Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: xi/XuiRGTWHhjMFlHbaNWQOYCStMDg+J+uj8+szNq3c=
Subject key identifier: 11:B9:B0:29:6F:01:06:55:90:CC:32:C6:9F:42:C2:FC:70:A0:50:A3
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 019FA975CE860001CDC0B618A04E7A61646F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 0969
Signing time: Tue 28 Jul 2026 16:01:37 +0000
Manifest this update: Tue 28 Jul 2026 16:01:37 +0000
Manifest next update: Wed 29 Jul 2026 16:01:37 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: OFkEEdw2MbeFvOVhVFJixgQzuHvlypFjCQDrRad8n3w=)
2: UQfa-j4WEyyr4Tqn408a6pJMbHc.roa (hash: EJyCOkuGunERLH3RxVLohocub+Eh42R4y/uoWugcYsM=)
3: a1xgjXAhseZu7nFnf5HzZCndeXI.roa (hash: 3IPBZUSGpWqKuOh5YxmXZBNnrJCY4hG1fNK2MQxNxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:ce:86:00:01:cd:c0:b6:18:a0:4e:7a:61:64:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Jul 28 16:01:37 2026 GMT
Not After : Jul 29 16:01:37 2026 GMT
Subject: CN=11b9b0296f01065590cc32c69f42c2fc70a050a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:48:2a:52:60:17:1b:28:6d:d9:d0:72:c3:a6:
d6:82:58:87:63:6d:b9:b0:ce:81:33:cc:5e:82:b3:
e1:5b:88:e2:8a:1a:17:0a:de:dd:3c:96:a7:7c:d9:
30:d9:b3:b9:c5:16:c2:bc:2b:b2:bf:a8:79:a2:99:
fa:b4:c3:c9:98:7e:5f:68:5e:92:32:5a:6c:aa:2d:
94:69:6f:32:02:1c:be:df:91:2f:5e:17:82:d4:9a:
39:70:e5:43:c2:e1:fa:32:ef:ff:3d:a9:f3:86:fe:
e4:61:87:e2:5b:50:d1:b9:dd:d0:60:88:72:8f:12:
86:72:71:ea:a7:cd:2e:05:e9:96:b1:10:55:65:b1:
ad:87:3d:95:f9:65:b9:5b:64:54:44:9e:d8:dd:a8:
32:86:f0:f4:9e:36:b9:d8:7b:3d:c5:c3:91:76:47:
fd:ce:74:06:7c:f3:59:ad:54:3b:5f:60:a5:9e:eb:
ab:44:48:4e:56:97:37:2a:ef:d8:e5:18:e1:07:90:
4b:1a:70:07:80:c0:98:81:5e:82:8a:65:3a:b6:3d:
15:72:a5:7e:fa:95:d4:83:67:04:74:be:44:11:8f:
1c:b7:47:b0:5c:f7:9a:28:33:a0:7a:ac:0c:e0:15:
47:a0:83:c9:81:de:fa:cf:6b:aa:f6:bf:e9:c1:ec:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B9:B0:29:6F:01:06:55:90:CC:32:C6:9F:42:C2:FC:70:A0:50:A3
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7d:57:62:3c:c2:38:c1:f2:1e:1e:94:23:c3:e8:8b:19:16:
d2:17:e4:16:dc:f0:f8:ed:9e:c7:df:49:92:a4:67:33:de:f6:
bc:1b:e7:88:90:24:f5:47:dd:25:0b:95:74:5d:c3:7d:79:48:
18:98:dc:67:2c:ae:df:99:93:6a:d8:0e:6f:b6:2f:1b:55:01:
00:65:12:c7:60:4c:cd:6d:34:e1:87:9c:79:55:da:21:25:d3:
62:53:5f:66:bd:dc:78:da:ab:6f:20:ba:69:fa:f0:d1:10:27:
5f:4b:11:b1:30:60:84:7b:d7:99:72:ad:a8:2b:a6:c8:43:8e:
39:0f:cf:6e:26:74:6d:ce:cd:a7:aa:26:41:51:9a:85:8a:8f:
3d:ed:ab:46:ac:96:d5:09:da:74:25:c8:6a:04:0f:0c:0a:4c:
0f:53:db:d2:01:c3:b6:49:ef:22:c2:ec:89:40:4c:2b:fd:bc:
af:4b:5e:cf:47:0a:64:05:ab:4b:48:6f:b1:fc:40:3c:a5:bb:
24:0a:26:c7:e7:ce:d9:2b:3b:c7:9e:62:85:e5:f4:0d:49:61:
c0:5c:c5:7a:17:3d:9d:4e:8a:ac:b8:45:68:f1:80:f6:fc:de:
0f:5d:39:d8:aa:55:4a:de:fb:81:a2:4e:dd:9a:f4:62:86:78:
50:a8:23:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdc6GAAHNwLYYoE56YWRvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzcxMDMwZmUwODFlMDJiYWI0ODIzZDA1NjhmZmIyYTMz
MjY1ZTEwHhcNMjYwNzI4MTYwMTM3WhcNMjYwNzI5MTYwMTM3WjAzMTEwLwYDVQQD
EygxMWI5YjAyOTZmMDEwNjU1OTBjYzMyYzY5ZjQyYzJmYzcwYTA1MGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EgqUmAXGyht2dByw6bWgliHY225
sM6BM8xegrPhW4jiihoXCt7dPJanfNkw2bO5xRbCvCuyv6h5opn6tMPJmH5faF6S
Mlpsqi2UaW8yAhy+35EvXheC1Jo5cOVDwuH6Mu//Panzhv7kYYfiW1DRud3QYIhy
jxKGcnHqp80uBemWsRBVZbGthz2V+WW5W2RURJ7Y3agyhvD0nja52Hs9xcORdkf9
znQGfPNZrVQ7X2ClnuurREhOVpc3Ku/Y5RjhB5BLGnAHgMCYgV6CimU6tj0VcqV+
+pXUg2cEdL5EEY8ct0ewXPeaKDOgeqwM4BVHoIPJgd76z2uq9r/pwez55QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBG5sClvAQZVkMwyxp9CwvxwoFCjMB8GA1UdIwQY
MBaAFNrHEDD+CB4CurSCPQVo/7KjMmXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNWU2ZDgtNGU3Mi00YWMyLWI2ZTUt
YzgyMDFiOTFhZWMzLzEvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yNWU2ZDgtNGU3Mi00YWMyLWI2ZTUtYzgyMDFiOTFhZWMz
LzEvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZn1XYjzC
OMHyHh6UI8PoixkW0hfkFtzw+O2ex99JkqRnM972vBvniJAk9UfdJQuVdF3DfXlI
GJjcZyyu35mTatgOb7YvG1UBAGUSx2BMzW004YeceVXaISXTYlNfZr3ceNqrbyC6
afrw0RAnX0sRsTBghHvXmXKtqCumyEOOOQ/PbiZ0bc7Np6omQVGahYqPPe2rRqyW
1QnadCXIagQPDApMD1Pb0gHDtknvIsLsiUBMK/28r0tez0cKZAWrS0hvsfxAPKW7
JAomx+fO2Ss7x55iheX0DUlhwFzFehc9nU6KrLhFaPGA9vzeD1052KpVSt77gaJO
3Zr0YoZ4UKgjrQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:27 2026 by rpki-client