Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: mjAOGdlTeBRz+HZkKH3ih9j2qL4rkGQ/yPOupJv7E3U=
Subject key identifier: 9B:ED:76:F0:1D:20:EA:FD:19:3C:E1:EC:D7:46:41:15:33:AA:01:DB
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 019D9AABA78BC6A48AE2F0BC48B849172E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0B7E
Signing time: Fri 17 Apr 2026 09:00:33 +0000
Manifest this update: Fri 17 Apr 2026 09:00:33 +0000
Manifest next update: Sat 18 Apr 2026 09:00:33 +0000
Files and hashes: 1: L3zQrDly_cgu2DtWRJFHDzULtOQ.roa (hash: i7m+qZMXIsGxhkbEdh7EZAa733fER6ODAhYCosRl/wk=)
2: Xf4ZTszORkzpOtgjWs0sQXLkCfM.roa (hash: f/UijPcLGJI8l2y80NoFTGhFWkou3AIufub5lbOoRas=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: oqkoS75F5Yui8t84BJeR0jZH+aVOx7IT9HrCgPUyyMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:a7:8b:c6:a4:8a:e2:f0:bc:48:b8:49:17:2e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Apr 17 09:00:33 2026 GMT
Not After : Apr 18 09:00:33 2026 GMT
Subject: CN=9bed76f01d20eafd193ce1ecd746411533aa01db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:b3:15:4b:9a:e4:26:0d:63:20:6f:40:05:
b8:ad:43:58:97:9e:d0:a0:6a:cb:2c:e9:e0:75:6b:
49:11:c6:9b:77:30:d4:1a:c0:4a:fc:64:da:20:fc:
77:12:35:fb:3a:89:18:a4:47:8c:54:ae:c6:65:3d:
0d:14:5c:7a:db:2d:4b:91:1d:f8:42:b3:b0:72:26:
c3:74:d7:fb:98:f0:83:b7:2c:73:42:69:48:15:52:
5f:1a:cb:71:e1:de:1b:15:fd:2b:03:2d:1c:fc:43:
5f:96:b6:94:12:c3:64:0e:43:4d:e8:61:34:42:03:
78:58:a8:12:59:2c:ad:72:a7:62:61:13:34:c5:16:
d5:ad:66:9a:b3:75:87:81:b2:96:4f:d4:58:a6:b0:
4d:0f:42:69:ff:fe:30:5c:3d:b7:68:72:29:0d:91:
2e:b6:32:9e:29:ec:09:c4:7f:d1:7a:8e:97:5d:4e:
cd:26:6e:f6:b9:ad:9a:e3:40:52:bf:01:76:e2:ee:
b1:1c:84:de:e0:4f:ed:23:fb:82:d8:c9:89:75:70:
9f:a1:76:a9:11:5f:4c:53:22:ca:00:0d:51:84:3b:
09:ae:0d:2c:aa:63:5d:f5:cc:2c:30:a3:f9:23:6f:
10:58:cd:5e:0b:dd:5a:96:5f:f7:91:65:99:d7:af:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:ED:76:F0:1D:20:EA:FD:19:3C:E1:EC:D7:46:41:15:33:AA:01:DB
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:42:29:7c:60:27:2c:81:82:ed:3b:2d:09:4b:c0:ff:c2:e0:
b6:78:b3:21:99:99:d4:60:b8:64:9f:af:73:34:ae:6f:fc:fe:
8c:b1:f0:2a:7c:54:79:83:7e:0a:bd:79:31:86:d7:4e:b3:07:
42:0a:4d:af:c6:e7:6b:f4:61:38:c7:57:ba:3d:d3:9a:eb:8d:
7d:cd:26:9c:08:d4:a5:3a:4a:86:6e:6c:3b:25:23:50:e0:35:
7b:92:fc:1b:01:e9:f3:d0:40:f7:c8:e2:63:43:35:df:6c:84:
7e:ad:c3:9e:63:d2:1c:3b:8c:56:3e:3f:7a:40:7a:1e:5a:f0:
e9:da:7c:c7:0a:df:47:8f:bd:7e:4c:26:5b:97:2f:b6:a1:26:
f7:d3:48:69:b9:c0:b7:46:d4:c6:1b:59:62:c4:01:25:09:cd:
77:1a:96:f6:bb:d6:41:e4:3b:40:e0:66:37:43:de:aa:c9:d4:
c3:4e:34:4c:50:90:7e:68:14:eb:02:86:51:82:9c:e3:08:65:
20:d6:ed:b2:e0:fa:4c:52:1f:08:8f:06:4b:c4:45:07:10:79:
93:72:6a:91:9f:17:91:f6:60:80:e0:e5:19:dd:36:0c:e0:2f:
fb:d5:98:46:d3:d4:c0:bb:ff:76:1a:64:0a:39:79:d7:49:da:
db:89:60:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq6eLxqSK4vC8SLhJFy4+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYzNlYzUzOWYyM2VlMDMxYWEzOTZhYzVjZWQ0MjU2Mzg4
NGI3YjMwHhcNMjYwNDE3MDkwMDMzWhcNMjYwNDE4MDkwMDMzWjAzMTEwLwYDVQQD
Eyg5YmVkNzZmMDFkMjBlYWZkMTkzY2UxZWNkNzQ2NDExNTMzYWEwMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eGzFUua5CYNYyBvQAW4rUNYl57Q
oGrLLOngdWtJEcabdzDUGsBK/GTaIPx3EjX7OokYpEeMVK7GZT0NFFx62y1LkR34
QrOwcibDdNf7mPCDtyxzQmlIFVJfGstx4d4bFf0rAy0c/ENflraUEsNkDkNN6GE0
QgN4WKgSWSytcqdiYRM0xRbVrWaas3WHgbKWT9RYprBND0Jp//4wXD23aHIpDZEu
tjKeKewJxH/Reo6XXU7NJm72ua2a40BSvwF24u6xHITe4E/tI/uC2MmJdXCfoXap
EV9MUyLKAA1RhDsJrg0sqmNd9cwsMKP5I28QWM1eC91all/3kWWZ169C0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvtdvAdIOr9GTzh7NdGQRUzqgHbMB8GA1UdIwQY
MBaAFLHD7FOfI+4DGqOWrFztQlY4hLezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUt
NTU2MzQ3YTVmMDU2LzEvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUtNTU2MzQ3YTVmMDU2
LzEvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUIpfGAn
LIGC7TstCUvA/8LgtnizIZmZ1GC4ZJ+vczSub/z+jLHwKnxUeYN+Cr15MYbXTrMH
QgpNr8bna/RhOMdXuj3TmuuNfc0mnAjUpTpKhm5sOyUjUOA1e5L8GwHp89BA98ji
Y0M132yEfq3DnmPSHDuMVj4/ekB6Hlrw6dp8xwrfR4+9fkwmW5cvtqEm99NIabnA
t0bUxhtZYsQBJQnNdxqW9rvWQeQ7QOBmN0PeqsnUw040TFCQfmgU6wKGUYKc4whl
INbtsuD6TFIfCI8GS8RFBxB5k3JqkZ8XkfZggODlGd02DOAv+9WYRtPUwLv/dhpk
Cjl510na24lgWQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:48:51 2026 by rpki-client