Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: o1e7ILUkK0YKYT5MqqqlqFuAovSrVZR9Op6Hoi+g5iU=
Subject key identifier: 34:22:17:BE:E5:20:BB:F3:F6:18:66:37:21:B1:98:19:0C:30:71:8E
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 01A0EA77BF9D9C5C3C6AEEE85947018A0F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0D35
Signing time: Tue 29 Sep 2026 00:01:51 +0000
Manifest this update: Tue 29 Sep 2026 00:01:51 +0000
Manifest next update: Wed 30 Sep 2026 00:01:51 +0000
Files and hashes: 1: L3zQrDly_cgu2DtWRJFHDzULtOQ.roa (hash: i7m+qZMXIsGxhkbEdh7EZAa733fER6ODAhYCosRl/wk=)
2: Xf4ZTszORkzpOtgjWs0sQXLkCfM.roa (hash: f/UijPcLGJI8l2y80NoFTGhFWkou3AIufub5lbOoRas=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: YHMMibe/pTtKq2jDBl0pELF+bZJHO/UQHUCPFtgJmco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:77:bf:9d:9c:5c:3c:6a:ee:e8:59:47:01:8a:0f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Sep 29 00:01:51 2026 GMT
Not After : Sep 30 00:01:51 2026 GMT
Subject: CN=342217bee520bbf3f618663721b198190c30718e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a0:da:05:8e:65:cb:ba:d8:53:91:d0:bb:fd:
e1:92:9d:79:29:b9:6e:c6:7b:9c:05:37:ff:14:7a:
1d:08:30:0e:ef:38:22:8d:e6:d2:5d:00:bb:b8:2a:
51:78:d2:6b:d1:58:cf:1b:6c:4c:35:36:f2:03:ad:
cb:35:61:36:4f:4d:b9:64:5e:cd:89:c5:59:f1:81:
9f:d0:67:a0:e9:af:62:8d:4c:ec:27:25:c9:1a:d9:
32:74:d5:d2:c5:7a:a1:02:d3:8b:11:93:aa:45:31:
fa:96:da:9b:55:0c:7d:98:02:6b:4a:8e:f7:f9:66:
36:20:3f:3e:4f:dc:eb:90:04:1f:41:b0:7d:88:5d:
d6:a6:b4:93:17:5f:69:73:61:cd:17:97:58:d4:bb:
25:91:b4:2d:e1:cf:54:3d:ec:91:9d:9f:1e:83:00:
bc:2c:27:8e:f9:09:60:90:98:39:49:5b:c5:5a:da:
95:06:ea:da:43:85:e7:a5:69:26:a8:9c:56:6d:e6:
84:e8:57:9e:bf:b6:34:48:da:4a:8c:eb:75:17:06:
76:18:c6:e2:cc:3e:1c:37:ce:d7:01:b9:7e:44:02:
fa:05:b4:0c:1b:16:49:ff:40:f3:56:d6:39:a8:e9:
c9:bd:fe:d6:ab:f1:61:af:86:9a:a9:2d:f5:0c:32:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:22:17:BE:E5:20:BB:F3:F6:18:66:37:21:B1:98:19:0C:30:71:8E
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cb:3b:ab:3d:43:3e:bf:b9:47:36:a4:1f:c8:db:f1:c6:ac:
00:06:07:05:42:fd:f5:94:eb:24:b9:22:af:61:04:b6:e1:2b:
f3:4b:d8:ae:a6:70:07:9e:7c:4d:d8:c3:20:bb:8c:57:8f:88:
5f:30:1f:6c:2d:e2:1e:e3:23:c1:13:ac:e1:29:67:81:e9:a9:
8b:44:23:a9:e5:7d:55:31:44:fd:14:a2:a7:3a:dd:09:a6:ca:
33:53:c4:59:78:72:b0:92:8e:51:b9:0a:a9:8c:45:ac:15:a4:
6d:44:3b:53:8b:da:c5:a0:2c:de:14:a2:de:ed:28:82:23:89:
5f:b9:2f:43:d3:37:0c:8e:1e:91:8e:d3:e5:07:b4:1a:a7:95:
01:b7:c1:55:8e:81:40:c0:09:5d:95:12:3e:65:11:37:16:db:
a6:56:9a:5b:4d:27:40:f7:c8:0e:e7:b9:9c:21:cb:44:63:07:
4f:3e:64:0a:66:39:ee:a4:23:ed:2b:e3:c4:dd:c3:69:c2:e7:
b1:ae:11:5e:2d:a9:ee:a6:53:59:05:9c:65:d3:ca:f7:53:44:
8a:e6:90:9d:97:e1:df:d9:46:e4:53:3b:76:c9:e1:bd:b8:44:
7c:18:10:80:9f:ea:1d:20:0d:23:57:9a:9f:28:25:45:fa:fc:
d4:63:39:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqd7+dnFw8au7oWUcBig+ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYzNlYzUzOWYyM2VlMDMxYWEzOTZhYzVjZWQ0MjU2Mzg4
NGI3YjMwHhcNMjYwOTI5MDAwMTUxWhcNMjYwOTMwMDAwMTUxWjAzMTEwLwYDVQQD
EygzNDIyMTdiZWU1MjBiYmYzZjYxODY2MzcyMWIxOTgxOTBjMzA3MThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16DaBY5ly7rYU5HQu/3hkp15Kblu
xnucBTf/FHodCDAO7zgijebSXQC7uCpReNJr0VjPG2xMNTbyA63LNWE2T025ZF7N
icVZ8YGf0Geg6a9ijUzsJyXJGtkydNXSxXqhAtOLEZOqRTH6ltqbVQx9mAJrSo73
+WY2ID8+T9zrkAQfQbB9iF3WprSTF19pc2HNF5dY1LslkbQt4c9UPeyRnZ8egwC8
LCeO+QlgkJg5SVvFWtqVBuraQ4XnpWkmqJxWbeaE6Feev7Y0SNpKjOt1FwZ2GMbi
zD4cN87XAbl+RAL6BbQMGxZJ/0DzVtY5qOnJvf7Wq/Fhr4aaqS31DDJajwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQiF77lILvz9hhmNyGxmBkMMHGOMB8GA1UdIwQY
MBaAFLHD7FOfI+4DGqOWrFztQlY4hLezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUt
NTU2MzQ3YTVmMDU2LzEvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUtNTU2MzQ3YTVmMDU2
LzEvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8s7qz1D
Pr+5RzakH8jb8casAAYHBUL99ZTrJLkir2EEtuEr80vYrqZwB558TdjDILuMV4+I
XzAfbC3iHuMjwROs4Slngempi0QjqeV9VTFE/RSipzrdCabKM1PEWXhysJKOUbkK
qYxFrBWkbUQ7U4vaxaAs3hSi3u0ogiOJX7kvQ9M3DI4ekY7T5Qe0GqeVAbfBVY6B
QMAJXZUSPmURNxbbplaaW00nQPfIDue5nCHLRGMHTz5kCmY57qQj7SvjxN3DacLn
sa4RXi2p7qZTWQWcZdPK91NEiuaQnZfh39lG5FM7dsnhvbhEfBgQgJ/qHSANI1ea
nyglRfr81GM5TQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 06:54:27 2026 by rpki-client