Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: n+5Va+OjFCCUKButeapOdi3wfKk66outQoKbv60VYK0=
Subject key identifier: 3A:E7:3D:A8:E7:29:78:02:9C:00:BE:51:B0:7C:C9:78:E0:45:B5:20
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 01A0005C80FAFC21ECADF8C734ECD5021541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 0996
Signing time: Fri 14 Aug 2026 13:00:57 +0000
Manifest this update: Fri 14 Aug 2026 13:00:57 +0000
Manifest next update: Sat 15 Aug 2026 13:00:57 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: DWQO9ix9FoekV2Wu0mjXvRgBfHZSTLrhudNyVSsRpZM=)
2: UQfa-j4WEyyr4Tqn408a6pJMbHc.roa (hash: EJyCOkuGunERLH3RxVLohocub+Eh42R4y/uoWugcYsM=)
3: a1xgjXAhseZu7nFnf5HzZCndeXI.roa (hash: 3IPBZUSGpWqKuOh5YxmXZBNnrJCY4hG1fNK2MQxNxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:80:fa:fc:21:ec:ad:f8:c7:34:ec:d5:02:15:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Aug 14 13:00:57 2026 GMT
Not After : Aug 15 13:00:57 2026 GMT
Subject: CN=3ae73da8e72978029c00be51b07cc978e045b520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:09:8e:b7:49:75:5b:fe:f8:5c:c8:8a:bf:
83:f3:c9:6d:d4:3a:b0:aa:66:eb:99:89:de:5f:16:
ee:ed:47:14:6f:44:a4:5a:cb:a4:80:db:1c:ad:0e:
85:39:61:94:05:fa:e3:c1:2c:f2:ab:d2:97:1a:95:
f7:fc:48:9a:2a:42:86:ca:64:d8:70:3c:14:be:a6:
7f:d2:32:55:f1:a1:3b:69:ee:3b:5c:81:c9:ad:6c:
3d:6a:2b:8f:4b:a3:49:a1:8c:17:08:7d:7c:22:18:
b9:d7:de:68:ea:a4:bd:d1:47:d9:a8:c8:5c:ec:07:
ba:e2:b4:01:76:f5:d4:57:5b:5e:0a:77:dc:31:7e:
ce:e8:6c:c5:71:17:b4:50:a4:96:bc:a9:a1:fc:4f:
ab:a8:95:2c:6e:41:ec:a9:27:b0:c6:93:92:e9:1a:
ba:50:63:ff:c0:87:42:04:5d:1c:7c:82:04:5b:70:
fe:3b:c8:58:79:9d:9e:a8:bf:43:71:1c:4d:d9:fb:
d3:e0:f0:fe:1b:75:d0:ff:c1:c3:ce:e5:4b:db:c1:
45:9c:8b:8e:c2:59:68:f6:8f:92:ec:07:b8:a8:1d:
f6:f6:16:0d:b5:d8:9a:7e:12:49:1d:93:72:c3:68:
c0:98:56:a3:da:a6:7a:08:96:0d:a5:f7:c8:b6:53:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E7:3D:A8:E7:29:78:02:9C:00:BE:51:B0:7C:C9:78:E0:45:B5:20
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c7:88:2f:a2:b5:5b:6e:c7:a2:56:18:bf:25:33:da:2c:2a:
75:6d:f3:16:7d:65:a9:83:5e:8f:b7:42:42:8c:b5:2e:16:d6:
68:8a:c4:fb:a7:c6:5c:b0:4f:00:97:a6:c9:6e:1b:8c:5c:72:
11:4e:1b:3b:b9:c5:31:d3:e6:72:fa:fc:c4:73:6d:3f:ff:ab:
93:04:10:9e:30:49:07:c6:cd:a5:3c:54:fd:43:09:6c:01:bd:
76:6f:50:86:10:87:04:9d:40:69:65:e1:33:5b:47:f3:45:90:
58:d5:c8:fb:7a:07:dd:7f:9f:5d:c8:92:ad:c5:d1:ea:15:b5:
06:68:a0:9a:ba:aa:7d:db:39:c1:8e:65:bd:f1:5c:43:13:67:
a0:d6:c2:fd:94:a1:d6:c7:da:a4:2e:c8:15:5f:e3:31:e1:35:
88:ae:e5:bd:c9:a5:3a:27:c1:cd:e7:70:7d:ef:d3:6a:81:65:
63:8d:6d:eb:47:49:54:46:11:ca:9c:59:cb:64:2d:ca:ae:c8:
4e:d7:e4:f5:ec:db:2f:ff:2d:70:d2:8d:59:ed:01:d0:d4:46:
53:db:c7:b6:6a:93:9f:61:c5:cc:80:db:a9:93:42:82:2e:2c:
9d:5f:4f:13:b4:07:88:96:72:59:ec:c4:a9:94:b1:36:72:85:
18:f7:fa:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXID6/CHsrfjHNOzVAhVBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzcxMDMwZmUwODFlMDJiYWI0ODIzZDA1NjhmZmIyYTMz
MjY1ZTEwHhcNMjYwODE0MTMwMDU3WhcNMjYwODE1MTMwMDU3WjAzMTEwLwYDVQQD
EygzYWU3M2RhOGU3Mjk3ODAyOWMwMGJlNTFiMDdjYzk3OGUwNDViNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHkJjrdJdVv++FzIir+D88lt1Dqw
qmbrmYneXxbu7UcUb0SkWsukgNscrQ6FOWGUBfrjwSzyq9KXGpX3/EiaKkKGymTY
cDwUvqZ/0jJV8aE7ae47XIHJrWw9aiuPS6NJoYwXCH18Ihi5195o6qS90UfZqMhc
7Ae64rQBdvXUV1teCnfcMX7O6GzFcRe0UKSWvKmh/E+rqJUsbkHsqSewxpOS6Rq6
UGP/wIdCBF0cfIIEW3D+O8hYeZ2eqL9DcRxN2fvT4PD+G3XQ/8HDzuVL28FFnIuO
wllo9o+S7Ae4qB329hYNtdiafhJJHZNyw2jAmFaj2qZ6CJYNpffItlNGbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrnPajnKXgCnAC+UbB8yXjgRbUgMB8GA1UdIwQY
MBaAFNrHEDD+CB4CurSCPQVo/7KjMmXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNWU2ZDgtNGU3Mi00YWMyLWI2ZTUt
YzgyMDFiOTFhZWMzLzEvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yNWU2ZDgtNGU3Mi00YWMyLWI2ZTUtYzgyMDFiOTFhZWMz
LzEvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXseIL6K1
W27HolYYvyUz2iwqdW3zFn1lqYNej7dCQoy1LhbWaIrE+6fGXLBPAJemyW4bjFxy
EU4bO7nFMdPmcvr8xHNtP/+rkwQQnjBJB8bNpTxU/UMJbAG9dm9QhhCHBJ1AaWXh
M1tH80WQWNXI+3oH3X+fXciSrcXR6hW1Bmigmrqqfds5wY5lvfFcQxNnoNbC/ZSh
1sfapC7IFV/jMeE1iK7lvcmlOifBzedwfe/TaoFlY41t60dJVEYRypxZy2Qtyq7I
Ttfk9ezbL/8tcNKNWe0B0NRGU9vHtmqTn2HFzIDbqZNCgi4snV9PE7QHiJZyWezE
qZSxNnKFGPf6Yg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:06 2026 by rpki-client