Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: Rz4xvxrilY1jT5eN3mLOOxaLrjDt9m5yeoHh0ECVxro=
Subject key identifier: 3D:D5:93:B3:E5:62:39:60:2A:4D:8A:00:FC:D1:04:4C:EF:61:68:4E
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 01A1212ED8E12AF3771730BAE689B52778DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 1A9A
Signing time: Fri 09 Oct 2026 15:01:20 +0000
Manifest this update: Fri 09 Oct 2026 15:01:20 +0000
Manifest next update: Sat 10 Oct 2026 15:01:20 +0000
Files and hashes: 1: LUGSDv7DrtC6uhqKMg1-4tFi0x8.roa (hash: fV+caAzqEo99T8yXb9ytJ67VOc9pjgshPYU0owP7CNs=)
2: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: L/tKisotSydcXm7E5cbfmyS70etuCHvUvrdGlmpD2LM=)
3: duU8-DqcrbJR-jS_G7eKQiKxR-8.roa (hash: cFWSCbveByhBThDaIpOI1aib6oTyv0EzcL769gpyL08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2e:d8:e1:2a:f3:77:17:30:ba:e6:89:b5:27:78:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Oct 9 15:01:20 2026 GMT
Not After : Oct 10 15:01:20 2026 GMT
Subject: CN=3dd593b3e56239602a4d8a00fcd1044cef61684e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:31:20:51:ab:7e:a6:f2:bd:75:53:fe:de:62:
19:47:a5:79:22:6b:88:c8:5c:9b:9b:0b:6f:5e:99:
44:75:d0:f7:72:6d:24:8e:4e:a0:17:79:63:92:76:
34:06:43:e5:f2:60:c7:c8:1f:ee:39:1f:da:83:fe:
80:a5:1f:c2:b4:e6:4b:55:28:3b:58:dd:c8:7f:1c:
d4:12:81:95:9a:93:d8:c4:1c:c6:20:1d:aa:74:f4:
e7:b4:c4:d2:ff:46:c1:f6:db:c1:6b:d5:5a:b3:0d:
7a:25:3f:6d:86:41:6c:b4:69:75:19:b3:9d:b5:b4:
1f:ac:cc:7b:54:b2:70:38:f9:84:40:c1:ce:08:6e:
88:47:53:42:03:dd:ea:1a:04:cf:9f:2c:92:34:d5:
e6:93:f1:2d:50:40:df:4a:63:67:73:5e:17:6a:76:
24:aa:45:e5:3f:4b:10:f7:5b:bb:77:c8:38:63:51:
f9:af:72:6f:53:65:ed:d5:1b:6f:f0:5e:84:74:32:
ac:e1:3e:b5:37:46:94:24:6d:0f:df:0d:88:af:4a:
75:a3:b6:35:6f:17:f6:db:bc:76:30:c1:2a:a3:78:
d1:3c:7f:59:97:d3:e9:b2:e3:72:56:b6:59:81:fa:
bb:80:41:83:ca:7e:cf:49:4c:ec:82:6c:50:b6:f2:
9d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D5:93:B3:E5:62:39:60:2A:4D:8A:00:FC:D1:04:4C:EF:61:68:4E
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b4:aa:9f:24:ad:24:88:ae:b0:31:95:51:e9:2e:35:24:bc:
cf:c6:16:46:92:d3:5b:22:a4:f9:2e:75:17:06:85:3f:2d:d3:
00:e8:34:a2:e6:d1:81:a0:df:73:43:19:9d:e5:ee:ce:2a:c5:
0e:0c:a3:d9:62:02:90:63:7f:d2:64:b8:de:9b:84:4e:d1:82:
68:a7:30:b1:99:4f:63:49:ca:5b:71:40:ed:4e:56:43:cc:f3:
22:33:3c:fe:ce:34:f4:26:19:cd:0c:b9:d5:f3:a3:49:d2:3d:
e3:f6:37:dc:dd:48:1e:31:c1:f5:06:93:63:90:ca:03:2a:ba:
da:f1:fe:da:21:fd:34:45:28:83:7b:ee:3d:3c:c9:8a:0c:b8:
44:73:ac:13:fa:71:6a:87:73:20:b9:82:e9:5c:e8:52:f4:e3:
f8:73:2f:46:7b:fa:f2:f2:a1:d8:c3:f0:30:bc:38:a8:76:cb:
30:8a:60:8e:f4:82:c2:18:e7:48:02:24:01:19:b6:ba:70:ba:
04:98:38:ba:3f:81:72:d5:e6:cb:ce:60:e8:4a:fb:10:40:d7:
7f:4a:ac:39:10:f5:f8:f6:8c:f0:ee:e1:16:6e:de:db:4c:a6:
50:a1:eb:3d:b3:f0:aa:0c:9a:17:4e:a4:ee:4f:eb:68:5c:fa:
e6:6e:87:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:02:27 2026 by rpki-client