Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
File: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft (raw, json)
Hash identifier: HTzyvkyp7dHGafAeV2W+9mGeiQ9Au8RLSHAPLZ+m0V4=
Subject key identifier: DC:3E:BA:8A:70:9D:D1:81:EF:E8:45:57:24:29:5E:42:70:0E:23:8E
Authority key identifier: 49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
Certificate issuer: /CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Certificate serial: 019D9961FC18CB1EFBAB206A6A4A7A373168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
Manifest number: 14A7
Signing time: Fri 17 Apr 2026 03:00:28 +0000
Manifest this update: Fri 17 Apr 2026 03:00:28 +0000
Manifest next update: Sat 18 Apr 2026 03:00:28 +0000
Files and hashes: 1: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl (hash: vX3tLByx1pU3Lf6RH7sdhlFFi0vZ+KfPR6g6/Zs4x+E=)
2: zRBFe9x1meBumlZVBO7a-XrbamY.roa (hash: 9tVoYdgbZgFACYKhxfO+KxLqad27bA9cdGeFVvtqTOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:fc:18:cb:1e:fb:ab:20:6a:6a:4a:7a:37:31:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Validity
Not Before: Apr 17 03:00:28 2026 GMT
Not After : Apr 18 03:00:28 2026 GMT
Subject: CN=dc3eba8a709dd181efe8455724295e42700e238e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:81:07:5b:84:11:5a:21:f6:83:52:1e:1d:
47:6b:8e:75:31:fd:fc:09:fd:11:e3:49:32:c2:45:
a0:43:a3:02:28:44:e2:11:0a:11:6a:7b:aa:eb:e9:
d1:77:a6:23:35:aa:48:10:38:9f:c6:cb:ae:9e:1d:
f5:cc:9e:10:5b:4c:3a:33:7c:5a:d1:f1:c0:d9:08:
e2:38:d9:8a:0a:8c:ae:0a:dd:8d:87:d9:26:68:75:
30:93:cb:67:a8:5a:84:49:33:58:46:90:ce:6f:9c:
3b:3b:8d:5e:43:24:49:9e:fd:f1:97:e4:08:40:04:
97:30:2a:aa:45:12:f2:88:22:bb:82:83:7d:60:31:
74:7b:cf:7d:df:5c:c5:89:77:f4:99:7e:17:44:33:
f2:f6:2b:63:8e:29:6d:14:f3:52:6e:6e:0d:35:c2:
07:cd:a4:35:60:9e:18:7c:1c:71:02:d9:1e:c3:4e:
be:d2:45:f2:e5:08:3d:eb:46:0d:ad:3d:bb:27:d8:
0b:41:48:38:49:dc:01:2c:5a:b8:0c:3d:fc:4a:ec:
43:43:27:db:1c:1a:29:38:36:46:36:01:d7:5c:a2:
81:f0:fc:47:11:45:1e:42:8f:85:b9:ad:67:40:ed:
a9:65:84:f2:12:6c:57:e7:64:73:eb:86:15:d4:c2:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3E:BA:8A:70:9D:D1:81:EF:E8:45:57:24:29:5E:42:70:0E:23:8E
X509v3 Authority Key Identifier:
keyid:49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c3:37:11:f8:e1:ad:2e:b0:75:b4:60:74:f9:f5:b3:9c:56:
93:ae:68:ca:d4:69:2f:49:c2:37:e5:7a:9d:b2:57:a9:15:0a:
3c:0b:92:3b:96:46:b2:c0:8f:c5:ad:58:d3:eb:f4:15:58:f1:
42:7c:0f:19:2d:7f:78:2d:bc:7d:21:72:73:03:f8:16:5a:7f:
7c:07:ab:26:20:5c:d2:29:74:16:b9:cd:83:db:17:58:c6:e3:
24:10:7b:1a:fa:ff:69:ab:34:ce:9d:e9:3b:33:6d:70:ee:7f:
95:9f:44:d5:ce:95:fd:b8:d7:a2:6a:4f:53:f0:0a:4a:7b:a0:
f3:77:28:c5:9a:ac:d2:e9:38:36:bf:84:20:94:34:75:4e:94:
9a:cc:6e:34:eb:72:3a:17:b8:26:b4:44:72:f4:8b:b0:7e:a1:
39:f6:a4:39:f1:36:49:40:c5:d6:08:cb:6c:e7:38:d9:dc:3b:
40:38:58:c8:d5:41:af:91:1a:7c:30:20:cd:30:c3:44:f0:8c:
4b:96:8b:97:8d:a6:aa:ae:09:bd:cf:f6:c7:e4:ac:17:6a:13:
d4:46:a1:58:2e:70:db:bd:88:0d:3a:60:d0:24:46:8f:bb:24:
9e:4a:a1:e5:28:30:c3:30:30:d5:c5:be:aa:65:48:59:1e:1c:
7e:31:11:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:21 2026 by rpki-client