
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File: sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier: xH0BDySPrgkPAbHSkdi+dmxLUZGItYl6nmynAqLM+xo=
Subject key identifier: 5C:A0:CB:BC:00:36:A0:8C:C3:63:03:9A:AD:97:BA:FD:A4:ED:6F:F3
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer: /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial: 019D27726CAC06CCF68D81447F326B0076E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 00:01:43 +0000
Manifest this update: Thu 26 Mar 2026 00:01:43 +0000
Manifest next update: Fri 27 Mar 2026 00:01:43 +0000
Files and hashes: 1: QvWAgIyFSp81QP1TU8EGOihTFps.roa (hash: 0pRqWv7OjhSbMQbgWqXrmBArFyxBxLPUemQb9GCiO7A=)
2: TQm8goqjLVI6iJwXimERg01NkD8.roa (hash: Yb9LvZhPI+JqfVckpy3u12GtucpcmDjrrqhMvFWHU9U=)
3: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: qe9t/Y1u81RWjNHpXzv6rAqYTXaPjtG97UOnZbM/m9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:6c:ac:06:cc:f6:8d:81:44:7f:32:6b:00:76:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
Validity
Not Before: Mar 26 00:01:43 2026 GMT
Not After : Mar 27 00:01:43 2026 GMT
Subject: CN=5ca0cbbc0036a08cc363039aad97bafda4ed6ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:f3:19:a7:05:9d:52:cc:a7:67:0b:4a:28:
57:10:b3:8d:ed:f2:d3:bc:60:2c:bd:91:c9:23:3e:
7b:44:05:fc:42:83:ea:10:36:d6:0e:63:e6:0c:fa:
7c:1e:97:63:d0:60:76:6b:bc:59:a4:52:15:5f:f5:
76:54:8e:5c:0c:14:7e:13:b3:f5:cb:4d:90:ea:25:
07:75:35:ee:e5:c7:63:9b:ca:66:38:f7:9c:90:0b:
ad:b6:57:10:07:0f:25:c4:93:7d:6e:ad:46:7d:06:
97:50:8d:4d:9d:28:23:e3:52:d4:53:15:26:f5:23:
6c:e6:6e:86:8b:ff:29:d3:fc:be:6e:54:e4:35:5e:
39:40:1f:3c:03:8f:41:af:90:6f:c6:1f:49:e6:cc:
1a:e6:a5:ac:ce:08:8e:77:b5:c3:98:1b:dc:0e:8f:
b4:6e:fe:bc:6e:26:2c:19:bf:f6:48:67:9e:cc:ad:
9b:db:b7:f8:1c:dc:4c:7d:cb:3e:e5:16:24:67:3c:
aa:0a:33:1c:05:2e:77:22:81:8d:56:ab:c9:75:30:
e3:c8:36:1e:65:d9:3a:1f:88:9d:11:d2:97:bd:a9:
b5:d6:0e:a3:6c:b5:6e:93:0e:69:23:7b:c7:d1:dc:
ed:06:c8:2b:9b:8e:4f:8c:88:f5:19:4a:72:a7:45:
0f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:CB:BC:00:36:A0:8C:C3:63:03:9A:AD:97:BA:FD:A4:ED:6F:F3
X509v3 Authority Key Identifier:
keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fc:d1:43:b7:46:41:05:32:36:e4:e8:63:99:3b:3b:06:25:
a0:08:4e:93:58:e4:b2:7d:2a:e4:6f:43:c1:0a:14:62:3c:e8:
db:ad:05:b2:e4:20:ee:af:9b:36:8a:ee:8b:b5:e1:06:1c:d0:
75:82:55:0b:1a:b8:c6:07:8e:7c:c8:0b:a6:76:3d:01:fb:5f:
e1:37:0e:70:36:1c:29:e1:ad:03:a7:19:4b:57:90:47:4c:5b:
43:86:14:71:ac:74:e2:56:43:64:00:3c:e8:8d:57:8e:4d:f9:
47:2d:61:c6:66:f1:96:ed:90:3a:43:80:c8:9f:2d:17:9e:c1:
15:dc:6d:92:48:d1:ee:92:9f:f8:54:88:76:62:cf:a2:6d:c3:
01:76:70:3c:a8:09:b7:83:c9:f1:de:c8:ed:90:60:dc:36:dd:
b6:86:ee:fc:44:83:38:4c:19:b7:83:75:68:93:7d:a5:45:a4:
e0:92:60:05:47:17:96:08:74:f4:1f:43:da:95:cb:5e:31:11:
06:80:be:6a:ed:3f:bc:be:cb:0e:44:06:6a:75:04:ba:e4:61:
1e:fb:7a:cf:13:d1:db:7f:39:9f:15:3d:1f:a3:3a:5b:0b:5b:
e1:ba:50:db:e7:91:8f:e4:d6:fa:66:0f:6b:19:ce:c2:4c:fa:
4c:11:6b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:59 2026 by rpki-client