Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
File: sCJf0DWnzmSnyIveca61YPNIOXQ.mft (raw, json)
Hash identifier: i0PBUYOOOtfUUVIShEpyyEAQeNoJvNGyPWhal2r8Qf8=
Subject key identifier: B2:FF:21:15:8C:73:4F:E2:FF:9E:5F:5B:23:6A:8C:72:11:B0:8F:3D
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 019CAA592B59ACABBBF5C7EE7C0255C7BD13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
Manifest number: 0168
Signing time: Sun 01 Mar 2026 17:01:36 +0000
Manifest this update: Sun 01 Mar 2026 17:01:36 +0000
Manifest next update: Mon 02 Mar 2026 17:01:36 +0000
Files and hashes: 1: 75dJ9l9pm2mLQKlmsqkMPbP5nLU.roa (hash: y9JQO9ERriwN1YTQ2JmQZB4kivefmPeXhn7RTehloi0=)
2: S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa (hash: w5hcZAmF4buAGhakgXjQA0sa4vpLG5fCK2GR/ajM+u0=)
3: dNXYaX82NX51pSFvpQpCqsG2lPo.roa (hash: 35cWo5gZ7UeSrOUHr9i+uJyPsLCbl8OtXgjF+qTOIsg=)
4: iEmnYQdM29nYo-nNUiYTJvZRSB0.roa (hash: pdS3fgx5bRNDYCy4UDUNbpIeIkFPC+tWDVmhzq8Gyzs=)
5: sCJf0DWnzmSnyIveca61YPNIOXQ.crl (hash: UEafUKNcp+fS69ORQ75tWjbbb16+ECNIdlw3emvrMvI=)
6: wJQhpUcYRE9YbrS1hrhEwceSpsw.roa (hash: pKy+CJ0dPgWvUI++SXNGLH/W/2Tj4mADcaq6t4MuXsE=)
7: wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa (hash: VxkO6fBbTYMBO4jXH/JD3dN5+ZLMhiKDYjCspmghV5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:2b:59:ac:ab:bb:f5:c7:ee:7c:02:55:c7:bd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: Mar 1 17:01:36 2026 GMT
Not After : Mar 2 17:01:36 2026 GMT
Subject: CN=b2ff21158c734fe2ff9e5f5b236a8c7211b08f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:83:02:d4:53:10:23:fb:f0:54:73:71:09:24:
32:7f:da:5f:38:90:24:a1:64:89:19:b6:4b:df:70:
a4:1e:ff:de:d1:14:79:8e:57:b1:fa:67:b3:95:0a:
03:0f:a1:06:ea:72:2e:cf:16:11:cd:6f:3a:71:be:
5a:b6:f5:b9:64:a1:6e:84:24:9a:16:12:06:91:43:
aa:a6:59:70:27:eb:da:aa:f8:d3:fa:05:af:53:2d:
34:f6:c8:13:07:31:09:ba:b5:d9:25:a4:2d:32:8c:
ce:70:b4:29:98:42:13:8f:71:cf:da:92:b6:aa:14:
e6:c0:8f:48:01:a0:68:ff:df:47:d1:7c:5c:b6:7e:
e7:88:0d:a5:b6:21:6b:0e:f4:fc:34:8e:3a:1b:5e:
1f:e2:71:74:8d:39:a9:6d:bb:1e:5c:71:1f:59:78:
c6:e2:83:b9:dd:fb:2a:58:90:68:81:ae:ce:95:7b:
1a:a8:8e:da:06:d3:bc:1e:23:60:96:e3:ef:91:71:
60:be:be:b9:c7:72:bf:8f:7c:b1:78:8f:53:fc:a6:
fc:cd:e4:a4:ae:50:3d:8d:17:e8:97:3e:40:8f:5d:
28:00:80:0b:7c:01:19:08:d8:84:c7:bb:fa:bc:79:
19:9b:9e:70:2e:79:f7:a0:ef:24:d6:06:71:e8:7a:
62:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FF:21:15:8C:73:4F:E2:FF:9E:5F:5B:23:6A:8C:72:11:B0:8F:3D
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8f:81:34:e5:8c:24:a9:97:07:8f:82:0d:ad:86:71:40:6f:
dd:20:72:9a:a7:81:18:56:d4:73:be:3f:35:00:78:a5:78:c8:
e2:f5:19:cb:3a:f4:d2:61:ec:dd:5f:05:87:ae:78:0a:09:d7:
97:37:5a:ec:cf:0e:37:01:9b:9a:bf:ee:7a:da:e4:01:6e:e7:
cc:00:46:75:be:04:5a:23:3e:f2:bf:96:b7:9c:94:ef:89:67:
f1:a1:bb:23:8d:4a:9c:f6:29:3b:e6:34:1b:49:39:dc:5a:87:
06:27:dc:f4:7d:fb:96:d9:a5:bd:ba:e6:90:d6:79:ed:9a:7f:
d1:a9:aa:54:94:d0:64:44:9f:f8:f5:bf:c9:58:7e:6c:20:c3:
d0:28:11:53:04:d4:f4:06:64:0e:db:59:a9:85:e9:c2:f7:e9:
12:99:d6:c9:bb:97:1d:1c:ad:a7:eb:18:2c:05:a5:aa:d1:02:
78:92:ad:65:f1:ab:ad:26:6a:aa:38:ff:73:24:d3:ea:a2:76:
4d:03:10:3a:e7:8e:ad:32:55:47:a0:03:9d:fe:fe:4f:93:9d:
7a:2f:33:39:f3:56:58:d8:e7:43:c3:80:e8:c2:1c:45:46:28:
ae:50:f3:57:26:39:05:75:9c:b5:ff:0c:bc:53:2d:85:8b:ea:
6d:10:83:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:36 2026 by rpki-client