Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: Rb5YPwDRzlw1m20BGaKeI5UhZxsb79gv09MMauevuvE=
Subject key identifier: BA:01:AE:39:7D:BE:22:0E:95:3C:22:DA:FC:82:71:27:5C:19:94:D5
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 019D2A050A633457D95A836BCE9B5788B9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 11EE
Signing time: Thu 26 Mar 2026 12:01:06 +0000
Manifest this update: Thu 26 Mar 2026 12:01:06 +0000
Manifest next update: Fri 27 Mar 2026 12:01:06 +0000
Files and hashes: 1: 1--uR84TmxMmj_tqc32k0ls6g_r4.roa (hash: IA0jf36x0dXydwjCq4BOEj93DRAJ8PodXiTOIuTYy3Q=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: +DG8gewxsrZW8V1P8JJ1M3cQY7/dJOx8kT8HcRwGkkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:0a:63:34:57:d9:5a:83:6b:ce:9b:57:88:b9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Mar 26 12:01:06 2026 GMT
Not After : Mar 27 12:01:06 2026 GMT
Subject: CN=ba01ae397dbe220e953c22dafc8271275c1994d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:43:4d:f2:18:37:59:ff:21:cb:a3:5a:f8:
3a:92:0d:7c:f1:e3:c6:5b:7d:97:06:08:7d:e2:b7:
e4:43:14:0e:6f:8b:52:82:90:c4:47:f4:b3:b6:3a:
f7:10:90:04:f5:80:9a:a1:82:85:73:0f:eb:4e:14:
38:b7:df:a8:5b:24:ae:c3:17:c9:f2:e7:05:1c:0c:
0e:38:82:bb:98:a7:5f:54:78:dd:bf:77:0e:41:18:
2c:11:de:e8:70:b4:8b:ce:ff:55:35:48:b6:ab:74:
78:06:63:12:13:6d:e1:8c:ab:fa:83:f3:92:e8:04:
0f:bb:ca:65:db:a9:2f:87:a7:1b:93:b4:81:de:71:
29:e0:d7:43:b7:dc:9a:4c:c4:83:88:e4:e6:e2:c9:
a1:70:23:7a:b3:cc:53:89:05:db:0b:da:1b:3b:a8:
3a:3d:d0:42:29:6f:5d:95:e5:b5:51:a7:cb:79:27:
07:0b:90:fb:62:86:dc:b0:3c:fc:c0:1b:8a:e4:74:
52:f1:ca:54:09:22:39:bf:fe:3a:52:ab:4f:d8:42:
3b:8b:0c:f4:6b:03:ca:e5:49:2c:e5:bc:20:53:17:
25:9b:f1:1c:32:8b:c5:49:09:6c:dd:e9:a7:3f:d3:
97:fb:8f:a4:ca:4d:98:be:6a:56:6f:b9:4a:fb:38:
2b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:01:AE:39:7D:BE:22:0E:95:3C:22:DA:FC:82:71:27:5C:19:94:D5
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:39:be:c7:1f:15:b4:c3:6c:78:f7:90:bc:47:e7:b3:4a:11:
86:65:a1:09:dc:25:53:ac:5f:f1:85:e2:71:d9:bc:32:83:40:
a7:69:bb:4e:a3:b5:41:49:15:b9:61:32:0e:3d:0f:53:fc:40:
c6:4e:31:60:98:75:7b:a2:2f:03:4d:75:2f:33:cf:18:52:96:
ff:ce:9b:d5:0c:38:55:61:ac:56:9c:20:66:14:5e:46:73:da:
f4:5f:67:ef:22:92:23:fe:59:58:03:eb:e8:ee:5e:51:16:14:
c3:59:e0:85:d3:42:69:3e:2b:3b:64:48:0c:7b:44:9f:02:60:
14:a9:ce:47:50:40:96:f2:1b:b4:0e:90:1e:90:3f:df:3b:4b:
a0:0b:fe:cb:e1:f0:67:82:a6:7a:03:fe:c3:ae:3f:0a:b6:bf:
36:1e:d9:cf:8c:63:3b:e3:0d:0c:58:cb:c8:5f:6c:0c:72:6f:
ff:14:c8:93:33:17:02:25:cf:4f:49:86:ab:bb:eb:92:84:d1:
c4:6d:6f:60:14:8a:07:14:91:1e:82:a0:43:ab:09:4c:d1:d3:
88:de:ff:27:a7:b6:31:d2:9d:d6:9e:cd:07:67:df:13:f7:60:
f6:8d:c9:ff:0f:f0:cd:d3:a4:e8:ba:08:6b:6c:38:9f:7a:1a:
34:01:d4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:45:46 2026 by rpki-client