Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: 2CIJTvdai7OCqSi0JHLD/j0/X5OEXm7lWZPQuDQqsIk=
Subject key identifier: 03:3D:41:78:90:9C:11:83:B7:52:CE:FC:00:81:A2:C7:BF:73:E8:49
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 01A0E8894861B35BAA733B07619DE4DF1F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0D34
Signing time: Mon 28 Sep 2026 15:01:46 +0000
Manifest this update: Mon 28 Sep 2026 15:01:46 +0000
Manifest next update: Tue 29 Sep 2026 15:01:46 +0000
Files and hashes: 1: L3zQrDly_cgu2DtWRJFHDzULtOQ.roa (hash: i7m+qZMXIsGxhkbEdh7EZAa733fER6ODAhYCosRl/wk=)
2: Xf4ZTszORkzpOtgjWs0sQXLkCfM.roa (hash: f/UijPcLGJI8l2y80NoFTGhFWkou3AIufub5lbOoRas=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: 3J7BAHMh5fFxzQldRcA+rtyT0Q9sX2sPR4sFk0vGdqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:48:61:b3:5b:aa:73:3b:07:61:9d:e4:df:1f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Sep 28 15:01:46 2026 GMT
Not After : Sep 29 15:01:46 2026 GMT
Subject: CN=033d4178909c1183b752cefc0081a2c7bf73e849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:2f:29:61:a1:77:b1:22:a3:40:ee:56:ce:
ca:07:3d:d2:8d:d9:5a:e2:1d:de:49:b4:d7:ac:d0:
b2:f9:c9:86:70:50:be:2b:f9:ff:47:1e:e6:e1:4c:
da:e8:db:2c:41:8c:c1:cc:12:1e:3f:10:45:fb:3b:
71:2a:52:bb:23:6b:a5:75:c7:ea:d7:e1:30:0c:03:
8f:c9:f5:d5:0a:ca:b6:cf:0e:21:1e:57:68:cb:0c:
3f:69:7b:f5:c2:e4:e2:63:13:d6:5c:a7:3f:57:a6:
93:45:c8:48:4d:c1:be:02:52:db:63:1b:e2:40:a4:
83:54:76:d2:b4:8c:0a:61:dd:1e:53:0d:63:b4:38:
91:1c:d7:fc:45:18:be:bd:70:a0:52:f3:5b:ca:6d:
56:ba:52:14:56:b1:c6:40:3c:fa:1a:2a:51:60:24:
1f:92:83:1e:1e:99:19:17:2c:bc:57:e5:f7:58:e4:
43:15:2f:b7:a3:4d:3b:dc:4c:1b:a5:d8:3c:97:3c:
26:8c:a9:83:d8:6f:35:b6:6b:79:bf:45:eb:eb:9f:
d4:36:07:cc:1d:07:a0:7e:2f:5e:20:39:2f:d0:78:
f1:30:fd:4b:24:56:17:74:7a:10:41:cb:60:36:b4:
25:0f:6b:31:26:0e:ab:7e:04:ce:36:4f:1d:e7:db:
21:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3D:41:78:90:9C:11:83:B7:52:CE:FC:00:81:A2:C7:BF:73:E8:49
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ea:bb:62:79:45:6a:c7:45:cb:62:e3:34:00:6e:a7:71:87:
68:9d:6b:fe:e2:23:08:c8:28:e9:a6:5f:d1:fa:4e:ce:c7:4f:
5c:20:11:7b:8d:c4:1e:fb:9b:e8:59:9b:d9:3e:a4:0a:f5:7b:
2d:41:0e:e7:41:f2:e5:84:09:d6:8e:22:cf:a7:a1:f7:cc:74:
0c:fb:01:34:85:87:15:e2:03:b5:75:8e:b7:fd:db:f0:b2:2a:
4f:60:f1:66:03:99:3e:59:49:0d:e3:05:e3:a5:9f:44:f9:2a:
a8:85:39:da:54:35:d3:0a:54:86:c5:4e:30:10:48:d5:9b:d6:
8d:33:f8:2e:45:41:2e:2f:5b:bc:ce:a0:81:7e:0d:1d:28:1f:
aa:cf:9e:3d:f7:3f:9a:51:20:38:e9:c7:cd:35:b4:25:29:ef:
5f:07:1e:64:2e:86:f0:de:88:a7:e1:7b:63:70:60:c0:7e:da:
82:94:34:84:f3:a8:27:8c:14:d1:b4:40:47:4a:be:1d:6d:15:
71:1c:ef:cf:21:2f:87:fa:cc:67:4e:bb:87:3c:ef:f2:bc:de:
f6:6c:47:60:0e:f0:31:a9:d3:29:7f:cf:e7:1d:68:c5:6e:09:
0f:18:71:85:cc:d7:01:44:9e:5a:4f:1f:04:81:5c:42:69:4d:
42:4c:99:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:03:26 2026 by rpki-client