Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: JRKZpw6fgcKr6bjeiN5XOpqnuCXoosoi1hdz+VqqBpw=
Subject key identifier: 01:BE:62:BF:C1:A6:E4:DE:EB:3D:8C:51:E3:6D:4F:64:80:F0:A1:15
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 019CAB342FDEA1904FB620B7E26D4BA586A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0B02
Signing time: Sun 01 Mar 2026 21:00:49 +0000
Manifest this update: Sun 01 Mar 2026 21:00:49 +0000
Manifest next update: Mon 02 Mar 2026 21:00:49 +0000
Files and hashes: 1: L3zQrDly_cgu2DtWRJFHDzULtOQ.roa (hash: i7m+qZMXIsGxhkbEdh7EZAa733fER6ODAhYCosRl/wk=)
2: Xf4ZTszORkzpOtgjWs0sQXLkCfM.roa (hash: f/UijPcLGJI8l2y80NoFTGhFWkou3AIufub5lbOoRas=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: ekW6wB39NZ4DbzEofhdAci71OY3xO2cPJoLPrg8uGCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:2f:de:a1:90:4f:b6:20:b7:e2:6d:4b:a5:86:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Mar 1 21:00:49 2026 GMT
Not After : Mar 2 21:00:49 2026 GMT
Subject: CN=01be62bfc1a6e4deeb3d8c51e36d4f6480f0a115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:f4:17:0e:b2:bf:1b:33:09:04:87:04:b0:
2a:2f:38:9e:14:fd:22:1f:9f:1b:21:a2:51:29:46:
ed:2e:e2:c0:fe:f5:45:90:80:c3:27:61:b4:91:43:
1f:d8:d6:72:7c:de:ba:cc:cf:df:60:e1:c0:51:62:
a0:9a:77:0b:77:a5:cd:c9:20:dc:d4:c9:cf:cd:a2:
cb:f9:f6:f1:5b:4c:f3:f0:a3:40:3f:a2:20:a9:7a:
28:73:48:b4:ba:35:c9:ec:f3:28:c4:63:32:f6:50:
74:12:e0:5c:93:d8:13:2e:11:db:9c:d9:85:78:c1:
5d:f1:eb:f6:2d:ac:ba:48:c2:8e:91:63:ef:d0:e2:
a0:ab:2d:ea:31:07:b7:99:15:cf:89:02:48:1b:67:
38:3e:40:d1:12:99:fc:42:37:85:98:4d:f4:67:18:
1c:fd:ee:a8:4e:d0:fb:69:4b:72:bc:64:f6:cd:f4:
58:a0:50:b0:d7:90:ab:8c:1a:43:92:52:f3:5e:f4:
1e:8f:3b:6e:c5:4a:9a:8d:6b:0f:5c:0c:19:d8:c5:
64:79:76:bc:18:ea:cd:31:9d:d5:8b:4e:5c:e8:47:
6e:a7:06:1a:f3:f8:c0:28:02:cd:17:0e:49:32:74:
4b:4a:ca:84:1c:e1:2e:8f:78:df:7d:ae:e1:56:f0:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BE:62:BF:C1:A6:E4:DE:EB:3D:8C:51:E3:6D:4F:64:80:F0:A1:15
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:54:46:c7:44:4f:9d:92:fe:7c:f7:ef:a1:80:2e:cd:53:2c:
84:50:ea:15:6b:b9:fb:20:1c:b2:ed:59:a4:0a:0d:d0:0c:50:
49:b5:c2:e4:15:3a:3a:66:fb:72:2d:b4:c2:bc:56:6f:b3:c6:
26:11:f7:5a:a2:8e:25:51:2c:7d:87:45:b1:8c:6a:82:f6:23:
1d:ca:97:a0:90:dc:c7:1a:6e:98:0c:ab:79:ff:82:0f:9e:76:
43:cc:f1:c4:b8:f3:e3:c5:1b:62:d1:51:1c:75:81:8b:e0:0e:
f6:d5:a4:6f:83:78:62:32:c7:78:84:bd:0a:0a:96:0e:74:83:
4a:2e:43:d7:29:ca:94:c5:eb:2a:97:90:78:b1:b3:97:c7:94:
c8:34:16:38:eb:6d:24:54:f4:5e:cf:38:6e:8b:ae:a6:ee:be:
b2:34:7e:5a:c3:7f:7c:cc:b0:c6:02:16:f9:d7:d7:cf:53:ef:
e9:cb:f6:36:84:e0:43:9c:40:1d:b1:a7:a0:9e:ed:1f:33:10:
1e:60:62:f0:6e:0c:b9:f1:35:d5:78:ed:f1:24:4b:c5:11:c4:
f2:7b:19:3e:df:d4:50:ce:2b:4b:44:21:8e:82:e2:24:9b:41:
03:87:38:37:44:6d:60:71:55:c0:30:ee:19:ad:0f:b4:30:08:
07:3c:1a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:49 2026 by rpki-client