Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.mft
File: scl7vq9wVQohl7zw4nY0NapJcIo.mft (raw, json)
Hash identifier: jBqbYT/PRdJGqUwFcSa2ieItnxmTYKtlkR6AAW20LLc=
Subject key identifier: C6:DC:12:B7:D5:37:AA:2C:3D:E3:23:99:D9:FC:D0:2F:7E:9E:11:F4
Authority key identifier: B1:C9:7B:BE:AF:70:55:0A:21:97:BC:F0:E2:76:34:35:AA:49:70:8A
Certificate issuer: /CN=b1c97bbeaf70550a2197bcf0e2763435aa49708a
Certificate serial: 019D386692647735C4808A5F39C5DEC8918E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scl7vq9wVQohl7zw4nY0NapJcIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.mft
Manifest number: 0208
Signing time: Sun 29 Mar 2026 07:02:19 +0000
Manifest this update: Sun 29 Mar 2026 07:02:19 +0000
Manifest next update: Mon 30 Mar 2026 07:02:19 +0000
Files and hashes: 1: scl7vq9wVQohl7zw4nY0NapJcIo.crl (hash: op68Lt1mcwEykpADZuESmrqcDPX9zunG1nHW28egu9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/scl7vq9wVQohl7zw4nY0NapJcIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:92:64:77:35:c4:80:8a:5f:39:c5:de:c8:91:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c97bbeaf70550a2197bcf0e2763435aa49708a
Validity
Not Before: Mar 29 07:02:19 2026 GMT
Not After : Mar 30 07:02:19 2026 GMT
Subject: CN=c6dc12b7d537aa2c3de32399d9fcd02f7e9e11f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:02:9e:dc:02:69:d2:4a:74:82:5f:a8:8f:
70:d9:5c:b1:79:13:17:da:16:33:c2:4c:64:27:fc:
9c:f1:af:4a:fe:cb:70:a2:3d:0a:94:c5:1f:fc:5e:
7e:4d:af:f6:eb:20:c9:19:56:af:fa:bf:9f:c7:9e:
09:48:db:a2:74:89:5e:fa:c2:38:d5:bf:ce:55:88:
b3:a3:67:d8:7c:c4:87:fa:2a:3f:7b:76:c2:65:a5:
64:ad:08:a6:de:c0:1d:0b:1c:b3:97:53:76:e4:4f:
12:95:21:6d:66:a0:d4:39:0e:ce:36:b1:d5:8c:8d:
fe:8d:1e:25:49:a3:93:78:23:58:e7:b2:38:4f:73:
3f:79:65:bb:7a:5c:a1:f3:c5:b0:c4:f1:2a:74:17:
4c:bf:1c:77:ef:ad:5c:0b:09:28:05:74:a5:11:fd:
65:70:18:47:1c:b5:0e:0f:c0:25:b5:fb:25:64:5e:
08:34:ff:b2:25:98:c2:a4:67:5f:9c:39:f1:77:aa:
99:a4:f9:df:78:c3:6c:68:e0:52:31:80:99:77:9c:
e0:91:55:1c:5f:18:b3:01:26:1f:8a:a9:25:0c:28:
f9:54:21:e1:f5:09:68:32:f6:50:03:f1:34:00:36:
28:5e:94:99:b3:43:b0:b3:da:80:a6:09:6f:e9:04:
e1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DC:12:B7:D5:37:AA:2C:3D:E3:23:99:D9:FC:D0:2F:7E:9E:11:F4
X509v3 Authority Key Identifier:
keyid:B1:C9:7B:BE:AF:70:55:0A:21:97:BC:F0:E2:76:34:35:AA:49:70:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scl7vq9wVQohl7zw4nY0NapJcIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3c:ab:07:1c:71:81:64:d2:2e:ad:c7:5f:3c:e8:b3:ec:85:
