Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: Hwjo/SO4x7zbWQwnW+vTeZgpsmXQg4IeRN7pMzQMsKA=
Subject key identifier: 19:F7:33:F4:D2:9E:DE:B7:8C:37:C6:E5:08:5E:40:52:05:1E:33:FD
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 019CAAC6CAF4EB9EB99AFBB62DE2F1BCA332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 07DC
Signing time: Sun 01 Mar 2026 19:01:20 +0000
Manifest this update: Sun 01 Mar 2026 19:01:20 +0000
Manifest next update: Mon 02 Mar 2026 19:01:20 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: 430ByVv7eIGw42xOYRc7czzk1b8P6Nspt+LMfrTdsvk=)
2: UQfa-j4WEyyr4Tqn408a6pJMbHc.roa (hash: EJyCOkuGunERLH3RxVLohocub+Eh42R4y/uoWugcYsM=)
3: a1xgjXAhseZu7nFnf5HzZCndeXI.roa (hash: 3IPBZUSGpWqKuOh5YxmXZBNnrJCY4hG1fNK2MQxNxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ca:f4:eb:9e:b9:9a:fb:b6:2d:e2:f1:bc:a3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Mar 1 19:01:20 2026 GMT
Not After : Mar 2 19:01:20 2026 GMT
Subject: CN=19f733f4d29edeb78c37c6e5085e4052051e33fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b8:10:c7:d4:07:94:29:43:20:48:15:ff:15:
92:d9:f6:c5:28:65:72:ce:1d:e2:06:60:3a:50:f2:
9d:b6:e8:26:33:fc:32:df:36:56:8f:62:79:a8:35:
7d:c5:cd:13:b4:07:76:4f:a5:b2:45:9a:a0:ad:ad:
8e:47:82:e5:c0:51:d3:78:4d:1a:74:c1:bd:f6:35:
4d:43:fb:30:43:7a:d8:4c:c1:ed:bc:e1:26:ab:82:
dc:a5:10:79:3f:ba:26:c1:a4:e9:05:5c:25:54:f1:
30:3a:94:16:24:12:66:72:83:71:cf:82:93:9c:dc:
a7:1d:04:63:bb:c2:6f:88:df:ae:f8:81:3d:b1:84:
39:fe:38:a7:84:85:95:58:3e:62:17:5c:20:7d:95:
7e:95:95:ff:1d:7e:ed:6f:8c:4d:5c:3b:0e:05:b7:
c2:4e:55:3a:9b:b4:18:f6:a4:ba:b4:37:de:18:e8:
0b:82:f5:68:db:98:b9:2d:3b:5b:06:bc:c3:7b:6f:
91:2e:7f:f5:4d:e3:9b:fe:0a:90:8e:b3:db:cc:8e:
b6:4b:f5:d7:9a:e9:74:bf:f5:20:8b:20:9c:02:d0:
a3:b7:17:d9:c4:c3:5c:76:fd:27:89:4e:94:e9:61:
c4:fd:7e:8d:97:6e:1a:4f:43:64:07:51:d4:b4:6f:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:33:F4:D2:9E:DE:B7:8C:37:C6:E5:08:5E:40:52:05:1E:33:FD
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c0:1b:a8:e5:81:d7:a6:6b:4b:da:9a:c6:41:6f:2b:27:3e:
fd:c4:dd:ee:10:10:b7:14:f7:a6:65:d3:64:15:85:10:7e:96:
54:07:f0:91:20:97:f9:27:82:10:07:39:2e:12:3e:7e:2a:17:
18:d6:30:0d:d4:81:a7:a2:bb:d9:ad:0c:08:4f:a3:39:11:4e:
4f:e4:0c:e8:d3:22:d6:ad:61:9b:22:83:e0:23:f3:62:ea:3c:
5a:13:e9:85:2a:58:00:58:1d:ac:9a:a3:11:f9:6d:50:33:09:
8c:99:37:6c:e9:de:47:a4:18:27:82:39:69:83:65:72:e7:b8:
fa:c1:24:fa:24:76:92:72:74:d6:ba:d1:65:1e:c5:e8:ee:93:
be:bf:a2:71:d7:1c:49:59:f2:4b:30:a3:d2:82:a3:da:37:67:
04:18:65:85:15:7d:57:ae:31:be:20:21:60:e2:d2:fc:46:13:
91:ec:0d:60:98:c0:3a:ba:fe:77:1d:ae:06:51:28:11:fb:9c:
54:2c:c2:5a:b6:fc:20:d2:e9:dd:00:32:29:bd:0b:af:c8:50:
aa:1e:0f:4d:1c:a6:d6:0a:a3:3b:b4:26:5e:62:8f:60:9f:aa:
1d:8a:68:9a:8a:31:39:86:87:c8:98:79:42:c6:62:47:fd:df:
a6:78:d8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:01 2026 by rpki-client