Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
File: sCqa8vxf6TxDFIqssTxRvpBMjkw.mft (raw, json)
Hash identifier: gjoC8tvMD35XsByoib0iOyVfye3Co1SQ9fgTX16YarE=
Subject key identifier: 3C:C8:DE:79:CD:E2:CC:37:C5:D6:82:28:EB:E6:EE:4C:95:4F:DC:EC
Authority key identifier: B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
Certificate issuer: /CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Certificate serial: 01A0D45D214922D196B65E5CABA145B4FEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
Manifest number: 08A8
Signing time: Thu 24 Sep 2026 17:01:08 +0000
Manifest this update: Thu 24 Sep 2026 17:01:08 +0000
Manifest next update: Fri 25 Sep 2026 17:01:08 +0000
Files and hashes: 1: sCqa8vxf6TxDFIqssTxRvpBMjkw.crl (hash: NkWOf+7i4LxUIpeeE5qqARbAeLvf+I3X2JnZ4IVf754=)
2: y0urSuZI8k80qDTQJ3kG5eohDE0.roa (hash: Y9liF5XubPckrTgkSr37iUFqjTSMFsZSlRvzu6Hk6eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:21:49:22:d1:96:b6:5e:5c:ab:a1:45:b4:fe:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Validity
Not Before: Sep 24 17:01:08 2026 GMT
Not After : Sep 25 17:01:08 2026 GMT
Subject: CN=3cc8de79cde2cc37c5d68228ebe6ee4c954fdcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5e:83:07:09:44:bf:e2:48:29:96:bc:c7:46:
6f:0d:63:59:8b:2e:c2:36:7b:60:36:a5:55:89:45:
ac:96:00:67:92:23:99:94:47:70:7d:5b:73:0c:84:
f9:72:93:9b:53:d0:95:89:37:ea:4d:b2:0e:ae:ef:
3e:3c:13:f2:b5:17:dd:21:79:6e:e5:f5:96:11:18:
db:8c:27:af:dd:87:89:9e:d7:8c:d9:be:14:37:ec:
c3:68:4c:59:66:cd:f3:4f:19:1b:60:c5:f3:5f:04:
95:8e:93:b6:9a:74:e2:04:5d:18:9b:d4:3d:f5:15:
2c:47:53:c9:cb:d7:49:46:da:b6:f5:72:a6:2b:e1:
cc:02:9c:d2:a1:24:99:c6:1c:fc:6b:b6:22:11:34:
a3:bc:8a:2d:3d:5a:ce:c2:00:92:ef:ea:59:3b:0a:
d6:00:93:2c:ca:a3:f0:97:bc:dd:61:62:da:1a:ce:
50:de:e1:c0:b0:36:9f:96:d8:b4:bf:fc:46:61:d3:
db:ac:f7:7a:d9:8f:c9:44:cc:92:ef:ca:a9:9b:34:
3c:33:62:f0:7d:c4:c6:06:5e:5d:ea:74:f7:f4:13:
c1:6b:1a:a9:bc:cf:e4:37:1f:c2:92:2e:0e:2c:c3:
d9:7a:36:1d:27:d3:0c:d0:a2:e9:3f:cc:61:ef:9f:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C8:DE:79:CD:E2:CC:37:C5:D6:82:28:EB:E6:EE:4C:95:4F:DC:EC
X509v3 Authority Key Identifier:
keyid:B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f7:ac:9c:39:2f:e0:c2:53:fa:11:fd:85:9f:84:2f:5b:32:
78:90:25:e0:d4:ea:24:a8:70:7c:9f:a1:69:d0:ba:40:a7:5c:
a3:48:42:fc:02:cc:35:d1:96:6a:19:d7:04:2c:90:cf:ab:dc:
9d:95:57:52:95:5a:a2:8d:ff:0f:6f:17:e2:cc:df:95:2a:de:
78:00:4b:ad:a4:7c:64:d1:98:1e:b7:e2:97:88:e9:f2:4e:ce:
4c:d3:20:d6:77:59:a0:34:79:69:a7:f8:4c:29:60:b5:c8:2f:
82:be:c1:61:31:26:0f:44:45:f5:2a:4e:2f:cc:2d:51:33:26:
b4:33:f9:9f:7f:82:7d:9f:4c:28:2d:16:91:b7:64:55:ca:78:
74:cb:e5:28:47:86:a3:b7:88:34:b3:c5:9f:e7:a5:68:a8:c2:
de:29:20:ac:87:53:80:e4:d7:39:16:1d:09:7f:01:45:5d:ef:
d7:fa:d4:13:dd:36:f1:b2:76:87:3b:1b:7b:f3:d8:e5:f5:e0:
1d:e4:cc:92:df:ba:01:e4:f3:c7:9a:0c:e0:12:c4:17:8a:66:
3b:34:c1:1f:e6:7e:3e:68:8b:4e:a3:77:d1:e9:14:48:82:41:
5e:62:f6:98:95:54:94:85:f7:8e:a8:37:14:26:59:af:be:a3:
c2:d4:81:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:16:14 2026 by rpki-client