Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json)
Hash identifier: IpFJjDTLt18PyWMZ3hOu+gFQutOEfuhRg0Iac+Xo1zI=
Subject key identifier: 47:87:BF:38:ED:2E:4F:58:E3:D5:96:11:6D:93:8F:72:B3:AB:7A:9D
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 019D37F704D5D832B72BEFDA0146F3E92548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 05:00:28 +0000
Manifest this update: Sun 29 Mar 2026 05:00:28 +0000
Manifest next update: Mon 30 Mar 2026 05:00:28 +0000
Files and hashes: 1: 01DTvRDJh5LAMewuiaxq8ihTWOw.roa (hash: 873+VYTyzWaUqkJstRwODHvpIJL6rDoaYBv6eGv0Qo0=)
2: 5rakYdNxKMjh5JNPex8iKzp_gtA.roa (hash: 6LspddKmtQtuac9ZuOl1VnhHP0Iq5oFWoFzvEG8ERXE=)
3: 814WTzXBXOIciV517t_FSJpheFU.roa (hash: 3rVBxA84Q0GQ5WcUB0js4QFJ7jGwBh1Rh823C6IzdeE=)
4: PQhkPKvFMO7XAZJCK0yg6JOYn-Q.roa (hash: GclksRKdEgrXLLR1LhQTLSvorV7LCPoO0w2Ir6KfZ4M=)
5: Qi3PbQnrdw7q8NtmLcDOyzuEuok.roa (hash: Ene2M6hdbbKNY0YIKXvUxR9PygRHkyqGW28j+nRBH9E=)
6: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: ZW79TJV7oM45UZiZ5AKNZf45RYzl6lNg2Sy3Tgt10Bg=)
7: UKQMI_1tAdL7QkXpECyLkKgiFXw.roa (hash: xCvizHfY/xMnYQ9a7uuh91R0ms1D7ktEV/mIEaRjfJ8=)
8: iB6K871-MTgrHCKR-pl3wKEY8VE.roa (hash: evrLdA7V1aTPB0+S9RwUtMXPCQscLGRKXxGpKmpY5Z4=)
9: of6LgZjZn377OWe4qW9VxsrXlzU.roa (hash: mzM/Cns9/j03lTiA+9ZfDQNcGWtBmHN0WQWYMBfi0eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:04:d5:d8:32:b7:2b:ef:da:01:46:f3:e9:25:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Mar 29 05:00:28 2026 GMT
Not After : Mar 30 05:00:28 2026 GMT
Subject: CN=4787bf38ed2e4f58e3d596116d938f72b3ab7a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a0:23:06:79:9a:4f:7c:1c:58:86:82:a3:81:
8f:53:e1:fe:5a:df:f4:f2:49:c7:f7:e1:d0:f7:a7:
3f:e9:3f:19:ef:e9:32:ea:b3:6d:da:77:10:23:35:
d6:0e:19:e4:41:94:d7:04:64:41:69:66:b7:23:b1:
f1:5a:88:fe:4e:51:8a:f7:7b:b4:8d:9c:ca:3d:79:
ab:81:d7:a0:88:5f:ad:90:70:f9:ca:93:49:a5:08:
49:37:f5:8d:0b:e4:be:d6:6d:3b:39:f9:ef:fc:20:
66:55:8c:ac:5e:25:2e:dc:24:26:92:f8:51:79:1d:
20:85:8d:57:ab:20:66:87:6b:c5:2f:a9:27:e6:6e:
32:fc:ba:a7:3d:e6:c1:04:d4:ce:68:9c:b3:20:cc:
74:11:12:46:3c:09:78:66:31:12:9f:ec:08:85:70:
12:c8:f7:9a:76:6f:38:69:69:52:04:6e:57:cc:dd:
dd:0a:fb:59:a1:2b:5b:39:f0:bd:86:4f:66:14:28:
cb:45:0e:4d:82:25:80:38:95:25:9d:bb:c2:36:a8:
ce:c2:ab:d3:5c:e1:af:5c:f1:26:14:18:a6:dc:86:
8a:41:17:15:75:20:66:3f:e1:da:d9:9d:79:a8:88:
4c:dd:71:43:3a:30:3a:dd:35:a3:78:e7:e0:a1:1f:
c6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:87:BF:38:ED:2E:4F:58:E3:D5:96:11:6D:93:8F:72:B3:AB:7A:9D
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e7:ba:bf:c4:1f:69:6d:65:3e:b3:13:3b:5b:da:29:da:c5:
84:38:33:63:08:01:5d:02:d2:ee:28:60:a8:2f:e0:ea:20:43:
49:43:32:8c:32:02:94:c2:c4:aa:f2:f5:e9:65:b6:90:9e:6a:
29:8f:e5:0d:cf:aa:4b:a1:0f:1b:24:6b:20:63:17:e8:e8:ef:
2b:42:07:76:79:8e:8e:02:12:02:59:f5:2b:55:25:9c:7c:cf:
fd:ad:4a:a6:d7:2e:8b:1b:91:b5:fa:a3:03:5e:32:f8:03:d5:
8c:a8:07:7b:96:79:ab:67:2d:d4:0e:7a:c6:c9:d8:53:b6:79:
43:49:cb:3b:2a:35:eb:05:a1:bc:7b:b6:c4:0c:5e:ac:ac:cc:
ce:cc:70:dc:5b:07:f7:77:42:6e:4d:67:d9:cb:5d:6b:c2:a6:
30:65:9f:00:4d:73:52:97:97:78:1b:11:97:6b:a0:47:6e:6b:
50:9e:20:0b:9f:0e:36:a0:84:71:e3:d4:d9:d0:05:02:d8:48:
9e:ae:0d:ef:46:03:f4:0d:5f:eb:5d:a3:38:3f:58:fd:f1:af:
6a:e0:3a:dc:88:9f:70:41:0a:16:a7:24:e2:ff:9b:7b:15:8c:
96:af:b6:02:d7:53:57:08:04:11:38:3e:72:aa:c1:b9:04:03:
db:0c:4c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:10 2026 by rpki-client