Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: NkLNgstLTABwziYpWkXUcRQYFaGuATKk34tKiSnkeQg=
Subject key identifier: 68:57:CE:A8:7A:14:68:AC:98:11:5A:B0:D1:29:69:53:54:35:35:56
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 01A0FF10575E69AA6DE4F982870C5C4CFAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 13EA
Signing time: Sat 03 Oct 2026 00:00:56 +0000
Manifest this update: Sat 03 Oct 2026 00:00:56 +0000
Manifest next update: Sun 04 Oct 2026 00:00:56 +0000
Files and hashes: 1: 1--uR84TmxMmj_tqc32k0ls6g_r4.roa (hash: IA0jf36x0dXydwjCq4BOEj93DRAJ8PodXiTOIuTYy3Q=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: Kcjgw0GtxbtepxtI+aviH1PJasSFp8aKyQiREE3b77U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:10:57:5e:69:aa:6d:e4:f9:82:87:0c:5c:4c:fa:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Oct 3 00:00:56 2026 GMT
Not After : Oct 4 00:00:56 2026 GMT
Subject: CN=6857cea87a1468ac98115ab0d129695354353556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:8a:7e:d2:d3:c7:7e:39:e9:f2:56:bb:6d:
8e:7f:59:d2:87:11:8b:fd:7a:96:93:61:e3:54:60:
9d:70:f3:84:a4:ea:dc:db:b4:1e:c8:43:6e:c2:93:
e0:55:26:3e:1f:9b:0f:18:0e:bb:4f:ad:f7:47:b7:
76:1c:30:be:c1:9f:5a:13:8c:47:79:d2:5f:1c:2e:
96:d6:df:c3:c4:e1:15:7b:4f:be:3e:36:b7:9d:f0:
3f:0c:8c:65:a7:db:14:04:f5:56:b1:c4:8a:24:99:
cc:b6:53:27:78:89:d9:0f:d9:ca:6f:12:b8:c0:d1:
46:88:e6:82:1d:92:ad:e8:17:3a:7d:f8:29:77:c2:
48:c6:3a:55:82:00:a4:0b:bf:a4:f6:53:f8:d0:c9:
7b:bf:f7:30:e9:ed:01:5b:cd:a0:e6:d5:e0:1b:0c:
a3:22:1e:73:65:b5:78:bd:70:4b:c9:3f:bc:16:ac:
92:dd:e3:06:01:05:b9:22:bb:7f:2c:e9:c1:c2:1e:
7f:9a:b0:cd:82:56:21:77:45:83:f3:cf:9f:11:2e:
bc:90:fa:ee:37:fc:e5:97:50:91:63:83:48:b9:e7:
f2:d2:66:1a:5e:76:ec:4f:88:54:8c:15:8d:dd:fd:
a2:2b:ca:47:a9:84:e8:d7:8c:02:41:dd:6d:82:80:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:57:CE:A8:7A:14:68:AC:98:11:5A:B0:D1:29:69:53:54:35:35:56
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cb:48:c7:01:b2:a5:7a:e9:7e:8b:7b:ee:9f:52:6e:c4:b6:
38:69:f0:23:98:e1:4b:ac:fc:8d:57:e2:3a:71:ec:c4:70:3c:
7b:21:b3:78:24:c9:c4:2b:4e:87:ce:79:a7:99:83:b2:71:1b:
ea:1f:24:77:e7:19:13:61:49:26:53:2c:ba:af:59:5a:f2:05:
10:a1:9d:ed:ad:0f:ec:d0:d3:af:a7:1e:9c:09:ba:85:92:55:
0d:1f:ca:5f:5f:79:9f:77:99:06:c9:15:c1:b9:ab:cc:3c:56:
90:38:da:83:c1:c9:55:75:8e:9b:cf:70:bc:fb:ad:37:4d:1e:
30:21:28:d1:88:7d:c9:14:be:3b:71:4c:6f:aa:ad:0c:b8:55:
35:e6:a5:1e:bd:4f:f4:69:d3:b6:bd:5a:1b:a2:fc:ce:bd:3e:
8a:98:38:f9:98:6e:0f:ad:1e:c1:ab:1f:ec:df:83:7b:fe:ea:
87:14:e7:6d:31:5d:fa:e4:f1:da:d8:57:d3:6a:11:7a:a5:fc:
4b:a1:e3:d1:04:e1:0c:c2:b2:c8:e1:3a:bb:5f:0d:19:47:b7:
6c:66:59:73:52:72:ea:99:db:19:a6:dc:4f:d7:fd:c5:ae:7c:
0c:6b:9c:58:05:e2:17:70:e6:a3:cf:f0:07:1c:6c:d3:a9:47:
e5:0e:be:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:06:25 2026 by rpki-client