Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: lQaQOLTXIwWfDgiQiEKJSx2u5h+2ZP2rfXtCr7uzgWI=
Subject key identifier: 09:B0:C8:6A:7E:E4:FD:A2:A2:83:FC:72:9E:3B:6F:03:F4:D9:BA:E8
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 019D37C05B1A1123532E79182CFE6E552551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 0825
Signing time: Sun 29 Mar 2026 04:00:46 +0000
Manifest this update: Sun 29 Mar 2026 04:00:46 +0000
Manifest next update: Mon 30 Mar 2026 04:00:46 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: tcT3V7omOjeXLS9R1CX+Nez3lcuQxZh/Y3IWAIDS6Nk=)
2: UQfa-j4WEyyr4Tqn408a6pJMbHc.roa (hash: EJyCOkuGunERLH3RxVLohocub+Eh42R4y/uoWugcYsM=)
3: a1xgjXAhseZu7nFnf5HzZCndeXI.roa (hash: 3IPBZUSGpWqKuOh5YxmXZBNnrJCY4hG1fNK2MQxNxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:5b:1a:11:23:53:2e:79:18:2c:fe:6e:55:25:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Mar 29 04:00:46 2026 GMT
Not After : Mar 30 04:00:46 2026 GMT
Subject: CN=09b0c86a7ee4fda2a283fc729e3b6f03f4d9bae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7a:da:c9:0b:fe:6f:2a:3a:92:66:dc:36:fb:
af:d8:f4:7a:6b:86:3f:67:15:ab:41:53:ff:2f:5d:
0f:c0:b6:ab:a6:04:7e:58:52:3c:ee:28:bb:0b:e4:
51:0c:5a:a1:9d:66:a9:a8:d4:23:8d:6e:e6:f9:a6:
63:c0:e1:57:dc:fc:dd:12:77:ab:1e:c4:08:6d:68:
ff:ec:b0:84:f1:40:2b:a2:22:a1:50:32:46:94:40:
9d:03:37:95:a9:8d:07:a7:84:2d:ff:81:a8:ad:e5:
07:ea:a4:8d:9d:fb:4c:aa:72:e2:14:bf:dc:2e:8d:
f2:9c:0a:1f:3a:2c:4b:15:a2:a0:24:04:4a:ea:f4:
ae:8b:4a:31:11:5e:3e:a0:43:c9:4b:ce:7a:60:7f:
1d:03:f7:ab:20:3f:60:0f:72:23:e3:79:40:83:64:
a9:58:f1:0f:45:a9:19:3f:06:4d:94:67:1e:35:45:
09:80:cf:aa:07:34:58:30:23:b9:9c:16:ba:0d:be:
0f:6a:a7:28:00:59:eb:ad:b1:dd:01:e7:1a:fc:cf:
38:b9:c7:78:4c:f1:d7:29:42:a0:b5:9e:4f:32:c6:
58:98:9c:14:72:30:af:07:d5:d0:e3:b9:45:54:96:
19:8e:31:93:97:c7:95:ed:7f:c6:dd:c4:17:03:7a:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B0:C8:6A:7E:E4:FD:A2:A2:83:FC:72:9E:3B:6F:03:F4:D9:BA:E8
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9d:48:7f:c2:04:c2:72:20:53:45:77:56:b8:d3:ec:76:c8:
10:64:04:61:e5:13:64:b3:6f:ba:fd:86:1f:9e:11:72:1e:63:
6f:87:6b:0f:70:07:d6:b8:2f:b8:df:d0:1a:66:13:a9:f3:b2:
2f:15:80:ca:a1:b1:99:bb:f5:7b:cc:e5:52:9b:ec:75:81:f5:
70:84:eb:9d:ee:73:7f:0a:f9:d7:75:ce:c3:3b:cc:bc:ea:98:
04:e4:2f:f1:03:f4:33:04:0e:f8:db:76:1c:28:36:4d:7c:e8:
8b:2d:ae:7d:35:32:06:f3:2b:65:eb:b8:f8:43:6c:81:b7:a3:
9b:bc:f9:d0:ca:7c:fa:8e:da:21:84:4f:6a:d6:59:da:01:02:
74:58:75:8d:1c:b9:56:50:6a:23:6f:4f:9c:0e:c3:39:66:20:
df:62:92:23:d5:1a:df:f1:57:ed:b2:26:af:a8:f3:8d:c9:9b:
92:09:0f:21:ca:c8:0e:72:51:6d:1a:b7:39:67:5e:2c:71:5f:
59:5c:31:15:e4:48:e3:85:d3:c0:4e:ce:11:42:ca:03:16:28:
5f:24:bb:04:2b:94:37:b0:f3:5b:d6:1c:f0:2c:28:09:3e:d3:
82:73:c0:e0:cc:00:49:8d:8f:49:62:17:5f:2a:8f:e9:d1:a2:
e6:8d:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:31 2026 by rpki-client