Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: gKnKTwk+cumG4IvlrFjY4CeIuxO+GqCRphJ31ZoiUwY=
Subject key identifier: 03:40:D9:47:60:12:43:06:BB:5D:F9:0F:84:BE:D3:E7:49:F5:74:12
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 019D9A070FDE0DD9C3A69A744055C12A3ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 1228
Signing time: Fri 17 Apr 2026 06:00:47 +0000
Manifest this update: Fri 17 Apr 2026 06:00:47 +0000
Manifest next update: Sat 18 Apr 2026 06:00:47 +0000
Files and hashes: 1: 1--uR84TmxMmj_tqc32k0ls6g_r4.roa (hash: IA0jf36x0dXydwjCq4BOEj93DRAJ8PodXiTOIuTYy3Q=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: mmZWgjKhU4y23VH7ia5g+tN0IFKPARVpbK8Njx2hw+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:0f:de:0d:d9:c3:a6:9a:74:40:55:c1:2a:3e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Apr 17 06:00:47 2026 GMT
Not After : Apr 18 06:00:47 2026 GMT
Subject: CN=0340d94760124306bb5df90f84bed3e749f57412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:1c:2f:31:88:e7:67:c8:26:c0:c4:d9:39:
b2:48:62:e6:1c:5e:b8:8a:31:92:6e:64:64:8b:22:
73:3b:12:dc:7c:43:05:30:b0:64:02:75:31:c0:cd:
38:e2:ec:00:81:5a:ad:52:cb:5e:9d:76:ec:27:47:
a8:10:78:4f:a1:5a:3c:28:17:cc:e1:55:b4:ae:a6:
e5:88:0f:d4:c1:75:9c:4a:1e:d0:a0:27:95:4d:73:
a3:77:f7:f0:1e:9d:fe:fe:03:2f:02:a1:3b:c8:0c:
68:26:14:4f:fd:8c:f6:6f:5d:94:d3:b7:af:85:3a:
9a:91:9b:b6:ca:11:bf:9b:3e:b8:4c:bf:8f:62:e6:
f0:b9:c5:d2:06:46:08:46:ac:fc:f3:ad:5a:0a:0d:
de:97:7e:3c:7d:8a:53:2c:c6:40:89:5b:ef:7c:f0:
b5:cb:64:89:ba:fb:36:8f:8c:7b:77:52:17:cf:f3:
ed:54:0e:be:35:a2:46:27:ef:8f:96:b3:3b:69:b0:
d0:85:39:1d:84:05:3a:57:7e:dc:b8:4f:8e:b4:c2:
24:23:f6:f3:39:7f:b7:8f:32:b6:f0:cf:c2:bf:ce:
cd:ec:8f:ae:2f:92:54:45:15:a9:1d:8b:35:b8:6d:
d0:8c:c9:21:14:8b:97:76:5c:75:39:b2:fe:b7:40:
e9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:40:D9:47:60:12:43:06:BB:5D:F9:0F:84:BE:D3:E7:49:F5:74:12
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:67:bd:d6:55:1e:13:83:74:b8:c1:51:94:7a:6c:38:07:0c:
ae:f4:64:0b:0e:c6:fc:4a:63:9e:10:94:aa:51:30:30:1b:41:
06:af:aa:e8:52:39:0b:9e:12:08:f2:c6:c2:91:e4:40:56:a4:
95:9f:59:de:3a:4e:8a:69:28:4c:b4:0c:cb:f3:68:ea:3f:79:
92:9c:85:94:ff:e8:31:8b:67:ed:42:ff:ae:ba:3d:e6:7d:23:
f2:76:64:55:fe:a8:54:30:97:10:7f:38:de:c9:1d:f2:ef:7f:
ec:9a:e3:91:d9:bf:1f:5a:b9:91:b5:1d:d9:9c:2f:d4:87:32:
40:8b:72:08:3e:40:86:0d:81:b9:cf:e6:31:c8:2a:29:df:d6:
cf:21:84:52:ae:5b:46:3a:90:d7:4e:71:0d:b9:50:87:bf:01:
55:01:99:dd:d1:3c:71:4c:14:5b:64:92:7f:0a:35:31:20:64:
c9:f5:89:54:a4:e8:d5:bc:65:a6:ef:4f:20:45:69:54:6a:fc:
b9:6e:18:19:0c:54:82:a4:94:5b:c5:09:a8:77:a8:3f:95:89:
64:14:9b:0b:9c:9f:81:9f:e2:56:49:dd:65:61:b9:bd:7b:23:
a7:e9:23:72:0f:4c:f1:a0:c8:d2:52:e4:29:85:1a:78:5a:89:
6a:ab:3f:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBw/eDdnDppp0QFXBKj7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMjQyYjdlNDMwNTNjOTEzZDYyYmY1ZGJiMTY4MmZmZTZi
OGRmZTIwHhcNMjYwNDE3MDYwMDQ3WhcNMjYwNDE4MDYwMDQ3WjAzMTEwLwYDVQQD
EygwMzQwZDk0NzYwMTI0MzA2YmI1ZGY5MGY4NGJlZDNlNzQ5ZjU3NDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysscLzGI52fIJsDE2TmySGLmHF64
ijGSbmRkiyJzOxLcfEMFMLBkAnUxwM044uwAgVqtUstenXbsJ0eoEHhPoVo8KBfM
4VW0rqbliA/UwXWcSh7QoCeVTXOjd/fwHp3+/gMvAqE7yAxoJhRP/Yz2b12U07ev
hTqakZu2yhG/mz64TL+PYubwucXSBkYIRqz8861aCg3el348fYpTLMZAiVvvfPC1
y2SJuvs2j4x7d1IXz/PtVA6+NaJGJ++PlrM7abDQhTkdhAU6V37cuE+OtMIkI/bz
OX+3jzK28M/Cv87N7I+uL5JURRWpHYs1uG3QjMkhFIuXdlx1ObL+t0Dp5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANA2UdgEkMGu135D4S+0+dJ9XQSMB8GA1UdIwQY
MBaAFLAkK35DBTyRPWK/XbsWgv/muN/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzhmMjgtMDBkNS00NjNiLWIxNmMt
Zjg0NWJmYzQyZjZkLzEvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MzhmMjgtMDBkNS00NjNiLWIxNmMtZjg0NWJmYzQyZjZk
LzEvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGe91lUe
E4N0uMFRlHpsOAcMrvRkCw7G/EpjnhCUqlEwMBtBBq+q6FI5C54SCPLGwpHkQFak
lZ9Z3jpOimkoTLQMy/No6j95kpyFlP/oMYtn7UL/rro95n0j8nZkVf6oVDCXEH84
3skd8u9/7Jrjkdm/H1q5kbUd2Zwv1IcyQItyCD5Ahg2Buc/mMcgqKd/WzyGEUq5b
RjqQ105xDblQh78BVQGZ3dE8cUwUW2SSfwo1MSBkyfWJVKTo1bxlpu9PIEVpVGr8
uW4YGQxUgqSUW8UJqHeoP5WJZBSbC5yfgZ/iVkndZWG5vXsjp+kjcg9M8aDI0lLk
KYUaeFqJaqs//Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:11 2026 by rpki-client