Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: yA7junW5DhpelG1mOqQy1YGMvrVqxfS+OIdRl00Lyu4=
Subject key identifier: F0:7A:73:D6:53:7E:B7:79:01:48:50:92:32:50:45:22:48:10:93:21
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 019CAC7DC55FEFE17EB6CF583A556C13D7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 11AD
Signing time: Mon 02 Mar 2026 03:00:49 +0000
Manifest this update: Mon 02 Mar 2026 03:00:49 +0000
Manifest next update: Tue 03 Mar 2026 03:00:49 +0000
Files and hashes: 1: 1--uR84TmxMmj_tqc32k0ls6g_r4.roa (hash: IA0jf36x0dXydwjCq4BOEj93DRAJ8PodXiTOIuTYy3Q=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: 4e7up8E93ol0b/ypXHu/S0crQ//bwD2IZ+bGo39X/vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c5:5f:ef:e1:7e:b6:cf:58:3a:55:6c:13:d7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Mar 2 03:00:49 2026 GMT
Not After : Mar 3 03:00:49 2026 GMT
Subject: CN=f07a73d6537eb779014850923250452248109321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:30:0b:f8:54:36:80:88:62:b0:e9:c2:cd:
29:74:34:80:cc:ae:8b:47:9b:60:2f:7f:d1:d8:20:
9c:66:c6:17:0e:ee:04:1d:29:fa:06:ff:9b:d3:89:
dd:fe:8c:86:4e:e5:48:86:fc:f7:84:ec:08:11:cb:
f4:d5:7b:02:db:9d:23:ec:87:de:18:73:b7:d0:b8:
02:b6:88:0b:77:e0:db:a1:24:53:ce:1a:56:f9:d5:
44:b6:dd:6d:21:80:88:c2:a0:6c:08:f5:64:76:92:
ab:52:bc:10:f2:46:8b:d5:20:ff:d0:fc:b9:a6:65:
82:51:f2:b0:6e:d2:1a:a1:ca:5d:4c:3f:f3:c1:f1:
e0:4f:ac:d7:05:45:4b:20:61:86:4f:06:5d:92:95:
32:77:d3:16:74:c7:56:da:89:98:c6:f8:70:a1:c6:
b9:38:19:e5:2f:4a:1d:91:bc:aa:82:9f:b2:6c:c1:
62:f6:e4:9e:16:3a:b7:3e:66:f3:ab:56:0c:6c:df:
93:3d:c4:5a:b3:ca:02:d9:14:d8:96:35:e1:99:a5:
c4:a5:e9:c8:88:d7:d0:8e:8a:53:af:3a:1e:0d:60:
fd:d8:b2:40:95:36:2f:96:cc:52:c7:80:64:e8:0f:
be:7c:53:23:21:b3:46:a2:d7:df:1d:3b:b0:dc:2c:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7A:73:D6:53:7E:B7:79:01:48:50:92:32:50:45:22:48:10:93:21
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:da:24:76:7d:60:26:45:28:c8:8e:1b:4d:81:aa:a0:d4:f8:
b0:6b:cf:85:e4:7d:6e:31:f4:ea:b6:5f:b3:20:44:3e:07:04:
25:d9:8a:28:60:e7:b9:69:19:67:ae:ea:0f:08:fd:4f:a9:10:
52:6f:1f:09:7c:07:2e:63:9a:87:25:76:d0:a0:67:23:42:54:
38:94:63:9e:7d:33:a8:8c:f4:75:d9:36:b7:e0:40:ac:8e:f8:
08:35:d0:50:5e:88:8c:da:f5:89:4c:2e:df:f0:af:7d:e7:8c:
8e:d1:45:7b:c6:3e:b4:a6:b0:10:41:34:17:d8:e0:71:4c:46:
e4:bb:4f:7b:84:9b:8c:6b:53:ad:29:0b:2f:06:10:a5:1e:68:
92:43:f7:85:fb:c7:f4:c7:97:f1:e3:be:d3:76:fa:31:1d:57:
b7:22:7f:84:77:b3:50:41:8c:ab:f4:a1:94:21:a0:7a:08:b1:
11:0b:e6:8a:66:b8:af:31:27:81:54:ad:97:05:92:10:00:c4:
84:72:b0:de:3d:8c:1e:d2:f1:40:f6:64:f0:a4:bf:28:ca:54:
e9:bd:69:a7:08:df:ac:51:bc:25:5d:fc:65:83:cd:44:ee:91:
cf:19:85:45:3a:67:37:d9:74:82:3c:c9:2a:68:90:66:1c:ba:
a3:b0:25:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:40 2026 by rpki-client