Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
File: sCJf0DWnzmSnyIveca61YPNIOXQ.mft (raw, json)
Hash identifier: 5Fe4VKdRJ7QazIPyQ7QIo5srB5w0aiaqKDd3McE+QYk=
Subject key identifier: 39:58:78:95:16:07:C0:77:1F:F0:1F:30:63:5F:F0:86:9A:AC:39:A5
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 019FA93DA9E415669BD712C880495E5EB836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
Manifest number: 02F7
Signing time: Tue 28 Jul 2026 15:00:17 +0000
Manifest this update: Tue 28 Jul 2026 15:00:17 +0000
Manifest next update: Wed 29 Jul 2026 15:00:17 +0000
Files and hashes: 1: 75dJ9l9pm2mLQKlmsqkMPbP5nLU.roa (hash: y9JQO9ERriwN1YTQ2JmQZB4kivefmPeXhn7RTehloi0=)
2: AEeBq3XFkbn8pyHJEeb3isWEmIA.roa (hash: gkDvS6y+2rhPnDPFUFxFEdfe5IUZN7R+qqVkzML65dE=)
3: EJPyee4QWkKrpHzgKl_UfRlSQ4k.roa (hash: UftVkTCY6ZFe1hDTUIcqILq/ecU3GKzDfqSPxTid57Y=)
4: IIIXZtSualOwJL3v5moeDxfjfvI.roa (hash: 7rMLEXqsuij2IE2v0cNkJojz7+yY0hLnMUTfWDw4n9Q=)
5: S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa (hash: w5hcZAmF4buAGhakgXjQA0sa4vpLG5fCK2GR/ajM+u0=)
6: dNXYaX82NX51pSFvpQpCqsG2lPo.roa (hash: 35cWo5gZ7UeSrOUHr9i+uJyPsLCbl8OtXgjF+qTOIsg=)
7: sCJf0DWnzmSnyIveca61YPNIOXQ.crl (hash: dVvCTTqM+G4eHnfepNNuSNFSQnRKzHQBHdBgo8Qplqg=)
8: wJQhpUcYRE9YbrS1hrhEwceSpsw.roa (hash: pKy+CJ0dPgWvUI++SXNGLH/W/2Tj4mADcaq6t4MuXsE=)
9: wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa (hash: VxkO6fBbTYMBO4jXH/JD3dN5+ZLMhiKDYjCspmghV5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:a9:e4:15:66:9b:d7:12:c8:80:49:5e:5e:b8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: Jul 28 15:00:17 2026 GMT
Not After : Jul 29 15:00:17 2026 GMT
Subject: CN=395878951607c0771ff01f30635ff0869aac39a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:5f:51:78:bf:63:07:a1:13:5e:4d:f3:d7:
ff:fd:4d:8b:85:73:dc:b5:00:2b:bf:67:30:31:6f:
3f:ed:24:9d:f4:8f:17:10:5e:b4:93:82:87:1a:4d:
86:4c:aa:1b:7d:b2:e8:17:7a:ab:47:ef:e0:07:bd:
30:4a:f5:61:12:93:f8:f7:b0:a7:98:29:da:f3:94:
d6:ad:ad:c2:5e:af:6c:d5:ef:3b:05:2e:10:c8:66:
b9:1b:69:a1:93:d3:d3:48:dc:37:13:15:05:fe:f9:
8f:d0:db:37:d3:3e:c2:49:c1:c6:1e:8b:fa:09:0d:
cd:76:bb:4d:03:9e:14:d8:b2:4d:b3:67:95:33:e6:
96:55:50:23:b8:58:92:49:27:6d:ae:48:50:c6:38:
ac:d6:f5:2a:97:dc:8a:22:87:d7:e5:e3:3b:92:6a:
6d:93:a4:2f:95:59:44:1d:9f:aa:2b:9b:49:a6:28:
ae:2c:4b:eb:b7:d0:fc:c6:2e:37:2f:86:6f:21:13:
dc:a5:91:af:1e:68:ee:c2:fc:5c:e2:32:1f:aa:38:
a5:41:34:bc:04:ef:79:dc:15:0d:dd:01:f8:ba:d5:
e5:ac:9e:97:72:83:76:37:ce:64:9e:ba:e0:3b:ed:
86:73:c0:78:39:91:c9:d9:e0:1a:ca:c6:9c:dd:1c:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:58:78:95:16:07:C0:77:1F:F0:1F:30:63:5F:F0:86:9A:AC:39:A5
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:53:e0:1b:49:be:43:24:51:ad:d3:36:56:dc:ad:27:69:7f:
94:b4:ea:d2:3c:ac:ec:be:ea:7d:e2:ce:bd:b5:d4:33:49:3d:
e6:74:40:e9:90:1a:b1:52:67:ee:fd:54:bf:7f:53:e8:88:f6:
14:22:e6:1f:05:5f:6f:43:e0:41:78:0f:e7:d6:62:b3:4b:55:
cb:33:d3:7b:ea:f4:30:af:74:a1:cb:bc:b5:8b:e1:22:f0:80:
02:31:30:93:f9:2b:5b:2f:64:fd:96:a6:c7:8a:e9:c6:51:b5:
a6:32:67:fd:c3:13:44:57:ac:54:8e:3a:bb:bb:a7:74:5b:d5:
f8:21:70:34:a5:b4:06:83:83:7a:75:58:a2:df:be:c9:19:79:
d6:89:85:31:11:77:5b:c6:e9:4a:cc:17:b9:a2:31:8a:3d:6a:
e4:c9:cc:09:c4:2d:10:0b:3c:32:1b:2f:8e:f2:79:3d:47:1c:
9b:de:70:81:e3:7c:ef:ce:54:7f:27:aa:59:df:77:7d:3b:fa:
13:e2:3b:84:8f:29:fc:98:44:08:84:1a:ef:0b:c0:72:3f:dd:
96:7f:2f:50:f5:b3:1f:0c:ea:61:c0:eb:a9:e0:6f:c9:4e:f0:
95:3c:c7:f2:8b:0d:b7:b6:db:84:4c:10:73:09:ad:7a:61:36:
9c:1c:b1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:28 2026 by rpki-client