Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: rnGstgAoDtPCe2HHqEEz+vNeierHKWFu6WANGC2vBDc=
Subject key identifier: B6:BF:DE:42:1D:39:2B:26:E0:B7:9A:CA:DB:24:34:65:1F:ED:5D:B9
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 019F189EB5570EC837427946FEE50F9696D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 091E
Signing time: Tue 30 Jun 2026 13:01:21 +0000
Manifest this update: Tue 30 Jun 2026 13:01:21 +0000
Manifest next update: Wed 01 Jul 2026 13:01:21 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: sQMZz7VArb1uLumtT/ux+mH/6cit0TVmbGvaQbDAWbE=)
2: UQfa-j4WEyyr4Tqn408a6pJMbHc.roa (hash: EJyCOkuGunERLH3RxVLohocub+Eh42R4y/uoWugcYsM=)
3: a1xgjXAhseZu7nFnf5HzZCndeXI.roa (hash: 3IPBZUSGpWqKuOh5YxmXZBNnrJCY4hG1fNK2MQxNxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:b5:57:0e:c8:37:42:79:46:fe:e5:0f:96:96:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Jun 30 13:01:21 2026 GMT
Not After : Jul 1 13:01:21 2026 GMT
Subject: CN=b6bfde421d392b26e0b79acadb2434651fed5db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:c7:17:c6:f6:55:0c:b3:bf:a1:dc:24:b6:
be:16:b1:6f:61:16:59:f0:9b:7e:6f:cd:22:32:ad:
5b:8c:4f:d6:c7:56:9a:dd:0b:55:7e:09:56:6e:25:
58:ee:57:0a:95:e0:8c:0b:1b:ab:9e:35:e5:b1:08:
b7:f7:e9:b0:fd:be:f0:34:96:33:2f:8a:60:59:f9:
a7:d3:72:81:bb:b5:32:fa:06:89:e8:f8:84:39:d4:
36:83:2d:38:2a:f4:49:f7:27:a6:f1:d9:05:34:9c:
e0:c8:97:d8:64:19:69:0a:9e:2d:40:ad:e4:2a:63:
e1:43:e3:97:3e:82:7e:be:cf:28:77:39:a2:fa:9e:
0f:5e:f2:e4:1c:64:87:86:32:00:a1:c1:dd:1d:b0:
fb:8e:59:eb:c9:28:b4:91:17:c1:94:18:60:54:30:
6d:ef:44:46:e9:47:85:28:44:1b:a3:71:24:75:48:
96:fb:90:ff:5b:56:92:21:fc:c4:5d:d9:ae:13:6c:
d5:a4:a5:e3:d7:84:3d:f6:cc:ed:94:af:a9:a5:4c:
6f:3a:c4:c2:3a:af:73:e6:73:8e:aa:b0:1e:c8:77:
e1:2d:09:77:3d:f8:e2:a2:25:0a:c7:07:9c:84:c7:
e5:4a:92:cd:d3:c9:58:72:59:38:58:8b:06:a0:16:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BF:DE:42:1D:39:2B:26:E0:B7:9A:CA:DB:24:34:65:1F:ED:5D:B9
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ef:6c:fe:ad:73:53:7e:71:ed:bc:1a:77:29:3b:b2:10:93:
2c:c1:31:70:a3:b7:58:90:25:33:42:dd:a8:1d:82:e1:85:e6:
7f:5e:f7:f1:87:f5:18:b2:f3:b5:cb:82:98:3b:f0:8c:91:07:
cc:5f:39:0c:6a:08:14:3f:23:93:85:58:0c:0d:07:27:15:54:
47:72:80:f6:b4:00:04:fa:1f:cb:b9:02:c3:a0:1a:76:7a:0e:
04:25:9e:8c:4c:69:82:28:91:dd:e4:37:22:04:94:1d:51:a7:
7b:e6:56:2c:a9:5a:1e:f4:8c:56:ad:b2:8c:96:b8:a2:b4:a1:
ba:94:94:99:7c:b0:5a:17:81:45:44:bd:9e:07:93:9e:6b:84:
e3:15:ee:92:9c:52:3d:89:83:a7:d1:fb:26:01:61:c2:1c:ec:
fa:44:ce:5c:12:36:84:67:c7:1a:d2:eb:ed:2e:42:72:47:bd:
37:d9:e6:5b:a7:21:27:ae:29:03:ea:a4:74:d1:dd:92:fe:56:
07:05:d5:08:31:32:95:06:99:ef:83:59:41:cf:a3:6d:69:26:
7a:86:59:2b:d3:d1:a7:e4:4c:53:80:a6:07:e9:78:b1:3e:2b:
37:fe:e3:87:49:d4:d6:46:b8:dd:35:94:34:28:0b:10:fc:b8:
5f:9d:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:08 2026 by rpki-client