Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
File: sCJf0DWnzmSnyIveca61YPNIOXQ.mft (raw, json)
Hash identifier: nxoDfsuQfm4F8veY4rdPvOjJw05WKdxL8bdG5knQWrA=
Subject key identifier: CC:30:B4:80:D0:DB:DD:A3:D3:F3:E3:1F:A8:AA:83:3B:E0:79:32:39
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 01A0B91C09E446FBF00ABF3344BB153DD4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
Manifest number: 0385
Signing time: Sat 19 Sep 2026 10:00:17 +0000
Manifest this update: Sat 19 Sep 2026 10:00:17 +0000
Manifest next update: Sun 20 Sep 2026 10:00:17 +0000
Files and hashes: 1: 0CCIV1hEHH3hY6pokk9jTnU8V30.roa (hash: GgaU+5w/qihCGGu/5k2TUotqsGtIXN8Ll7E8ReKlxoQ=)
2: 75dJ9l9pm2mLQKlmsqkMPbP5nLU.roa (hash: y9JQO9ERriwN1YTQ2JmQZB4kivefmPeXhn7RTehloi0=)
3: 7k8If11aObVXGmnKtKwIcne1q0o.roa (hash: YMdPgL5RHn3ZUXXjNuLlB+pdjKmlISEakxjgynyqsGg=)
4: AEeBq3XFkbn8pyHJEeb3isWEmIA.roa (hash: gkDvS6y+2rhPnDPFUFxFEdfe5IUZN7R+qqVkzML65dE=)
5: EJPyee4QWkKrpHzgKl_UfRlSQ4k.roa (hash: UftVkTCY6ZFe1hDTUIcqILq/ecU3GKzDfqSPxTid57Y=)
6: IIIXZtSualOwJL3v5moeDxfjfvI.roa (hash: 7rMLEXqsuij2IE2v0cNkJojz7+yY0hLnMUTfWDw4n9Q=)
7: S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa (hash: w5hcZAmF4buAGhakgXjQA0sa4vpLG5fCK2GR/ajM+u0=)
8: sCJf0DWnzmSnyIveca61YPNIOXQ.crl (hash: zh1TUrrI35hB0bgdwb0JsnPTIAYtPR5anMKxwMFQaTA=)
9: wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa (hash: VxkO6fBbTYMBO4jXH/JD3dN5+ZLMhiKDYjCspmghV5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 08:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:1c:09:e4:46:fb:f0:0a:bf:33:44:bb:15:3d:d4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: Sep 19 10:00:17 2026 GMT
Not After : Sep 20 10:00:17 2026 GMT
Subject: CN=cc30b480d0dbdda3d3f3e31fa8aa833be0793239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:13:0d:20:39:21:01:fe:21:19:01:dc:2b:
6b:9b:9b:69:18:88:4d:ff:23:21:f1:02:02:f6:e6:
e5:dc:1a:7e:4d:7d:0e:4c:4a:03:6c:31:b7:cb:53:
ac:ba:a2:fb:fa:98:40:69:a6:d9:b7:07:dd:c9:7f:
7b:5b:41:73:25:e6:f3:0d:b1:3d:0e:25:18:a5:c4:
90:62:ad:7f:49:af:68:c6:4f:3a:0b:56:28:4f:43:
0c:57:fd:f9:0c:af:ca:f2:a8:92:70:e2:89:e7:26:
ec:92:f3:09:4b:9e:0c:c4:7b:e6:0f:ff:ec:d3:51:
74:31:b6:40:ba:e5:c7:91:61:55:af:41:a4:5e:e4:
cc:65:a7:ce:a8:12:4f:64:3c:e5:67:ef:47:d4:dd:
11:61:4d:f2:e2:f8:ca:bd:d4:69:74:ac:39:a3:c8:
50:a3:29:f4:30:eb:a4:17:04:b3:6d:a4:60:03:e2:
72:35:f4:a7:df:05:74:fd:7a:ec:87:8f:58:3d:2a:
64:39:d7:d6:82:ec:39:f3:cc:55:b8:a7:80:d9:22:
48:82:76:2b:0b:10:fb:90:1b:c9:ad:1b:72:d4:48:
a2:0f:95:f9:5f:85:81:af:94:82:cd:91:dc:9d:63:
9d:53:75:90:ee:92:35:c7:06:bd:40:17:5c:ec:50:
99:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:30:B4:80:D0:DB:DD:A3:D3:F3:E3:1F:A8:AA:83:3B:E0:79:32:39
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8d:94:05:a4:35:95:e9:3c:1b:bd:6d:88:a5:40:30:85:f0:
d0:fc:16:bc:a8:f9:de:4d:c9:cd:67:3e:71:07:52:11:21:f1:
fd:4c:36:d0:b0:b2:8d:70:5b:4d:17:2a:65:23:32:fe:44:bf:
53:42:4d:e0:ce:eb:5e:7e:fe:d9:d1:6a:fd:7d:db:9a:aa:da:
38:04:0f:00:2e:6f:02:28:00:ab:81:2c:18:83:31:a7:c9:a1:
0d:6a:b7:0c:7b:87:b3:32:33:b1:a6:87:df:2e:a2:63:79:77:
57:f1:df:e2:7b:a6:98:50:90:72:7b:62:ec:42:fc:32:ad:b9:
21:83:c3:53:9a:41:6c:41:d8:c2:44:1d:7f:47:44:d5:f5:32:
2d:db:30:63:c6:5b:21:35:12:fd:b2:19:37:64:df:58:ed:33:
43:6e:ec:f7:c9:38:76:5b:48:95:5f:8d:f8:dc:a7:c1:b4:a0:
23:16:c6:4c:85:54:be:f2:c0:b2:9f:fe:15:37:63:34:a3:bf:
c2:97:da:59:c2:bd:8f:c0:3a:73:fa:47:0e:6b:bf:e7:65:9a:
72:30:d0:f5:d6:ee:5c:79:80:27:15:31:90:62:3b:ed:de:f7:
d6:ca:c0:2b:f4:bb:ee:c1:06:9d:73:7c:9b:58:24:3f:b4:f6:
53:76:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 14:58:42 2026 by rpki-client