
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: 6+MR4aHmE9lQvYZvHQILe0zREs3jIXTfVOD4ZHyjeHQ=
Subject key identifier: 58:35:75:4B:2D:2D:BA:17:F7:D2:C6:E9:02:0F:5A:68:3A:CD:FD:42
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 01A13AEDB3C3C3CDA8C7087A2BD28EDB2C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 1409
Signing time: Wed 14 Oct 2026 15:00:18 +0000
Manifest this update: Wed 14 Oct 2026 15:00:18 +0000
Manifest next update: Thu 15 Oct 2026 15:00:18 +0000
Files and hashes: 1: 1--uR84TmxMmj_tqc32k0ls6g_r4.roa (hash: IA0jf36x0dXydwjCq4BOEj93DRAJ8PodXiTOIuTYy3Q=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: uc8IBev9gHT/88uiQM2TfUKJtTQixH0kjfon877BPJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:ed:b3:c3:c3:cd:a8:c7:08:7a:2b:d2:8e:db:2c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Oct 14 15:00:18 2026 GMT
Not After : Oct 15 15:00:18 2026 GMT
Subject: CN=5835754b2d2dba17f7d2c6e9020f5a683acdfd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:8a:0b:b1:7c:b3:dd:bf:07:0d:82:6d:83:
7c:92:0c:12:dd:bb:55:2c:76:6a:19:d6:d6:1a:93:
83:61:c8:5a:08:b2:1d:9a:1d:69:47:8c:86:69:41:
47:03:0b:aa:2e:3b:38:01:87:c3:70:f0:4e:85:03:
7d:8f:1b:4f:38:12:4c:79:fb:33:1b:52:18:3f:55:
3d:33:b7:58:e2:1c:24:4d:2e:73:40:e3:1b:42:c0:
0a:5d:36:aa:e2:1e:71:b6:64:bd:3d:00:a1:15:32:
78:62:ed:82:cd:d9:45:66:c4:e4:63:3b:5e:52:8a:
5d:cb:50:c9:a7:9d:5f:6c:bd:61:21:2a:90:ae:1a:
49:a9:2f:8e:9c:f0:33:c5:7b:28:a6:c6:52:67:1c:
65:21:06:10:ae:a5:54:f0:58:e5:22:c3:1e:88:35:
b3:8e:a5:0e:9b:fd:7c:e9:3b:d3:d8:45:df:dd:93:
ab:ed:f7:95:ed:29:46:72:60:5b:a5:38:3c:e1:09:
89:c2:3e:82:d4:0f:b4:8a:0e:69:96:55:0c:bc:cb:
29:71:70:b9:c2:2c:f9:5a:33:0e:c4:26:33:02:9f:
62:d3:e8:70:eb:b3:69:b5:17:d4:9b:62:a5:dd:8b:
5c:44:e4:52:0c:49:51:ca:47:fe:22:96:1a:90:7b:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:35:75:4B:2D:2D:BA:17:F7:D2:C6:E9:02:0F:5A:68:3A:CD:FD:42
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9a:a2:f8:b5:68:d3:78:a2:10:e2:a1:3a:36:16:02:99:1f:
ee:80:1d:89:e3:9f:96:cc:bf:89:ea:7d:da:f5:e7:bc:c9:ea:
8f:d6:68:23:b0:51:a5:b1:2f:12:56:b0:e6:bf:1f:db:7d:cf:
6c:4a:fb:ef:f8:17:06:8c:e8:78:e8:25:fc:fd:9f:d9:02:a9:
e9:a6:6d:ff:8b:3d:fb:35:80:d0:62:6e:8b:ee:43:88:b7:58:
76:1a:b0:f7:c3:c6:16:2f:b3:fb:4a:c8:9e:83:c5:7e:87:a0:
50:e6:1d:40:ca:0a:94:13:13:04:6e:25:85:1e:92:26:32:05:
ec:93:77:cb:2d:99:4b:19:cb:1a:8f:55:92:cc:fd:0e:49:1e:
69:8a:db:23:49:e0:97:d5:1f:6d:fb:fa:4f:f5:e0:27:f7:db:
20:21:f1:0e:a2:4f:f7:e0:4f:12:3c:19:13:7c:e9:d8:1a:4e:
7e:98:5f:08:1a:23:2a:81:fc:d6:3e:94:22:4a:ee:11:40:29:
52:7a:af:d7:74:ec:25:33:c3:b5:09:6e:de:5d:09:4d:89:e7:
0a:36:20:97:d0:3f:1a:c4:ad:a3:de:f8:85:46:be:0e:c7:b4:
94:59:ca:a2:a4:f1:29:d1:97:20:69:b1:36:21:08:03:00:47:
32:04:56:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:28:31 2026 by rpki-client