Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: 4E2QuqFOzyW1rjlkVDCog0dDgunWnvnGWdCLZDLnu8k=
Subject key identifier: EC:A0:17:27:1C:9C:3F:18:8C:84:58:AE:12:81:AB:E4:44:98:D3:3A
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 019EC224BD53AB5E77FF38799D5984533E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0C17
Signing time: Sat 13 Jun 2026 18:00:48 +0000
Manifest this update: Sat 13 Jun 2026 18:00:48 +0000
Manifest next update: Sun 14 Jun 2026 18:00:48 +0000
Files and hashes: 1: L3zQrDly_cgu2DtWRJFHDzULtOQ.roa (hash: i7m+qZMXIsGxhkbEdh7EZAa733fER6ODAhYCosRl/wk=)
2: Xf4ZTszORkzpOtgjWs0sQXLkCfM.roa (hash: f/UijPcLGJI8l2y80NoFTGhFWkou3AIufub5lbOoRas=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: c3ESnysbsOtWW4tCoty7jB1pnOqyv78tdT9KPqpLxJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:bd:53:ab:5e:77:ff:38:79:9d:59:84:53:3e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Jun 13 18:00:48 2026 GMT
Not After : Jun 14 18:00:48 2026 GMT
Subject: CN=eca017271c9c3f188c8458ae1281abe44498d33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:0d:af:ce:83:38:90:c6:a0:59:6e:e1:f2:
c1:79:63:1c:36:78:6f:b9:59:8c:a6:8b:ba:5d:21:
ec:e2:69:b3:4f:ad:0b:1e:c4:6d:8b:64:02:87:d1:
3c:c6:1a:20:f0:e7:18:53:af:8f:eb:ac:b3:55:39:
93:c8:95:af:1b:10:a5:94:24:6f:6a:f2:60:04:41:
64:75:25:83:c3:82:02:a7:f2:0c:62:d5:16:56:1b:
49:96:fa:1e:78:13:16:8e:9e:17:76:ff:f9:48:f4:
c6:70:b9:89:5c:70:f8:78:f6:a9:37:6a:23:3b:4e:
9a:f7:20:5c:42:e8:11:b4:14:61:36:48:cf:b7:02:
af:8f:95:08:15:54:c5:a3:8f:d5:61:fe:69:6d:3a:
1e:f6:b5:26:fb:14:74:b7:45:b0:ad:22:2e:94:1a:
02:85:47:c5:7c:72:ec:38:ed:c3:12:bc:78:f6:1a:
48:2d:6a:7f:a4:3d:c1:f6:85:e9:60:6a:67:1a:23:
23:05:d0:c0:6d:d4:28:ea:e3:00:28:8c:f8:09:d1:
52:79:28:ec:e3:4b:93:8e:e9:28:3c:86:0b:03:88:
8b:f0:3f:12:87:86:41:b0:58:dd:d9:90:c9:79:1c:
08:63:19:0e:47:3e:06:28:bf:0a:b7:af:82:51:3f:
90:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A0:17:27:1C:9C:3F:18:8C:84:58:AE:12:81:AB:E4:44:98:D3:3A
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:37:be:7d:fd:d3:4c:2f:f7:04:f7:82:34:38:48:4e:fa:87:
d7:41:bd:fb:69:2a:6c:89:b5:8c:a5:af:d6:ed:2e:4b:33:0e:
b5:57:30:0b:d6:ed:1a:96:ef:25:75:ef:2c:21:9c:8d:e3:b2:
55:ee:cf:b8:75:f5:db:87:26:84:cf:85:3e:c5:fa:55:69:86:
c0:58:15:f2:1b:2c:c3:02:cb:41:b9:e5:89:68:a2:60:35:1d:
cd:f1:70:a1:97:4c:a2:1a:3b:86:fc:21:45:36:a7:33:53:2c:
28:b9:f8:00:d9:79:e9:b5:fb:d5:92:ce:80:06:0f:48:01:09:
6c:d9:cc:f8:a5:a3:c4:36:9e:47:25:1e:98:b7:24:f5:93:00:
48:f9:c2:6f:8f:12:c7:15:35:76:2a:df:8d:f6:d1:e7:f9:67:
dd:40:ab:3e:b6:cf:fa:ea:c0:ca:78:87:0d:a8:ef:75:c8:09:
65:a2:d7:ab:a7:ca:29:a8:af:a1:f6:7b:6c:6e:2d:c2:d9:32:
d6:30:a0:1e:bd:ad:e2:8f:10:9d:1f:20:cc:da:3e:ec:a9:e3:
55:9a:b2:79:7c:2f:81:71:2a:23:f1:cb:27:0f:45:5e:e2:c8:
2c:5f:ff:bf:de:67:17:e4:a2:6f:80:8f:a4:6e:0a:83:f8:5c:
fd:b5:b0:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJL1Tq153/zh5nVmEUz4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYzNlYzUzOWYyM2VlMDMxYWEzOTZhYzVjZWQ0MjU2Mzg4
NGI3YjMwHhcNMjYwNjEzMTgwMDQ4WhcNMjYwNjE0MTgwMDQ4WjAzMTEwLwYDVQQD
EyhlY2EwMTcyNzFjOWMzZjE4OGM4NDU4YWUxMjgxYWJlNDQ0OThkMzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6ANr86DOJDGoFlu4fLBeWMcNnhv
uVmMpou6XSHs4mmzT60LHsRti2QCh9E8xhog8OcYU6+P66yzVTmTyJWvGxCllCRv
avJgBEFkdSWDw4ICp/IMYtUWVhtJlvoeeBMWjp4Xdv/5SPTGcLmJXHD4ePapN2oj
O06a9yBcQugRtBRhNkjPtwKvj5UIFVTFo4/VYf5pbToe9rUm+xR0t0WwrSIulBoC
hUfFfHLsOO3DErx49hpILWp/pD3B9oXpYGpnGiMjBdDAbdQo6uMAKIz4CdFSeSjs
40uTjukoPIYLA4iL8D8Sh4ZBsFjd2ZDJeRwIYxkORz4GKL8Kt6+CUT+QGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOygFyccnD8YjIRYrhKBq+REmNM6MB8GA1UdIwQY
MBaAFLHD7FOfI+4DGqOWrFztQlY4hLezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUt
NTU2MzQ3YTVmMDU2LzEvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUtNTU2MzQ3YTVmMDU2
LzEvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqje+ff3T
TC/3BPeCNDhITvqH10G9+2kqbIm1jKWv1u0uSzMOtVcwC9btGpbvJXXvLCGcjeOy
Ve7PuHX124cmhM+FPsX6VWmGwFgV8hsswwLLQbnliWiiYDUdzfFwoZdMoho7hvwh
RTanM1MsKLn4ANl56bX71ZLOgAYPSAEJbNnM+KWjxDaeRyUemLck9ZMASPnCb48S
xxU1dirfjfbR5/ln3UCrPrbP+urAyniHDajvdcgJZaLXq6fKKaivofZ7bG4twtky
1jCgHr2t4o8QnR8gzNo+7KnjVZqyeXwvgXEqI/HLJw9FXuLILF//v95nF+Sib4CP
pG4Kg/hc/bWw0w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:56:25 2026 by rpki-client