Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: FjAehDqdgEmI1tZU7kzaOC7mShbSi99K8+9WV+QsFMI=
Subject key identifier: 7A:5B:EE:BD:9C:8D:AA:EF:5E:E0:C4:BC:D5:43:10:3D:61:37:21:D6
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 019CAD225AE53D638C4CC0D9E9B57D175A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0B03
Signing time: Mon 02 Mar 2026 06:00:35 +0000
Manifest this update: Mon 02 Mar 2026 06:00:35 +0000
Manifest next update: Tue 03 Mar 2026 06:00:35 +0000
Files and hashes: 1: L3zQrDly_cgu2DtWRJFHDzULtOQ.roa (hash: i7m+qZMXIsGxhkbEdh7EZAa733fER6ODAhYCosRl/wk=)
2: Xf4ZTszORkzpOtgjWs0sQXLkCfM.roa (hash: f/UijPcLGJI8l2y80NoFTGhFWkou3AIufub5lbOoRas=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: emridc82KdTeta3O4OZhAv3Bo1frFQAiLnGKiF82eDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:5a:e5:3d:63:8c:4c:c0:d9:e9:b5:7d:17:5a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Mar 2 06:00:35 2026 GMT
Not After : Mar 3 06:00:35 2026 GMT
Subject: CN=7a5beebd9c8daaef5ee0c4bcd543103d613721d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:77:71:77:24:ec:1d:c1:25:cd:13:8e:4d:
62:58:17:e8:71:56:04:47:95:d8:7b:e5:9e:c6:6c:
cf:c5:93:af:e8:98:37:66:71:b0:85:73:09:fb:a3:
21:a1:95:7d:9b:c6:d7:44:3f:9b:61:f5:43:35:ba:
b2:d3:7c:48:e2:96:f3:46:d3:c7:e3:eb:6d:b5:60:
e9:46:40:77:4c:44:8f:18:c3:8c:9c:a4:fc:31:6e:
ce:e3:90:3a:7c:6a:d7:80:f3:b2:9e:a4:33:28:00:
b2:35:70:91:86:96:50:a2:ba:33:39:0e:43:ce:d9:
21:fe:91:06:4e:df:51:fe:1c:d9:0f:1a:55:6b:a8:
f8:4c:4a:64:ae:6f:3d:e4:96:a5:ee:09:5d:5e:e6:
0b:8f:28:e3:47:8e:20:2f:19:7c:53:7e:41:7b:3a:
bc:64:48:71:c1:e0:e9:89:0b:e3:48:ca:15:f7:50:
77:41:a4:3e:56:b4:ee:c4:ab:7f:43:0c:97:61:74:
55:11:a6:d7:6c:b8:81:70:b4:eb:56:f8:0b:1f:93:
3c:79:df:10:8e:4f:cc:c0:d1:35:a7:28:09:dc:99:
83:2f:6e:24:cb:7a:e0:53:6d:67:96:1d:e8:f3:ce:
fc:cf:77:41:23:1a:9d:ff:6f:d3:e2:a9:30:10:ba:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5B:EE:BD:9C:8D:AA:EF:5E:E0:C4:BC:D5:43:10:3D:61:37:21:D6
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b6:8a:27:6c:70:c0:39:76:de:61:cc:10:9c:cf:4d:5f:19:
a0:cd:dd:08:6c:9c:f5:36:81:8f:94:4a:45:4d:fb:65:da:5b:
cc:e5:aa:e1:d5:f9:1f:b8:d4:0e:9c:63:62:b1:03:f0:fc:ed:
c1:e5:54:f2:4d:c4:f8:9c:89:43:6d:78:e5:d7:74:3b:2f:be:
a8:cd:95:28:a8:2d:7c:a3:02:d3:d5:8b:ab:90:ff:44:96:f1:
c1:a6:6f:88:76:0f:45:64:9d:b1:03:f2:f6:01:24:32:85:45:
b4:bb:b7:45:fa:d8:47:15:7a:f2:6b:c4:84:50:67:9f:74:9a:
99:21:68:1d:9e:0e:62:61:4a:1e:60:3e:65:dd:e7:df:eb:34:
f4:32:96:1a:34:37:bc:0c:1c:84:df:08:1b:df:75:3a:28:84:
da:13:b3:0c:1c:5a:30:9d:9e:da:6c:09:72:9b:5e:bf:de:32:
22:51:af:67:ad:c1:97:0c:4f:0d:3f:cf:a6:82:a6:72:c9:0a:
a4:a4:89:8f:5b:0c:3b:a3:92:b4:19:60:bd:4e:7b:88:39:ba:
af:9b:b3:46:70:42:7a:c9:b7:bc:a7:a4:0d:48:bc:3e:18:94:
a6:fb:1d:ca:ed:b5:13:67:f0:6e:11:7a:d7:6a:d9:f5:3d:3a:
c0:91:11:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:11:13 2026 by rpki-client