0e:b7:18:50:8c:aa:76:c4:be:2d:cd:75:95:6c:b3:83:e4:09:
6a:b9:b9:c8:c2:a4:5c:84:8c:c8:a7:c8:65:91:b9:d9:c3:cc:
60:09:68:63:79:da:f3:a3:15:f1:cf:80:9f:19:b4:44:0f:89:
2e:d6:42:44:17:ed:32:fa:97:2a:95:71:c4:f3:76:7d:1e:ec:
3a:f2:69:27:28:04:6e:95:fe:48:84:65:9f:c6:e9:05:26:ee:
db:2a:97:8d:01:2a:e4:c5:70:05:d3:3d:1c:33:20:9a:bc:08:
7c:53:25:7c:db:64:d2:71:f0:dd:c7:fd:9b:18:ef:ae:35:72:
89:51:ac:62:60:60:45:c0:4f:c8:9a:ca:d8:ee:eb:a1:d8:c7:
58:c9:ac:fe:c9:34:fa:17:3d:de:9e:e2:2f:f8:4b:ce:02:2b:
47:93:37:5f:6d:59:43:b0:9e:76:40:88:98:2a:35:77:ee:ab:
18:87:33:39:21:1a:ea:d0:2d:da:56:f0:a2:e9:fa:71:e4:68:
15:7a:5e:30:47:da:d5:af:2a:a0:c7:65:2d:94:f5:94:eb:90:
13:c7:ac:ce:60:35:24:f8:dd:51:b7:be:70:97:8a:75:62:0d:
6b:b3:01:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZpJkdzXEgIpfOcXeyJGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYzk3YmJlYWY3MDU1MGEyMTk3YmNmMGUyNzYzNDM1YWE0
OTcwOGEwHhcNMjYwMzI5MDcwMjE5WhcNMjYwMzMwMDcwMjE5WjAzMTEwLwYDVQQD
EyhjNmRjMTJiN2Q1MzdhYTJjM2RlMzIzOTlkOWZjZDAyZjdlOWUxMWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQECntwCadJKdIJfqI9w2VyxeRMX
2hYzwkxkJ/yc8a9K/stwoj0KlMUf/F5+Ta/26yDJGVav+r+fx54JSNuidIle+sI4
1b/OVYizo2fYfMSH+io/e3bCZaVkrQim3sAdCxyzl1N25E8SlSFtZqDUOQ7ONrHV
jI3+jR4lSaOTeCNY57I4T3M/eWW7elyh88WwxPEqdBdMvxx3761cCwkoBXSlEf1l
cBhHHLUOD8AltfslZF4INP+yJZjCpGdfnDnxd6qZpPnfeMNsaOBSMYCZd5zgkVUc
XxizASYfiqklDCj5VCHh9QloMvZQA/E0ADYoXpSZs0Ows9qApglv6QThiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbcErfVN6osPeMjmdn80C9+nhH0MB8GA1UdIwQY
MBaAFLHJe76vcFUKIZe88OJ2NDWqSXCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2NsN3ZxOXdWUW9obDd6dzRuWTBOYXBKY0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xMGE5OWMtMTAyNS00ZGE0LWFlZjEt
MDI1MWFlNjVhZGVkLzEvc2NsN3ZxOXdWUW9obDd6dzRuWTBOYXBKY0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xMGE5OWMtMTAyNS00ZGE0LWFlZjEtMDI1MWFlNjVhZGVk
LzEvc2NsN3ZxOXdWUW9obDd6dzRuWTBOYXBKY0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzyrBxxx
gWTSLq3HXzzos+yFDrcYUIyqdsS+Lc11lWyzg+QJarm5yMKkXISMyKfIZZG52cPM
YAloY3na86MV8c+Anxm0RA+JLtZCRBftMvqXKpVxxPN2fR7sOvJpJygEbpX+SIRl
n8bpBSbu2yqXjQEq5MVwBdM9HDMgmrwIfFMlfNtk0nHw3cf9mxjvrjVyiVGsYmBg
RcBPyJrK2O7rodjHWMms/sk0+hc93p7iL/hLzgIrR5M3X21ZQ7CedkCImCo1d+6r
GIczOSEa6tAt2lbwoun6ceRoFXpeMEfa1a8qoMdlLZT1lOuQE8eszmA1JPjdUbe+
cJeKdWINa7MBtA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:08 2026 by rpki-client