Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: MNbN0gXrJ8W32rvp4c0S8f3kTk6DPylsW86yGIYcThs=
Subject key identifier: 75:23:BD:9B:DD:55:55:46:C2:37:33:48:EE:C1:27:B3:6B:E7:CD:D9
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 019D9B50DB1AE14B94CFAF6AD54724BC7BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 12:01:00 +0000
Manifest this update: Fri 17 Apr 2026 12:01:00 +0000
Manifest next update: Sat 18 Apr 2026 12:01:00 +0000
Files and hashes: 1: LUGSDv7DrtC6uhqKMg1-4tFi0x8.roa (hash: fV+caAzqEo99T8yXb9ytJ67VOc9pjgshPYU0owP7CNs=)
2: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: SyzugcrbF4cclOhqJse5sBHAF535PJqpsqk/IoSrIno=)
3: duU8-DqcrbJR-jS_G7eKQiKxR-8.roa (hash: cFWSCbveByhBThDaIpOI1aib6oTyv0EzcL769gpyL08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:db:1a:e1:4b:94:cf:af:6a:d5:47:24:bc:7b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Apr 17 12:01:00 2026 GMT
Not After : Apr 18 12:01:00 2026 GMT
Subject: CN=7523bd9bdd555546c2373348eec127b36be7cdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:2c:e4:0e:d8:18:1b:32:94:87:6c:9c:74:
57:6e:b1:e0:1e:69:14:77:4c:2a:eb:d8:59:ba:b1:
4e:62:01:01:be:d7:a4:b2:9a:82:ee:d7:f0:4a:cd:
95:ee:44:4e:d6:8b:44:dd:05:51:14:0f:11:c0:93:
72:00:1a:71:be:2f:05:4a:91:67:99:35:9c:f2:03:
32:c6:6d:9c:96:0f:30:fe:6a:b0:27:e3:62:4e:ed:
fa:54:14:45:f3:d4:ca:09:66:8c:be:c2:b0:f7:4d:
d2:05:58:74:71:5d:de:00:15:b9:5c:a4:ca:2b:16:
5d:59:d6:66:f3:e7:46:b2:36:c1:d7:d1:53:d1:00:
f4:1d:29:5f:79:92:66:47:ec:3b:90:0d:7a:c0:ca:
0d:6d:6a:cd:60:cb:53:aa:fd:78:7b:7a:ad:2d:d4:
e6:dd:ef:ca:13:f5:75:c6:d0:4d:56:55:36:e6:19:
50:eb:a1:79:4a:cd:a5:77:79:10:a0:fc:7e:4a:97:
f8:90:4a:49:d0:1f:96:27:ca:11:be:24:0f:a5:e7:
f4:c3:c7:cd:6f:7d:5b:b2:bc:0c:8b:62:1f:d8:9d:
93:54:7b:d4:59:24:c0:87:16:41:65:c1:88:93:63:
6d:25:09:79:be:c7:30:24:1f:14:15:66:bc:ee:f7:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:23:BD:9B:DD:55:55:46:C2:37:33:48:EE:C1:27:B3:6B:E7:CD:D9
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3a:d1:b7:a4:66:cb:48:3f:0b:70:f2:fa:8c:ba:a4:f0:5e:
e8:c0:e3:ef:ae:7e:85:b8:64:b8:3c:bd:0d:80:b4:37:d9:0a:
bd:9e:47:09:9c:1f:26:3d:72:70:e9:19:ac:0b:67:08:42:8e:
98:a8:b2:23:70:1f:9c:6c:1c:a2:80:f5:b9:60:4c:f1:a8:cf:
8f:c5:d7:b8:67:fd:e9:6f:a1:19:6b:f7:b4:c5:6e:95:69:0b:
bf:dd:e5:4f:ba:87:33:2a:9c:6c:42:03:ee:cf:98:77:b1:45:
8a:7d:9a:e4:80:11:88:b7:69:e1:d4:91:1d:47:c6:b0:dc:49:
4b:92:6c:2f:63:be:33:88:91:ec:1b:a7:7d:7f:b6:cc:a0:26:
9f:01:f7:ed:82:c6:59:b9:5a:3d:9b:32:aa:0e:c4:d7:ea:0a:
83:f9:23:11:99:7a:e7:35:12:02:fd:a1:d1:45:38:87:61:75:
c1:9b:85:25:25:f3:3d:8b:2f:32:26:de:4c:78:d6:28:5a:f6:
68:c6:ce:84:db:a8:c0:81:6a:1e:e7:a1:e7:57:3d:65:a9:35:
f4:ec:32:48:dd:3c:98:48:04:d8:f5:b6:a8:17:1d:21:00:30:
e4:7e:4a:eb:c3:3d:6a:87:bc:63:06:2a:d9:e8:87:fe:5c:0c:
dd:a5:75:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:08:05 2026 by rpki-client