Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: FeS9q+jqpur1Mmd2fzAlDviKUJPO6nERIwmucXSVm9A=
Subject key identifier: C3:78:2B:1F:56:2B:A5:09:59:59:00:48:0D:71:88:6B:2C:43:0F:D1
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 019F9549D11831D561771E7E23855FDFF55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 18:01:10 +0000
Manifest this update: Fri 24 Jul 2026 18:01:10 +0000
Manifest next update: Sat 25 Jul 2026 18:01:10 +0000
Files and hashes: 1: LUGSDv7DrtC6uhqKMg1-4tFi0x8.roa (hash: fV+caAzqEo99T8yXb9ytJ67VOc9pjgshPYU0owP7CNs=)
2: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: kcE0856yiQWgC0poMqHKB4rcwBaFm9CViNFttSFcuZ0=)
3: duU8-DqcrbJR-jS_G7eKQiKxR-8.roa (hash: cFWSCbveByhBThDaIpOI1aib6oTyv0EzcL769gpyL08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:d1:18:31:d5:61:77:1e:7e:23:85:5f:df:f5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Jul 24 18:01:10 2026 GMT
Not After : Jul 25 18:01:10 2026 GMT
Subject: CN=c3782b1f562ba509595900480d71886b2c430fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:09:e0:5a:59:6f:e7:93:4f:0a:be:22:89:cb:
b1:59:57:05:40:bf:91:46:f2:b6:7d:40:bd:df:9b:
88:4c:e8:2a:79:a2:22:0b:06:b1:fa:f4:3e:44:b1:
4e:2a:06:9b:67:d0:18:7d:80:18:df:8f:f5:2a:01:
9d:0f:16:85:c0:00:df:51:b9:76:d4:e5:67:ad:dd:
b4:db:64:a5:33:a1:b1:b1:af:ef:28:c4:ba:90:6f:
57:36:82:91:ed:60:e3:b3:30:14:09:2f:37:2e:62:
a8:1c:03:dc:f4:12:73:bf:fb:72:84:9d:86:5a:aa:
c5:5c:05:c8:be:f7:78:59:79:82:b6:97:57:2d:97:
01:7a:3c:41:99:03:85:de:25:88:61:68:a7:d2:d0:
50:07:27:5e:58:42:93:dd:7b:7e:21:f4:8d:d6:15:
14:be:cd:0b:b6:0a:e3:7d:b0:ca:2d:11:f3:ad:4a:
1a:69:35:7b:ba:64:6d:e2:0f:e6:0e:59:fd:93:4a:
c9:fd:42:07:af:2c:7a:50:64:5d:31:a8:63:68:05:
ed:75:d9:99:ba:e5:a5:a2:69:0e:93:5e:0c:f6:bb:
d6:c5:61:5b:53:da:d9:de:c4:95:25:a7:59:ea:4f:
76:b5:20:e6:54:ab:13:0e:08:5e:a5:b9:c0:5b:e5:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:78:2B:1F:56:2B:A5:09:59:59:00:48:0D:71:88:6B:2C:43:0F:D1
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fa:91:32:01:c5:5b:98:86:34:50:eb:24:17:a1:a6:ac:70:
0f:af:4d:09:cc:3e:74:2c:ab:1f:9e:46:0b:c7:db:c5:9c:63:
10:9b:3f:a5:17:48:1f:35:62:ad:da:0a:81:76:e9:c9:40:b2:
f4:e1:65:7c:ee:8d:f5:a1:16:55:a9:74:e6:55:d2:e3:88:66:
17:a0:b3:72:6b:f9:87:98:62:9c:30:20:24:78:d3:5f:7c:43:
0a:86:e8:c5:4d:a2:54:85:b3:24:a1:d7:1c:27:61:88:ef:48:
b9:a4:f3:92:73:15:49:0e:91:eb:0a:13:0c:0e:b3:75:e6:d5:
e5:7b:be:e7:d2:6f:bc:e7:72:f8:2b:d0:ff:ce:dd:23:8c:48:
7f:4d:22:4f:3d:65:42:4f:d7:3f:04:9d:c3:89:5d:04:cc:d5:
2a:9c:8c:65:6d:11:a3:36:60:12:bb:f0:a8:be:f4:78:7a:40:
2b:71:e8:be:78:c0:59:05:35:92:62:34:21:3d:34:59:9a:10:
de:21:b0:55:21:f0:12:e8:04:7c:fd:6f:2f:ec:77:82:f0:d2:
cf:dc:3d:f2:49:a0:da:c0:79:5c:bd:3d:16:ce:00:40:a6:7b:
d1:6d:98:06:57:a7:c3:75:f5:f3:02:17:0b:54:51:2f:f2:04:
ad:c5:58:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:47:48 2026 by rpki-client