Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: EdX14G3jwR1JLIKmZIAdeLpJTnuWY9Q525vJKrqdLF8=
Subject key identifier: 36:A8:E9:5B:89:60:85:6E:59:B2:79:36:D3:3E:16:98:57:02:B5:D7
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 019ED42B1A0826F60D09324C02CE8A8BF759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 1969
Signing time: Wed 17 Jun 2026 06:00:54 +0000
Manifest this update: Wed 17 Jun 2026 06:00:54 +0000
Manifest next update: Thu 18 Jun 2026 06:00:54 +0000
Files and hashes: 1: LUGSDv7DrtC6uhqKMg1-4tFi0x8.roa (hash: fV+caAzqEo99T8yXb9ytJ67VOc9pjgshPYU0owP7CNs=)
2: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: 3rrmUj0VNfycRFbHFgIaYoriS8XDsXuUafuGxSUWH6c=)
3: duU8-DqcrbJR-jS_G7eKQiKxR-8.roa (hash: cFWSCbveByhBThDaIpOI1aib6oTyv0EzcL769gpyL08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:1a:08:26:f6:0d:09:32:4c:02:ce:8a:8b:f7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Jun 17 06:00:54 2026 GMT
Not After : Jun 18 06:00:54 2026 GMT
Subject: CN=36a8e95b8960856e59b27936d33e16985702b5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:4f:f0:31:4d:33:34:bd:38:e8:15:15:98:
d2:11:2e:67:f0:56:0f:3b:16:99:d8:ef:f6:14:ba:
38:d8:04:42:bf:68:2f:a1:41:be:f4:d1:55:ec:0e:
48:3f:b9:f4:49:11:14:24:83:0f:8c:2d:5b:59:72:
f5:2a:6a:86:89:eb:61:df:7d:01:6d:10:5c:36:2f:
c3:f4:c2:41:20:68:e1:9b:9b:d5:dc:31:bb:73:3e:
29:ec:e9:2d:08:90:c1:d7:f0:ac:4d:94:7f:fc:77:
11:e0:14:fb:ce:fe:57:e0:12:52:4b:6b:20:d7:b1:
ec:50:40:f5:60:75:1e:75:ce:1e:cc:42:c0:f7:56:
5e:07:18:7e:29:12:ed:42:6f:2d:96:df:6b:4e:b0:
5a:db:c2:09:c9:52:61:88:5d:21:51:19:90:00:17:
10:d8:00:a5:94:f8:42:b4:d4:8c:67:a6:03:83:67:
2e:c9:7e:47:fc:43:38:60:59:a8:20:87:ad:67:1a:
66:b4:31:ea:45:b9:fa:3b:3e:bf:06:4e:af:51:36:
48:4c:8e:bf:24:4f:bc:67:ee:cc:2e:df:bf:67:7a:
7c:f8:33:ba:f8:fb:ee:15:cf:0d:c8:da:19:5a:c6:
e1:73:eb:5e:53:50:3f:91:6f:a8:5f:cc:35:b3:4c:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A8:E9:5B:89:60:85:6E:59:B2:79:36:D3:3E:16:98:57:02:B5:D7
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3f:63:2b:64:b2:af:71:2c:e1:d1:35:98:3e:75:35:5b:c8:
3b:dd:e5:5d:ad:a0:8a:8c:06:fa:4e:40:bd:85:1a:c3:ca:25:
8b:ac:81:dd:21:4e:ff:36:de:e6:3a:31:5a:d1:c7:a9:18:78:
75:a7:29:3c:e7:b6:8e:cd:17:77:cb:d2:cb:64:dd:28:65:94:
59:88:21:5a:7a:22:a9:c0:d8:5e:a7:b4:14:6b:95:c5:ed:fc:
14:fd:9b:5a:1f:49:7e:fe:62:2d:78:03:d3:26:f4:ec:5e:bd:
40:80:16:23:e2:a1:d2:1a:93:32:bf:c0:50:bd:db:cc:21:9e:
6e:5e:d4:aa:13:b8:cd:e6:50:b0:2e:e3:51:2c:bf:b4:0b:5c:
d2:10:af:2a:ef:ae:2b:06:55:0c:bf:ec:3a:af:f0:7c:3c:0d:
e1:5f:25:a3:97:87:7b:c2:e4:14:4d:0b:77:39:b1:62:33:58:
b3:92:77:3c:08:c7:dd:aa:ab:54:a7:0b:8e:4b:9b:f8:26:b9:
86:ab:a1:c8:fe:3a:31:a1:d6:bc:b4:7a:67:55:38:42:5e:a0:
29:08:67:53:a1:f6:cd:50:12:73:0a:83:d8:a0:ea:38:82:56:
dd:59:2c:f7:f6:b7:d7:7d:83:85:74:cb:f1:da:04:80:58:ff:
af:7e:63:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UKxoIJvYNCTJMAs6Ki/dZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjcxMjRkOTgwM2E3ZGU1NDg4MzE2NGEzNzZlYTcyZTNj
NjNlYWYwHhcNMjYwNjE3MDYwMDU0WhcNMjYwNjE4MDYwMDU0WjAzMTEwLwYDVQQD
EygzNmE4ZTk1Yjg5NjA4NTZlNTliMjc5MzZkMzNlMTY5ODU3MDJiNWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTRP8DFNMzS9OOgVFZjSES5n8FYP
OxaZ2O/2FLo42ARCv2gvoUG+9NFV7A5IP7n0SREUJIMPjC1bWXL1KmqGieth330B
bRBcNi/D9MJBIGjhm5vV3DG7cz4p7OktCJDB1/CsTZR//HcR4BT7zv5X4BJSS2sg
17HsUED1YHUedc4ezELA91ZeBxh+KRLtQm8tlt9rTrBa28IJyVJhiF0hURmQABcQ
2ACllPhCtNSMZ6YDg2cuyX5H/EM4YFmoIIetZxpmtDHqRbn6Oz6/Bk6vUTZITI6/
JE+8Z+7MLt+/Z3p8+DO6+PvuFc8NyNoZWsbhc+teU1A/kW+oX8w1s0yMtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDao6VuJYIVuWbJ5NtM+FphXArXXMB8GA1UdIwQY
MBaAFEknEk2YA6feVIgxZKN26nLjxj6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMt
ZjAxNTBjODFhY2Y1LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMtZjAxNTBjODFhY2Y1
LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGT9jK2Sy
r3Es4dE1mD51NVvIO93lXa2giowG+k5AvYUaw8oli6yB3SFO/zbe5joxWtHHqRh4
dacpPOe2js0Xd8vSy2TdKGWUWYghWnoiqcDYXqe0FGuVxe38FP2bWh9Jfv5iLXgD
0yb07F69QIAWI+Kh0hqTMr/AUL3bzCGebl7UqhO4zeZQsC7jUSy/tAtc0hCvKu+u
KwZVDL/sOq/wfDwN4V8lo5eHe8LkFE0LdzmxYjNYs5J3PAjH3aqrVKcLjkub+Ca5
hquhyP46MaHWvLR6Z1U4Ql6gKQhnU6H2zVAScwqD2KDqOIJW3Vks9/a3132DhXTL
8doEgFj/r35jEg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:43:03 2026 by rpki-client