Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: hxqe3OaotArhuIRY9RnbokqM3pLo6L34UcF7axA9ELU=
Subject key identifier: D3:24:50:8C:37:C8:7E:1F:02:5B:87:5A:85:A0:3B:4D:10:AD:FC:94
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 01A1C4424C51F3866C1D1C21B4DE3856DA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 0A80
Signing time: Tue 10 Nov 2026 07:00:41 +0000
Manifest this update: Tue 10 Nov 2026 07:00:41 +0000
Manifest next update: Wed 11 Nov 2026 07:00:41 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: OE9UNgsN722s1cc+3uoSsP3PfiVB9Jb0NpxfHdYT25M=)
2: UQfa-j4WEyyr4Tqn408a6pJMbHc.roa (hash: EJyCOkuGunERLH3RxVLohocub+Eh42R4y/uoWugcYsM=)
3: a1xgjXAhseZu7nFnf5HzZCndeXI.roa (hash: 3IPBZUSGpWqKuOh5YxmXZBNnrJCY4hG1fNK2MQxNxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:42:4c:51:f3:86:6c:1d:1c:21:b4:de:38:56:da:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Nov 10 07:00:41 2026 GMT
Not After : Nov 11 07:00:41 2026 GMT
Subject: CN=d324508c37c87e1f025b875a85a03b4d10adfc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:90:07:4c:1d:db:f2:4f:cd:0f:7b:3a:18:
13:29:63:98:af:8f:9d:f7:ce:0b:af:ca:06:63:da:
5e:eb:64:d6:57:17:a6:e8:ac:db:dd:da:62:8d:85:
47:e3:fd:c7:f1:c2:5c:f2:49:9d:07:79:88:3a:ee:
4e:ee:cc:5a:5d:d7:b3:82:43:25:67:11:a7:9b:bc:
dd:b5:28:ec:84:fe:04:28:aa:47:a5:41:15:25:79:
4c:7a:a7:40:e7:93:01:c9:ec:da:cd:03:b9:01:90:
8e:a1:d7:52:1b:e8:a0:df:55:90:69:e7:e8:7a:7e:
d4:10:b8:43:b6:5f:ed:5a:b3:2a:9a:fd:8e:4d:2b:
b3:74:28:47:af:db:37:10:e2:bd:cc:92:62:5d:b3:
4a:06:52:57:42:5c:5a:c3:94:63:75:ad:7f:31:42:
22:a2:bb:84:fb:14:d3:f2:fa:92:76:7d:63:4b:f8:
8d:6b:84:18:19:9b:32:28:a1:80:39:5e:b5:2e:ef:
24:06:46:57:2f:6b:7b:22:9e:2b:c5:1c:91:4a:3f:
a2:96:12:de:16:0c:01:fb:c4:45:2d:9d:fa:a3:39:
3d:fd:17:c2:db:ff:89:da:af:67:cb:a8:87:3e:ac:
9c:7f:8a:ca:88:e3:21:f2:88:ed:1c:8d:d6:15:5d:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:24:50:8C:37:C8:7E:1F:02:5B:87:5A:85:A0:3B:4D:10:AD:FC:94
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2c:ec:aa:fa:a2:f7:30:b2:fa:f1:49:52:0e:97:0b:07:ba:
24:fa:45:59:ab:e9:83:59:05:8b:5b:50:64:b7:78:fa:98:0a:
d3:58:91:8b:7c:92:df:f1:c1:07:ba:76:a1:95:ec:4a:f5:9c:
a0:84:64:b1:ae:d4:2e:fe:61:ae:a5:c4:8d:3c:8a:c5:d1:7a:
ca:5b:40:64:fb:0b:e1:63:4d:0f:06:37:10:bd:6a:90:54:de:
8f:b2:5d:53:50:63:eb:94:32:ef:1a:ce:d2:00:01:bf:f0:72:
f3:1a:b9:25:50:4a:e2:76:f7:a0:12:80:b5:96:b4:8b:71:ce:
f9:18:93:e2:ea:fc:43:2d:df:2b:7e:9b:c7:5c:36:51:00:e4:
cd:59:77:96:a1:40:80:8c:01:99:06:6c:f5:5a:ed:63:b9:55:
cc:ae:2c:5f:b8:dd:90:ce:77:6f:e5:7a:ee:08:bd:24:a7:6b:
11:08:48:95:eb:dc:f4:97:66:b1:07:0c:0d:b1:f8:1e:81:85:
64:d4:47:49:2f:df:56:f7:e3:d4:46:27:eb:22:ba:98:0d:db:
bb:9f:20:3a:0f:a9:40:a5:a0:6b:66:5f:c8:04:ce:b4:d3:c8:
0a:aa:4b:00:5e:2e:cd:64:47:29:ef:be:ff:85:c9:c0:dc:de:
cd:5e:0d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 12:04:10 2026 by rpki-client