
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json)
Hash identifier: t59gZRChT+Vsxt1FrY0pzxV46D0Tlu3iSzVycJWrOLA=
Subject key identifier: A9:CF:62:FA:3A:B9:96:4A:94:41:51:30:BC:AD:80:B1:4A:3E:55:24
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 019FAA1A2F3556A813ED5AAF8153FD36AF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 19:01:10 +0000
Manifest this update: Tue 28 Jul 2026 19:01:10 +0000
Manifest next update: Wed 29 Jul 2026 19:01:10 +0000
Files and hashes: 1: 2uP2P6fTf1qo4PWRRqgeE7TTacE.roa (hash: 9eSLYCb2FWzNsHTSZC1SEnCMNPegGVcyv6j21qK1mw8=)
2: 5rakYdNxKMjh5JNPex8iKzp_gtA.roa (hash: 6LspddKmtQtuac9ZuOl1VnhHP0Iq5oFWoFzvEG8ERXE=)
3: 814WTzXBXOIciV517t_FSJpheFU.roa (hash: 3rVBxA84Q0GQ5WcUB0js4QFJ7jGwBh1Rh823C6IzdeE=)
4: AogunF2vY6jwFQqloSaO1hbzpk8.roa (hash: it2LBzN2gPXG+ZsVF9U3YkMRcRGbDQsz+oO4JZZUzeg=)
5: PQhkPKvFMO7XAZJCK0yg6JOYn-Q.roa (hash: GclksRKdEgrXLLR1LhQTLSvorV7LCPoO0w2Ir6KfZ4M=)
6: Qi3PbQnrdw7q8NtmLcDOyzuEuok.roa (hash: Ene2M6hdbbKNY0YIKXvUxR9PygRHkyqGW28j+nRBH9E=)
7: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: 2gMDFDEfvEGp7wLuiN65ZEiWPIQaeSHeaQsomrgH0qc=)
8: UKQMI_1tAdL7QkXpECyLkKgiFXw.roa (hash: xCvizHfY/xMnYQ9a7uuh91R0ms1D7ktEV/mIEaRjfJ8=)
9: iB6K871-MTgrHCKR-pl3wKEY8VE.roa (hash: evrLdA7V1aTPB0+S9RwUtMXPCQscLGRKXxGpKmpY5Z4=)
10: of6LgZjZn377OWe4qW9VxsrXlzU.roa (hash: mzM/Cns9/j03lTiA+9ZfDQNcGWtBmHN0WQWYMBfi0eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:2f:35:56:a8:13:ed:5a:af:81:53:fd:36:af:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Jul 28 19:01:10 2026 GMT
Not After : Jul 29 19:01:10 2026 GMT
Subject: CN=a9cf62fa3ab9964a94415130bcad80b14a3e5524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:93:7f:2b:02:42:2c:f2:07:23:3b:98:02:
ba:50:bc:a0:b7:d9:53:24:9a:18:e7:09:c7:19:65:
53:05:90:9f:2a:33:56:1a:20:26:0f:e9:ab:b5:4f:
bb:5b:7c:b1:c6:06:3f:fc:82:29:74:72:b0:30:39:
90:c5:9d:bf:a8:2d:11:c5:d6:8d:3e:2d:68:91:84:
6c:0c:13:31:cc:da:fc:00:67:b8:93:79:0b:37:3a:
d9:bf:89:13:aa:04:5e:7f:9c:c2:55:e6:fa:da:5a:
85:8b:28:e6:30:20:1b:92:f0:71:f1:53:2f:91:64:
7c:bd:d4:26:65:73:ec:37:fe:19:2f:10:05:69:27:
a8:84:ec:b4:a3:f1:3a:2b:33:1f:67:4f:a7:f7:3f:
75:18:ad:9c:1a:4a:60:c4:28:da:ba:24:42:9b:5d:
e8:be:78:fb:60:5f:23:ad:ff:00:72:2d:3e:8c:64:
bf:3a:38:4e:2c:bf:2c:8f:04:c7:12:bb:55:7d:58:
f2:8b:88:94:97:b3:5f:ed:35:5c:1f:96:c7:9c:3b:
3b:97:ee:f1:49:ad:34:4d:25:6a:a1:95:fa:4f:1c:
c3:2e:54:73:6c:30:24:6b:5f:a2:d9:0c:6d:4c:94:
5f:c2:0f:3f:59:1d:43:01:bd:e4:b8:34:6f:6f:13:
7b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CF:62:FA:3A:B9:96:4A:94:41:51:30:BC:AD:80:B1:4A:3E:55:24
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cc:5b:c0:be:45:b3:d5:fc:ea:80:68:72:0c:7b:b0:2a:9d:
36:f8:66:84:19:c0:3c:b3:a3:3c:6b:2f:7c:3f:45:b7:b2:cb:
53:25:72:e4:c7:d7:64:0b:ca:fa:4e:98:8f:b6:f5:5f:80:58:
cc:3b:85:94:d4:23:fd:ca:09:52:d3:5a:3f:32:b9:0a:e2:ae:
67:cd:27:cc:4f:5b:d0:dd:5f:d0:c4:56:ef:78:30:35:65:d8:
c4:78:3e:52:f6:cf:4a:99:68:20:35:cc:10:97:77:e0:c7:36:
77:33:0f:f1:68:92:76:66:39:d3:cd:6f:d9:8d:58:07:e6:81:
b8:10:8f:42:1a:93:83:aa:c9:2e:b2:48:5e:be:a0:8a:26:78:
f1:5d:4d:ef:da:21:db:cd:a9:41:98:40:c0:48:dd:16:6e:a3:
9d:04:ce:56:65:c1:c6:22:72:bd:bb:53:5a:c9:90:7d:5e:c8:
45:2a:0f:33:3f:00:42:f8:f3:85:11:9c:6a:07:04:5b:ed:7b:
02:57:0f:6d:cd:f9:4d:dd:ea:58:20:43:44:6c:6e:b3:9f:e7:
a6:dd:99:15:2d:8e:09:a6:fc:15:89:1a:06:71:2a:69:6d:24:
5e:d2:47:d5:dc:8a:c3:58:86:0c:43:92:2d:7e:20:ca:c5:37:
82:a7:8f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:08:51 2026 by rpki-client