Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: Vppykb4EPmkmNHE0u5Lvp5KJOEwpyjDlIlp1xbrNerc=
Subject key identifier: 12:CD:71:54:AE:17:BA:0C:5E:3E:93:7D:E2:90:28:C2:85:73:CC:3B
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 019CABD8E66687D1A27EFDFEED5574F22BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 00:00:44 +0000
Manifest this update: Mon 02 Mar 2026 00:00:44 +0000
Manifest next update: Tue 03 Mar 2026 00:00:44 +0000
Files and hashes: 1: LUGSDv7DrtC6uhqKMg1-4tFi0x8.roa (hash: fV+caAzqEo99T8yXb9ytJ67VOc9pjgshPYU0owP7CNs=)
2: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: 6IcNDVZGkL7Y7CeY9YxeUXyONiLMPAbEc46L4T5t+kA=)
3: duU8-DqcrbJR-jS_G7eKQiKxR-8.roa (hash: cFWSCbveByhBThDaIpOI1aib6oTyv0EzcL769gpyL08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e6:66:87:d1:a2:7e:fd:fe:ed:55:74:f2:2b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Mar 2 00:00:44 2026 GMT
Not After : Mar 3 00:00:44 2026 GMT
Subject: CN=12cd7154ae17ba0c5e3e937de29028c28573cc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a1:06:95:9a:fc:62:c5:ac:78:27:74:2b:7d:
29:a5:bf:48:f4:f3:d1:e1:72:ac:7d:f3:48:06:66:
0f:25:a4:fd:7f:e5:7a:5b:f9:e6:6d:5d:5c:ea:37:
13:23:cb:98:78:7d:27:76:8f:5d:94:7d:d5:05:9f:
44:87:ae:10:ee:60:10:7d:aa:74:58:b4:9d:cd:69:
39:bf:64:40:bf:86:c7:53:2b:af:b3:61:29:44:da:
7a:6e:da:70:cf:4e:d8:c2:80:5c:db:77:5f:66:a9:
57:56:eb:1a:78:22:1c:28:8c:4b:60:c2:63:dc:4d:
60:e8:1b:f5:bb:4e:b5:57:0e:cb:0c:69:1e:67:1a:
0a:f8:4c:1c:f4:df:96:37:6d:fc:c9:ee:76:9f:db:
da:96:0d:73:20:78:4d:4e:ea:4e:5c:9e:e6:af:d2:
f3:06:06:a1:67:a5:1a:f1:f7:f2:28:d6:54:19:52:
2f:03:4d:01:9e:6a:2b:b4:39:85:fe:65:34:fd:60:
76:c6:fc:6f:2e:fe:bc:86:68:86:23:a8:a2:d3:61:
0b:a4:aa:b4:be:f7:20:cc:da:4d:c0:26:33:e6:d4:
d0:af:f0:3b:ce:9e:cc:d1:63:88:84:1d:c2:9a:bc:
37:5c:80:95:11:52:67:c5:4c:65:31:61:3f:42:6b:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CD:71:54:AE:17:BA:0C:5E:3E:93:7D:E2:90:28:C2:85:73:CC:3B
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:23:c6:29:f0:45:1f:20:e9:1e:d5:97:95:a6:19:cd:f3:4a:
cd:1c:e8:cf:86:a0:d7:0d:0e:2f:89:f1:6f:8e:28:22:a4:82:
33:73:4a:31:6d:82:48:ce:14:a8:98:91:df:db:30:94:9e:e5:
74:b0:da:3c:d9:92:1e:f6:ef:58:56:5e:f1:b8:ab:cb:e1:a4:
6a:03:d4:d2:b0:c3:2e:04:f1:15:a1:4d:83:3d:93:e8:e1:10:
1f:43:a6:d1:60:dc:2a:74:6b:3a:08:0d:4c:90:76:9c:70:6a:
ac:68:f2:d8:47:f5:cd:11:8a:95:05:b3:94:85:0c:a4:cd:b5:
81:32:04:2b:9a:26:6d:cd:14:e9:7d:b5:9c:52:fd:aa:44:b6:
1f:f4:eb:58:ff:f7:6a:47:5c:4d:3c:92:56:f0:2a:4a:45:60:
f8:61:8a:3a:f0:7d:da:94:e4:5c:e2:cd:83:f1:47:8b:85:cb:
32:e6:aa:da:aa:b2:de:c7:94:dc:ca:7a:65:b7:60:5d:be:10:
d2:92:84:9f:d4:fe:6e:ec:67:08:24:fe:84:68:82:81:11:be:
b4:3d:60:6d:df:71:e5:88:99:ea:93:6e:fa:5b:d6:52:a2:bf:
8e:82:21:8e:4f:4d:47:a3:1e:42:18:37:1d:77:26:23:a8:57:
88:36:eb:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2OZmh9Gifv3+7VV08ivUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjcxMjRkOTgwM2E3ZGU1NDg4MzE2NGEzNzZlYTcyZTNj
NjNlYWYwHhcNMjYwMzAyMDAwMDQ0WhcNMjYwMzAzMDAwMDQ0WjAzMTEwLwYDVQQD
EygxMmNkNzE1NGFlMTdiYTBjNWUzZTkzN2RlMjkwMjhjMjg1NzNjYzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaEGlZr8YsWseCd0K30ppb9I9PPR
4XKsffNIBmYPJaT9f+V6W/nmbV1c6jcTI8uYeH0ndo9dlH3VBZ9Eh64Q7mAQfap0
WLSdzWk5v2RAv4bHUyuvs2EpRNp6btpwz07YwoBc23dfZqlXVusaeCIcKIxLYMJj
3E1g6Bv1u061Vw7LDGkeZxoK+Ewc9N+WN238ye52n9valg1zIHhNTupOXJ7mr9Lz
BgahZ6Ua8ffyKNZUGVIvA00BnmortDmF/mU0/WB2xvxvLv68hmiGI6ii02ELpKq0
vvcgzNpNwCYz5tTQr/A7zp7M0WOIhB3Cmrw3XICVEVJnxUxlMWE/QmsB0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLNcVSuF7oMXj6TfeKQKMKFc8w7MB8GA1UdIwQY
MBaAFEknEk2YA6feVIgxZKN26nLjxj6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMt
ZjAxNTBjODFhY2Y1LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMtZjAxNTBjODFhY2Y1
LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyPGKfBF
HyDpHtWXlaYZzfNKzRzoz4ag1w0OL4nxb44oIqSCM3NKMW2CSM4UqJiR39swlJ7l
dLDaPNmSHvbvWFZe8biry+GkagPU0rDDLgTxFaFNgz2T6OEQH0Om0WDcKnRrOggN
TJB2nHBqrGjy2Ef1zRGKlQWzlIUMpM21gTIEK5ombc0U6X21nFL9qkS2H/TrWP/3
akdcTTySVvAqSkVg+GGKOvB92pTkXOLNg/FHi4XLMuaq2qqy3seU3Mp6ZbdgXb4Q
0pKEn9T+buxnCCT+hGiCgRG+tD1gbd9x5YiZ6pNu+lvWUqK/joIhjk9NR6MeQhg3
HXcmI6hXiDbrQg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:04 2026 by rpki-client