Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: Uaqk8LPhzvkEzMtpNHd3GI3en7ZnO3CuZ4H5GZD9QH4=
Subject key identifier: BF:13:96:92:AF:5A:6A:BE:BD:62:54:14:C9:1A:77:05:DF:F2:79:6E
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 01A0C368A02A9A980C74437436F847A1B089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 09FB
Signing time: Mon 21 Sep 2026 10:00:08 +0000
Manifest this update: Mon 21 Sep 2026 10:00:08 +0000
Manifest next update: Tue 22 Sep 2026 10:00:08 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: ZtrMVwwaeM1M3rmhHYciVZBoeYqdnGFg/zh4nCtDiFE=)
2: UQfa-j4WEyyr4Tqn408a6pJMbHc.roa (hash: EJyCOkuGunERLH3RxVLohocub+Eh42R4y/uoWugcYsM=)
3: a1xgjXAhseZu7nFnf5HzZCndeXI.roa (hash: 3IPBZUSGpWqKuOh5YxmXZBNnrJCY4hG1fNK2MQxNxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:a0:2a:9a:98:0c:74:43:74:36:f8:47:a1:b0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Sep 21 10:00:08 2026 GMT
Not After : Sep 22 10:00:08 2026 GMT
Subject: CN=bf139692af5a6abebd625414c91a7705dff2796e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:b5:89:26:0a:a6:10:da:6c:a9:f3:41:3b:
cc:20:cb:cc:54:af:2f:47:4d:12:aa:5a:f5:8c:be:
93:10:c0:56:8c:d3:64:5e:8c:e3:a8:0c:58:d9:b4:
fe:35:0e:21:68:51:23:cd:12:e4:d1:6c:61:65:01:
93:92:14:68:de:cc:02:50:99:3d:57:ef:73:e3:cf:
fc:c0:a1:6e:e3:a9:6a:ca:cc:2c:25:67:f2:c4:84:
1f:21:2e:8f:d6:89:ec:41:92:82:79:5e:fb:ed:d4:
af:af:92:7b:74:1b:f4:c4:55:5e:15:f6:3d:2e:dd:
7f:79:bb:ad:83:ae:31:47:86:bd:7a:31:61:68:b8:
d2:88:2b:4a:89:55:46:d2:29:92:9e:56:d4:65:2f:
5d:d4:6e:a9:64:36:35:21:50:8e:a5:ed:3f:62:11:
f2:11:99:1f:ec:1a:7e:f7:4d:08:20:ff:74:f7:d2:
8a:9d:db:91:0b:dd:18:13:b6:eb:14:a5:a5:fb:6d:
a2:52:83:0d:ad:70:6a:bf:52:7c:1d:92:6e:35:99:
48:dc:d9:c0:6e:ab:73:77:3f:67:4f:8e:4e:c9:eb:
ac:c7:7b:d4:79:52:87:03:c5:62:cc:10:ac:bf:bd:
a3:0a:45:43:8e:c4:db:1d:3d:43:bf:94:18:e3:77:
ca:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:13:96:92:AF:5A:6A:BE:BD:62:54:14:C9:1A:77:05:DF:F2:79:6E
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c6:e1:7b:76:5a:b2:79:0e:58:fe:09:b0:4a:38:03:a4:10:
56:53:ad:8d:a2:1a:c6:11:da:47:93:43:83:6f:b9:0e:9b:57:
80:19:b6:df:7f:a5:34:e6:82:5a:bf:ba:c2:36:fc:be:49:7c:
40:3e:ec:94:78:03:e8:17:f2:3c:c0:52:a8:ac:68:9e:b6:ba:
d1:06:2f:6b:2e:38:73:ca:86:c8:2e:b8:8f:f5:88:cb:48:b5:
b8:5a:f0:1d:1d:c0:c5:fd:42:5f:0a:67:63:cf:45:89:65:bc:
2b:f4:96:d6:c6:e3:7b:cb:25:3c:64:fd:fb:5c:e9:84:b5:6e:
8f:8e:86:3b:2a:ee:3e:60:e7:60:64:a6:8a:b5:c0:32:9a:44:
28:c3:de:58:87:f4:29:32:d7:04:7b:b8:2d:55:09:ff:ac:07:
f5:fe:55:7c:89:f6:b0:b9:85:31:4b:f8:2c:2a:83:b7:7f:fd:
ac:e7:90:5a:18:12:30:95:82:9e:85:cf:42:cc:70:72:2c:96:
86:d8:03:9b:48:e5:ba:f6:6f:57:69:8f:52:3e:55:51:c5:8a:
db:48:2f:26:51:a6:49:a9:18:cb:1e:e8:12:3c:34:0f:c9:f1:
cf:25:6b:09:84:47:49:ba:66:4e:e5:d4:98:5b:e9:d1:85:bd:
aa:80:44:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDaKAqmpgMdEN0NvhHobCJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzcxMDMwZmUwODFlMDJiYWI0ODIzZDA1NjhmZmIyYTMz
MjY1ZTEwHhcNMjYwOTIxMTAwMDA4WhcNMjYwOTIyMTAwMDA4WjAzMTEwLwYDVQQD
EyhiZjEzOTY5MmFmNWE2YWJlYmQ2MjU0MTRjOTFhNzcwNWRmZjI3OTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSW1iSYKphDabKnzQTvMIMvMVK8v
R00Sqlr1jL6TEMBWjNNkXozjqAxY2bT+NQ4haFEjzRLk0WxhZQGTkhRo3swCUJk9
V+9z48/8wKFu46lqyswsJWfyxIQfIS6P1onsQZKCeV777dSvr5J7dBv0xFVeFfY9
Lt1/ebutg64xR4a9ejFhaLjSiCtKiVVG0imSnlbUZS9d1G6pZDY1IVCOpe0/YhHy
EZkf7Bp+900IIP9099KKnduRC90YE7brFKWl+22iUoMNrXBqv1J8HZJuNZlI3NnA
bqtzdz9nT45Oyeusx3vUeVKHA8VizBCsv72jCkVDjsTbHT1Dv5QY43fKVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8TlpKvWmq+vWJUFMkadwXf8nluMB8GA1UdIwQY
MBaAFNrHEDD+CB4CurSCPQVo/7KjMmXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNWU2ZDgtNGU3Mi00YWMyLWI2ZTUt
YzgyMDFiOTFhZWMzLzEvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yNWU2ZDgtNGU3Mi00YWMyLWI2ZTUtYzgyMDFiOTFhZWMz
LzEvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMbhe3Za
snkOWP4JsEo4A6QQVlOtjaIaxhHaR5NDg2+5DptXgBm233+lNOaCWr+6wjb8vkl8
QD7slHgD6BfyPMBSqKxonra60QYvay44c8qGyC64j/WIy0i1uFrwHR3Axf1CXwpn
Y89FiWW8K/SW1sbje8slPGT9+1zphLVuj46GOyruPmDnYGSmirXAMppEKMPeWIf0
KTLXBHu4LVUJ/6wH9f5VfIn2sLmFMUv4LCqDt3/9rOeQWhgSMJWCnoXPQsxwciyW
htgDm0jluvZvV2mPUj5VUcWK20gvJlGmSakYyx7oEjw0D8nxzyVrCYRHSbpmTuXU
mFvp0YW9qoBE2g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:38 2026 by rpki-client