Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: ohLgSsIHsL3oyGzvjAekaVMWkPoEDg+G0uJzPGh3giU=
Subject key identifier: 13:BB:7D:21:67:85:44:C9:CC:9B:5A:AA:79:6B:A1:C8:9C:69:7E:22
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 019D296114193669171E512D007FF6174B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 09:02:01 +0000
Manifest this update: Thu 26 Mar 2026 09:02:01 +0000
Manifest next update: Fri 27 Mar 2026 09:02:01 +0000
Files and hashes: 1: LUGSDv7DrtC6uhqKMg1-4tFi0x8.roa (hash: fV+caAzqEo99T8yXb9ytJ67VOc9pjgshPYU0owP7CNs=)
2: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: qUaNMxSZBE6T317ypPT5pjR7+mMPFtgMn5YtjjOuEpw=)
3: duU8-DqcrbJR-jS_G7eKQiKxR-8.roa (hash: cFWSCbveByhBThDaIpOI1aib6oTyv0EzcL769gpyL08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:14:19:36:69:17:1e:51:2d:00:7f:f6:17:4b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Mar 26 09:02:01 2026 GMT
Not After : Mar 27 09:02:01 2026 GMT
Subject: CN=13bb7d21678544c9cc9b5aaa796ba1c89c697e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:80:ed:71:18:00:ae:cf:1b:87:3a:0c:50:
e9:61:82:b0:8d:c3:21:1a:d1:7f:d5:79:7f:5a:16:
af:a1:16:11:f3:13:8c:c0:6d:16:36:6b:b3:57:b4:
c8:3b:46:f6:3a:fd:8b:a6:a0:eb:fb:ba:de:a6:cf:
5f:6d:8d:5e:bb:88:3a:2d:b3:bd:a3:c0:a4:53:96:
fb:01:b7:98:72:92:c8:9b:60:f0:e2:74:16:33:0b:
4a:af:f4:09:ed:7c:19:8b:78:46:6d:e3:d2:51:1a:
b6:8e:4a:41:f8:88:15:a3:62:a9:6e:48:7f:93:62:
e0:ac:ed:b8:7c:a9:52:87:66:dc:66:ea:e5:c2:9d:
5f:82:ed:59:dc:8f:4b:ce:b3:cd:41:cb:b4:25:2f:
29:c1:72:50:52:1f:a2:af:ef:4a:83:a9:d8:00:e7:
39:95:69:60:39:eb:f1:fc:39:d9:af:b3:1e:7e:f1:
50:e8:fe:76:b6:a2:ee:9e:2f:b7:73:ca:0b:ff:04:
aa:bb:9a:12:cf:82:55:8f:da:c1:08:3a:47:63:9d:
69:f8:ad:3c:d7:bc:9e:e3:50:f9:c9:f1:8f:cb:c8:
2c:0c:cd:69:fe:a5:24:df:21:37:c5:82:2e:85:e3:
f4:95:06:3b:56:4f:2a:90:cc:5e:8b:04:6f:78:0a:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BB:7D:21:67:85:44:C9:CC:9B:5A:AA:79:6B:A1:C8:9C:69:7E:22
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:29:8c:11:71:a4:13:4c:d6:a2:6f:55:f7:2d:55:fc:f1:10:
1c:60:8d:6c:68:dd:1b:b6:e8:91:5f:c1:0d:4a:13:bf:67:2c:
08:9b:3e:87:c9:a6:7d:ed:6c:a8:09:0c:bc:d5:f6:cd:97:db:
26:4d:5c:fb:81:fa:5f:76:9a:a6:67:30:93:b7:c7:19:c9:f8:
53:d7:6e:25:d6:16:3c:5f:98:89:1b:c7:a6:a2:ea:cf:ee:1d:
32:b1:4a:3a:43:0c:69:65:ca:fd:d2:4f:a4:62:84:6b:10:37:
c4:f6:d3:96:5f:5f:2f:b9:0f:a1:c7:d6:49:e7:36:39:d1:2b:
36:42:9d:24:4a:c4:be:59:09:c0:ac:51:9c:b3:57:bc:dd:c0:
70:00:2d:6b:cb:3e:cd:09:6f:03:66:b9:98:89:2b:dd:a9:8c:
49:12:bd:bf:c2:1c:53:85:e7:b4:0e:ad:9d:2b:71:37:71:d1:
40:b0:ce:4c:80:23:0d:b9:6c:cb:23:fc:84:95:7f:6c:03:48:
c6:52:97:f1:4b:bd:28:b3:56:ac:c7:92:0e:e1:68:1f:47:ce:
72:38:24:02:84:2a:7f:9d:25:65:81:b1:10:fc:f8:9c:ea:84:
04:38:81:15:f9:ac:25:52:1c:9b:b2:54:13:18:f2:b5:76:71:
80:97:81:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:24:17 2026 by rpki-client