Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
File: f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft (raw, json)
Hash identifier: AnqhANb2UjKqY3n+cBT6oX7NUsUmC++OJ2GD2+B/AAQ=
Subject key identifier: C5:D2:2F:5F:2D:07:40:75:78:19:AA:DB:1B:E4:DD:BA:AD:B8:21:A9
Authority key identifier: 7F:FB:1C:81:9F:5C:6E:B7:39:D6:94:55:9B:33:1E:6F:4B:3F:2A:CF
Certificate issuer: /CN=7ffb1c819f5c6eb739d694559b331e6f4b3f2acf
Certificate serial: 019D2D3D262E993377E4339C651238AD334A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
Manifest number: 29
Signing time: Fri 27 Mar 2026 03:01:15 +0000
Manifest this update: Fri 27 Mar 2026 03:01:15 +0000
Manifest next update: Sat 28 Mar 2026 03:01:15 +0000
Files and hashes: 1: NwGyrarXznEP79mpSfk4-aoAcss.roa (hash: kWL+oTlCQ4M6RuD7dSjXf+gw9XkHswGxJGJoJ/U5AMw=)
2: f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl (hash: njHJmAQOhmj9TNyFhgwbG8TfKMkRFJO73ThwBZLlpIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:3d:26:2e:99:33:77:e4:33:9c:65:12:38:ad:33:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffb1c819f5c6eb739d694559b331e6f4b3f2acf
Validity
Not Before: Mar 27 03:01:15 2026 GMT
Not After : Mar 28 03:01:15 2026 GMT
Subject: CN=c5d22f5f2d0740757819aadb1be4ddbaadb821a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:3a:9c:69:e1:0a:aa:ea:0d:ea:1d:fd:c0:
ec:ac:28:ba:3f:46:dc:81:96:65:5e:8e:de:11:cb:
3c:cc:39:55:ed:13:c5:96:00:b6:3f:49:cb:fb:13:
01:59:ec:46:19:4a:b0:11:cb:19:61:bf:6a:85:21:
8b:c6:a6:af:31:6c:ba:30:82:cc:9e:ec:29:10:7e:
57:78:a6:5b:97:df:ec:3f:0b:a8:52:b2:b5:be:7d:
c8:d1:29:23:d8:05:a4:7e:b0:37:96:34:1a:c4:ef:
ac:fa:e8:e3:e9:7c:7b:7b:97:1b:69:cd:45:f3:90:
23:27:ae:75:22:34:13:30:ca:07:16:37:3f:5e:8f:
d2:66:e3:7a:40:50:54:13:08:9d:35:5f:a6:35:5f:
e0:37:9c:04:97:5a:46:8e:b3:9a:45:25:d3:9f:e6:
e2:b8:c9:08:3a:98:e0:bb:74:2b:10:2d:46:6f:ef:
99:c8:9e:e8:7c:be:e2:72:dc:68:26:48:11:ab:75:
12:db:c1:c7:9f:f7:fa:00:a3:d2:c4:3d:15:e2:b8:
87:39:26:15:01:7e:1a:e3:29:6d:bf:d2:2f:23:42:
ea:07:65:e1:5e:94:8e:43:36:ec:fe:64:a4:2f:16:
1a:e2:e1:b8:63:96:05:58:7c:2a:41:bd:fa:d2:b3:
e5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D2:2F:5F:2D:07:40:75:78:19:AA:DB:1B:E4:DD:BA:AD:B8:21:A9
X509v3 Authority Key Identifier:
keyid:7F:FB:1C:81:9F:5C:6E:B7:39:D6:94:55:9B:33:1E:6F:4B:3F:2A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b4:5c:0e:49:6c:e6:93:cb:f9:53:f3:f3:67:09:42:ad:33:
53:03:ec:75:73:d3:1d:4b:4a:8b:22:c1:75:fc:04:a0:d6:7f:
56:83:0f:a4:ed:66:60:44:a4:7b:70:1e:4c:9e:3d:10:e3:ce:
82:97:32:4e:c3:37:3f:ea:54:73:d2:b1:d3:a0:72:fa:a1:78:
b8:45:e0:e9:8a:06:b9:6e:2d:3d:49:51:55:e0:05:a1:1e:a8:
99:45:9a:1b:4f:d0:47:0c:1b:1a:47:32:b3:61:82:ed:33:2d:
2a:e6:7b:a8:2a:64:e2:e7:98:d6:f6:16:61:da:72:bd:ba:d8:
50:9e:b0:77:e9:a5:59:c9:1a:7d:bc:05:19:a6:70:fe:96:36:
74:b8:8c:8e:c8:4d:53:90:23:f7:67:d2:2b:f9:21:30:aa:e1:
99:eb:d8:8f:3c:79:98:01:fd:b2:cd:1f:06:44:19:6d:a2:9e:
58:36:9f:0d:ab:a7:38:d8:af:f0:28:ec:c4:a0:18:e1:47:dd:
a7:cd:70:67:98:da:52:20:fe:02:ea:99:e5:3e:60:57:94:41:
ed:64:cb:30:31:ed:85:a2:3d:9f:ee:53:dc:57:e1:8a:3b:30:
6e:78:81:c9:fd:28:f2:d5:62:09:38:3d:68:48:23:e9:98:c5:
8f:04:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:27:31 2026 by rpki-client