Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
File: f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft (raw, json)
Hash identifier: xlcQwXKmGwjwPPqVha/bKPNk9esSLsnBFkcSgc3QrEY=
Subject key identifier: 1F:F6:30:27:D4:49:85:B4:50:43:8E:08:AD:BA:55:82:9D:CF:3C:7B
Authority key identifier: 7F:FB:1C:81:9F:5C:6E:B7:39:D6:94:55:9B:33:1E:6F:4B:3F:2A:CF
Certificate issuer: /CN=7ffb1c819f5c6eb739d694559b331e6f4b3f2acf
Certificate serial: 01A0D9BADB2BADDD43A7FD725338E655DC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
Manifest number: 0210
Signing time: Fri 25 Sep 2026 18:01:36 +0000
Manifest this update: Fri 25 Sep 2026 18:01:36 +0000
Manifest next update: Sat 26 Sep 2026 18:01:36 +0000
Files and hashes: 1: NwGyrarXznEP79mpSfk4-aoAcss.roa (hash: kWL+oTlCQ4M6RuD7dSjXf+gw9XkHswGxJGJoJ/U5AMw=)
2: f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl (hash: TJmqLXS8TTmPLNBibleeXismzYjC4x7LvE1ryQ0QG9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:db:2b:ad:dd:43:a7:fd:72:53:38:e6:55:dc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffb1c819f5c6eb739d694559b331e6f4b3f2acf
Validity
Not Before: Sep 25 18:01:36 2026 GMT
Not After : Sep 26 18:01:36 2026 GMT
Subject: CN=1ff63027d44985b450438e08adba55829dcf3c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0b:d6:19:79:4c:55:69:26:d8:70:85:c5:04:
36:fd:ad:ae:23:e3:94:4f:b9:f0:4d:1a:1a:5e:fd:
6c:7c:a5:b6:f7:79:68:6e:5a:3d:e1:ee:54:99:f4:
60:40:d7:ba:67:5c:45:47:1b:e0:58:4c:a0:56:b0:
ff:54:28:a9:24:6b:b2:a0:cb:c4:d3:a6:3f:7a:69:
51:ed:c8:23:1e:db:ce:e7:2f:e9:ae:9e:80:9e:09:
cc:c0:f6:a1:20:e6:e8:7c:0a:48:55:11:1e:6b:7c:
c0:b9:7e:17:d4:23:27:8a:31:45:a1:44:78:ee:02:
bf:95:7a:8e:62:96:61:ab:71:a8:0e:ab:c4:99:96:
d1:7a:95:f0:fe:1a:a2:ef:3b:56:0a:16:ea:ca:2b:
1e:00:07:ec:92:d7:05:aa:eb:fb:5c:db:29:31:67:
8d:03:11:40:a5:ad:a6:76:b7:fe:5f:26:a5:b3:41:
51:31:68:38:c9:f1:7a:24:c7:a4:72:29:e1:a5:58:
44:6b:fe:c4:67:0e:06:c4:62:b1:50:e8:8c:47:ab:
94:ce:ce:af:63:f7:4a:af:57:78:f7:36:91:69:21:
b0:56:cd:21:db:b0:5f:6d:ba:22:9c:51:87:e1:8c:
b1:bc:b4:2c:c8:d2:5c:d2:c2:6e:c1:30:87:d7:1a:
af:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F6:30:27:D4:49:85:B4:50:43:8E:08:AD:BA:55:82:9D:CF:3C:7B
X509v3 Authority Key Identifier:
keyid:7F:FB:1C:81:9F:5C:6E:B7:39:D6:94:55:9B:33:1E:6F:4B:3F:2A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:31:f2:bd:55:ed:3c:fd:57:1a:07:2c:11:eb:b4:09:b3:80:
8f:13:c3:d3:d1:dc:6a:8f:8c:7b:a3:b7:3e:0d:2b:29:07:63:
fc:e7:56:0b:f7:81:bc:43:6c:18:d6:cd:d4:6e:3e:a1:42:d2:
9a:91:ba:55:84:42:b7:f5:86:5a:ae:36:90:b2:28:cd:b7:f2:
31:a6:84:ff:65:3d:a1:80:41:7f:67:0b:3e:64:99:d8:b4:71:
64:1d:94:c9:40:4c:89:3b:39:1b:0f:bc:65:4a:a0:51:5d:68:
7d:19:4c:56:36:80:71:e5:f1:44:3c:53:1a:e3:f4:e8:58:79:
2d:63:8d:29:81:60:d6:21:44:00:7d:ca:d7:4b:82:80:80:23:
ef:6a:17:fc:92:9d:e1:b9:00:28:34:04:9b:e8:7f:78:17:b4:
09:98:da:d9:73:00:34:33:e5:16:a1:44:5d:6a:5b:62:2f:14:
00:f9:31:86:91:e2:6a:ac:1b:49:2a:8f:9b:b0:90:3a:32:74:
0c:fc:51:ed:31:13:d7:55:da:51:1a:2f:1c:0f:9a:d9:8a:36:
40:48:4c:9d:36:e4:88:2d:d8:5a:a8:13:79:4f:8d:47:b4:65:
64:25:ff:ec:a3:ec:73:a2:43:14:d1:f4:5e:1b:c8:4d:b4:4d:
c1:13:e3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:03:43 2026 by rpki-client