Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: aBa0Zw+9pOLJjPYY+chefANrFruLtCKMZRPafXuF4K4=
Subject key identifier: FD:6D:5B:45:EA:34:B8:B2:13:18:81:E4:4A:F6:25:BD:B9:D2:07:29
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 019D9850819C0365652D0961F2DE7436B912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 0857
Signing time: Thu 16 Apr 2026 22:01:46 +0000
Manifest this update: Thu 16 Apr 2026 22:01:46 +0000
Manifest next update: Fri 17 Apr 2026 22:01:46 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: +jC1xH47xaDe9LaFjOUz05n8zCymTB5V5DGWRgcd5QQ=)
2: UQfa-j4WEyyr4Tqn408a6pJMbHc.roa (hash: EJyCOkuGunERLH3RxVLohocub+Eh42R4y/uoWugcYsM=)
3: a1xgjXAhseZu7nFnf5HzZCndeXI.roa (hash: 3IPBZUSGpWqKuOh5YxmXZBNnrJCY4hG1fNK2MQxNxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:81:9c:03:65:65:2d:09:61:f2:de:74:36:b9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Apr 16 22:01:46 2026 GMT
Not After : Apr 17 22:01:46 2026 GMT
Subject: CN=fd6d5b45ea34b8b2131881e44af625bdb9d20729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:dc:6f:4f:7e:eb:9e:75:3a:a7:f4:24:d4:
aa:3c:98:9a:42:e5:60:d5:0e:e9:c3:85:01:36:41:
24:80:0d:d3:c2:95:d2:6a:08:00:1d:bd:30:53:e1:
ad:22:55:cc:91:3e:5e:24:23:af:be:aa:f4:24:d3:
34:97:92:e7:e6:b4:45:30:06:01:7c:b9:7e:53:44:
5e:43:3c:0c:95:18:7f:b8:6f:6e:37:56:ae:ec:6a:
be:ef:5d:0c:cf:b6:bb:60:dc:12:db:df:4f:8f:a5:
e6:7b:ea:30:61:c3:b7:23:c2:58:52:ee:6b:2f:04:
94:2f:85:09:28:71:6d:31:d3:d1:ab:60:97:87:42:
40:41:46:3f:7a:1e:cc:6a:5b:fc:64:10:7d:43:7c:
27:83:35:7c:ad:8d:cd:54:37:49:18:cd:95:37:c3:
04:ea:b7:ef:f5:01:80:35:ca:ba:78:a3:92:63:a0:
87:94:54:c2:f7:df:b7:08:18:62:78:8d:07:e5:f1:
86:5b:cd:d7:58:e0:2c:1f:69:7b:30:73:84:7f:63:
e6:85:3b:0c:0b:f4:8d:2f:c6:fc:de:da:2a:ff:51:
24:f8:df:d4:c5:3a:10:0e:5f:e4:5e:a7:84:6d:11:
7e:b6:5d:cf:16:01:a0:e4:af:8e:05:2b:b6:11:bc:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6D:5B:45:EA:34:B8:B2:13:18:81:E4:4A:F6:25:BD:B9:D2:07:29
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2b:4b:d7:cb:37:72:82:b3:01:7a:c3:a6:ae:81:7a:09:70:
ae:b5:39:f3:b8:da:ff:fb:1b:bf:a5:ad:49:7c:74:cf:f8:57:
bc:50:51:6a:d9:3a:8d:91:91:f8:1e:dd:b8:71:ac:ca:e6:97:
74:68:f0:f7:4c:eb:df:aa:e6:44:89:d8:52:c7:db:46:f8:f6:
7c:e4:e8:b5:f6:7e:31:72:c8:66:5a:32:b7:f9:32:32:10:a5:
02:36:7a:36:5c:82:1b:ae:28:d4:38:25:3f:75:de:1a:71:b1:
48:f5:43:38:22:5b:ed:1d:eb:79:29:52:0e:62:6e:52:2a:b0:
58:e1:e5:45:82:4c:a1:57:9c:df:18:10:48:5b:a6:33:17:06:
76:93:39:e9:b3:63:0b:1f:a9:6c:cc:bb:ea:07:f5:5d:59:1a:
a2:eb:93:cd:9e:d4:59:65:96:e4:93:82:7c:07:61:3a:ed:f2:
f5:6a:6b:17:77:00:bf:5e:cb:58:48:a8:87:8c:90:e1:99:28:
01:86:d1:7b:71:49:63:18:f2:4d:ef:04:28:18:ea:66:1c:f9:
99:ad:36:ed:97:b5:2f:62:03:ff:91:90:6e:27:26:0a:29:71:
36:72:a8:39:54:6f:12:c6:d1:f9:f9:39:a8:13:1f:ac:b3:f5:
47:95:7e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:13 2026 by rpki-client