bb:61:7e:0e:f8:2e:d0:
80:19:46:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 16:04:26 2026 by rpki-client