Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: WXPGXwlq+CC5nzODLp8wP41Vp8eIQmP3AVd1SF7WrEI=
Subject key identifier: A1:FF:98:E7:CF:71:FA:A6:EF:3E:08:E9:2F:A1:89:AC:78:A9:2A:EA
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 01A13F024ED6B261ECAC0A354A5C4B17D3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 0A3B
Signing time: Thu 15 Oct 2026 10:01:18 +0000
Manifest this update: Thu 15 Oct 2026 10:01:18 +0000
Manifest next update: Fri 16 Oct 2026 10:01:18 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: QgHjM1bTk/SpUnQNI0d9/NvREyTP+xqapXodaTGWVwA=)
2: UQfa-j4WEyyr4Tqn408a6pJMbHc.roa (hash: EJyCOkuGunERLH3RxVLohocub+Eh42R4y/uoWugcYsM=)
3: a1xgjXAhseZu7nFnf5HzZCndeXI.roa (hash: 3IPBZUSGpWqKuOh5YxmXZBNnrJCY4hG1fNK2MQxNxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:4e:d6:b2:61:ec:ac:0a:35:4a:5c:4b:17:d3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Oct 15 10:01:18 2026 GMT
Not After : Oct 16 10:01:18 2026 GMT
Subject: CN=a1ff98e7cf71faa6ef3e08e92fa189ac78a92aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:0c:29:5f:39:68:74:84:a3:5e:5f:b4:43:
38:f1:27:90:a5:50:fb:91:39:5e:93:75:35:f2:27:
30:e8:fe:c5:07:aa:15:60:e0:f8:cd:c3:cf:6c:d7:
45:85:a2:ac:a5:a9:ea:bc:a6:35:96:06:ae:60:1a:
66:df:cd:24:91:ed:69:43:fe:0a:a1:23:be:ec:bc:
10:67:41:d0:34:31:04:44:b5:82:15:fa:3a:eb:99:
01:cd:9b:a8:a9:55:14:af:93:ea:c2:b0:21:7b:5e:
e8:59:dc:8c:92:81:e0:9e:88:ba:ae:a7:8e:d3:e3:
fa:35:da:52:89:d6:a9:19:0e:e3:ed:e8:3a:2f:88:
2f:bb:73:fe:cf:21:78:90:b4:f9:e0:10:6c:5b:ca:
f1:cb:70:47:04:a4:ec:ae:9c:64:28:76:9c:b2:c2:
c6:0d:1f:04:82:8b:b9:7b:35:af:45:48:7f:c8:1d:
3a:de:5c:16:45:e3:c6:94:26:06:a4:28:48:62:9b:
eb:ed:71:80:c1:e8:d4:ec:dd:05:b9:ab:bb:c0:63:
24:4f:2c:36:80:0b:3c:0b:3c:d5:2c:c9:37:f0:cf:
8f:9b:10:15:98:60:64:30:c3:8c:61:3d:e8:b2:dd:
70:49:ac:fb:48:1a:ac:b0:22:57:49:05:a2:77:3d:
a6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FF:98:E7:CF:71:FA:A6:EF:3E:08:E9:2F:A1:89:AC:78:A9:2A:EA
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9d:22:b1:ec:32:a3:fc:83:28:04:80:57:7d:3f:3d:ba:f1:
c5:a1:85:c9:24:af:5d:7c:e6:96:d6:c1:01:a8:3c:a2:e8:a2:
6e:24:aa:5d:19:b4:d3:89:b5:a8:ea:0f:1e:47:97:ed:62:f9:
ac:85:1c:6c:16:aa:5e:be:6b:19:04:f1:c3:f0:78:78:b0:15:
00:82:ce:af:1b:99:5c:14:94:ca:17:6c:2d:13:f6:af:67:63:
41:04:c5:9c:e1:15:42:92:f8:d8:0b:32:c3:ac:b7:33:6a:5c:
90:c5:a4:4d:aa:dd:83:85:58:a9:61:b5:02:12:d4:90:2e:9b:
74:e9:3e:6e:81:0d:72:ea:4c:47:ea:18:b1:35:85:20:e9:70:
f9:17:95:1d:73:f0:6c:9e:2e:af:08:a3:1b:76:72:1f:30:0a:
77:44:64:6c:a3:ae:be:99:ac:10:d6:7f:66:f4:11:da:b8:46:
c5:97:1a:a0:29:28:ff:5e:3d:c3:d0:7b:95:58:11:dc:1b:94:
ca:f8:b3:de:f8:82:42:c6:be:35:80:4b:60:75:30:94:97:9f:
53:7e:3e:16:20:cd:34:07:73:15:22:4e:f3:94:c0:57:5a:0c:
dc:6c:2a:67:67:07:a9:c9:7f:c7:aa:b2:78:e9:ab:10:53:bb:
3a:30:f5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:07 2026 by rpki-client