Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
File: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft (raw, json)
Hash identifier: ulMU2ruZymznqKVJrKVIa0qn1zNSDwPNPqzovB88fQQ=
Subject key identifier: 41:87:D9:1C:3B:31:04:1A:C9:61:26:62:64:0D:6B:1B:4F:18:AB:2E
Authority key identifier: B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04
Certificate issuer: /CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
Certificate serial: 019CAB6AFC496876F920F2F52FF4A73A84CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
Manifest number: 0AC1
Signing time: Sun 01 Mar 2026 22:00:41 +0000
Manifest this update: Sun 01 Mar 2026 22:00:41 +0000
Manifest next update: Mon 02 Mar 2026 22:00:41 +0000
Files and hashes: 1: kRCAFZBrRoONasIbXU7cwNRHK_w.roa (hash: FRFbyFJqSQc0W6om6W1H1sQ3Wt2tS+CaPxjLXjaHs5w=)
2: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl (hash: DufCleXyQ6pYnc6c81qL7zbc4hPEgN7UO7kBr7+XEzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:fc:49:68:76:f9:20:f2:f5:2f:f4:a7:3a:84:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
Validity
Not Before: Mar 1 22:00:41 2026 GMT
Not After : Mar 2 22:00:41 2026 GMT
Subject: CN=4187d91c3b31041ac9612662640d6b1b4f18ab2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:09:7c:20:8a:ed:e9:64:7a:ec:92:55:5e:
38:04:b0:62:4a:22:3d:14:f2:3e:7c:5b:93:51:86:
bc:f9:b3:f1:1c:af:c7:2f:63:a5:3b:a4:58:8d:4e:
fe:16:ec:07:b9:0c:68:36:d9:68:78:ef:9e:df:09:
c4:d5:62:39:55:8e:7c:75:41:23:dc:01:66:e6:f1:
19:94:fc:fc:1a:d4:d1:af:3a:e2:13:94:a6:53:99:
9d:77:57:e3:52:0f:37:95:fe:e9:ac:72:e8:88:a9:
11:5a:c2:dd:36:2a:71:8e:74:02:c0:14:ce:c1:7f:
d8:ad:f9:ed:4d:54:2f:46:4f:a6:aa:2e:41:41:f5:
01:7f:6b:b8:66:71:50:f7:c1:62:9f:15:f2:2d:24:
fd:7d:11:24:73:e4:65:91:01:83:ff:1e:ce:39:20:
17:77:f8:1b:39:e3:48:c4:ee:5f:8d:a1:8d:09:5e:
ed:fb:28:32:b2:2e:4c:b2:1e:0f:de:f9:d9:a8:d3:
d3:c5:4e:d7:68:50:18:b0:2c:a5:82:f7:93:07:35:
36:82:8a:46:e2:67:f6:ff:82:2a:96:f5:31:74:87:
01:a7:32:e9:0a:05:d3:24:3a:7f:e9:01:e7:98:a8:
09:c9:59:f4:fc:f1:e5:33:e8:9e:ef:42:9e:c2:9e:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:87:D9:1C:3B:31:04:1A:C9:61:26:62:64:0D:6B:1B:4F:18:AB:2E
X509v3 Authority Key Identifier:
keyid:B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1b:5c:2d:1e:3c:8d:0e:33:5c:53:d1:1a:bc:4e:f3:ee:c7:
53:16:6e:13:c9:b0:ca:f6:e5:b6:64:10:99:bd:4e:cf:29:8a:
48:cb:85:10:6e:d5:94:2f:32:a9:38:1d:52:77:f2:81:ca:b3:
c6:a5:fb:2d:37:57:c9:31:90:5e:91:b9:c3:a0:79:bb:31:91:
98:69:78:08:6e:d8:3e:69:2a:4c:e9:78:91:f3:31:58:f9:c5:
1b:76:fa:ae:b5:a0:8f:ed:9a:4f:58:71:a9:0b:4c:16:bf:3d:
89:1c:9c:76:87:33:4c:3b:ef:df:b4:45:94:6c:b4:8a:db:42:
7f:b7:fd:1c:e5:7c:b7:a7:5a:cc:4a:a9:64:69:e7:7a:3c:f0:
06:d4:27:9f:2b:f7:c3:10:90:b4:06:65:34:3c:63:0e:0f:d2:
63:0a:e6:c7:b5:1e:0a:b1:8e:35:b9:95:d9:af:d1:21:94:ed:
84:34:36:60:de:f8:ee:da:0f:bf:0d:3a:a5:5b:35:cf:b1:7a:
33:06:19:0a:14:26:6d:7c:c5:ac:6d:83:d3:c1:01:f9:f8:db:
ed:b1:ba:ff:ce:5f:3a:d3:36:ea:55:3d:b2:bb:35:9d:c0:75:
17:e8:3f:51:0c:cc:54:a6:f4:a7:dd:9a:e2:e7:56:e9:10:dd:
c0:b9:2a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:29 2026 by rpki-client