Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
File: sCJf0DWnzmSnyIveca61YPNIOXQ.mft (raw, json)
Hash identifier: xaT6CC+R9Z4hlCelC8q8sBfcCJqtnn3D3u3/qc0Y49I=
Subject key identifier: 14:10:0B:5B:B1:4B:4E:DD:69:7B:34:71:43:D2:A6:3D:F4:84:37:AF
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 019E1D598FD2AB12CD3754FD12DCF6F379B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
Manifest number: 022A
Signing time: Tue 12 May 2026 18:01:09 +0000
Manifest this update: Tue 12 May 2026 18:01:09 +0000
Manifest next update: Wed 13 May 2026 18:01:09 +0000
Files and hashes: 1: 75dJ9l9pm2mLQKlmsqkMPbP5nLU.roa (hash: y9JQO9ERriwN1YTQ2JmQZB4kivefmPeXhn7RTehloi0=)
2: AEeBq3XFkbn8pyHJEeb3isWEmIA.roa (hash: gkDvS6y+2rhPnDPFUFxFEdfe5IUZN7R+qqVkzML65dE=)
3: EJPyee4QWkKrpHzgKl_UfRlSQ4k.roa (hash: UftVkTCY6ZFe1hDTUIcqILq/ecU3GKzDfqSPxTid57Y=)
4: IIIXZtSualOwJL3v5moeDxfjfvI.roa (hash: 7rMLEXqsuij2IE2v0cNkJojz7+yY0hLnMUTfWDw4n9Q=)
5: S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa (hash: w5hcZAmF4buAGhakgXjQA0sa4vpLG5fCK2GR/ajM+u0=)
6: dNXYaX82NX51pSFvpQpCqsG2lPo.roa (hash: 35cWo5gZ7UeSrOUHr9i+uJyPsLCbl8OtXgjF+qTOIsg=)
7: sCJf0DWnzmSnyIveca61YPNIOXQ.crl (hash: 9Gg2W0zAVlQyaLBBL6f1l2IYgTSJFDUoD3KcFt7OLT8=)
8: wJQhpUcYRE9YbrS1hrhEwceSpsw.roa (hash: pKy+CJ0dPgWvUI++SXNGLH/W/2Tj4mADcaq6t4MuXsE=)
9: wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa (hash: VxkO6fBbTYMBO4jXH/JD3dN5+ZLMhiKDYjCspmghV5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:8f:d2:ab:12:cd:37:54:fd:12:dc:f6:f3:79:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: May 12 18:01:09 2026 GMT
Not After : May 13 18:01:09 2026 GMT
Subject: CN=14100b5bb14b4edd697b347143d2a63df48437af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3e:13:cf:2b:88:16:c4:03:7a:4e:e8:41:13:
ff:43:fa:d5:a2:33:00:91:31:23:bc:08:d2:99:59:
52:48:3f:95:81:b4:5e:54:3e:63:c8:17:1e:5b:20:
80:86:f0:0f:0a:bd:96:e0:f2:32:47:5b:c4:e0:de:
40:45:45:d5:b9:01:92:ad:c9:b6:7c:43:24:db:e9:
6e:4a:e8:b2:dc:50:92:98:54:29:68:c7:8b:f2:10:
ae:6d:63:9d:e1:3b:18:52:d1:22:6c:23:ea:c6:19:
10:64:c2:05:33:64:c7:0a:43:28:b6:b6:2a:71:f9:
f4:63:72:ae:36:b5:99:27:34:80:c5:fa:8f:1d:44:
a1:a5:31:3c:9d:1e:b2:99:57:b5:51:31:07:7a:08:
cb:ef:33:1e:4b:2e:db:46:e3:5f:57:dc:45:c5:93:
9d:21:7f:08:e5:df:c7:f0:f2:f5:77:79:3c:3d:79:
a7:b5:e6:09:f4:03:87:3b:ab:dd:0b:6f:42:09:7e:
51:83:70:14:5c:fb:70:cf:e6:9c:21:78:75:ee:a8:
1f:06:57:43:9c:a0:46:31:5e:da:d9:64:c5:64:84:
75:af:1f:0c:61:8c:d4:f6:fe:21:17:45:44:8c:2d:
a5:2c:89:3e:09:5f:be:40:9e:d9:3d:9c:af:75:46:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:10:0B:5B:B1:4B:4E:DD:69:7B:34:71:43:D2:A6:3D:F4:84:37:AF
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1f:fc:8a:f4:33:5d:5a:e3:ec:5d:a4:6b:07:d0:97:ba:59:
43:19:5d:39:37:5a:aa:9d:a7:ed:95:d5:f5:e6:f5:96:e3:93:
ec:1f:4b:56:1a:6f:50:d6:2d:9a:c2:c8:bf:e9:23:a1:01:03:
e0:3b:fa:e7:63:70:9f:a7:40:bb:63:05:48:e6:9a:d6:98:c5:
de:84:2a:b5:89:9b:7e:8a:0a:76:a3:83:c2:5d:26:8c:d0:79:
45:75:aa:70:99:54:19:3b:41:80:49:02:9b:03:8c:29:24:40:
53:65:8a:d1:78:a1:27:5d:32:91:0a:46:90:4c:c0:5f:55:d5:
93:52:55:6f:d5:1c:c5:2a:39:67:d6:95:fd:87:dc:5f:60:bf:
06:b2:b1:bf:97:d1:7b:fe:86:e4:0d:2f:76:06:dc:42:c4:f8:
b6:5a:b1:a3:4c:33:13:6f:ba:bf:05:46:0d:3a:10:ca:76:14:
a4:3c:3e:6d:d8:f6:b4:95:98:6b:12:15:f0:af:55:2c:47:b3:
13:59:a1:f4:d6:82:a4:35:53:5c:0c:1b:38:91:b9:f8:fe:cb:
da:38:d2:01:56:0b:c2:6d:8d:73:ee:38:20:a4:a5:28:d5:0d:
c8:c7:07:65:e7:0f:d1:6e:ab:61:be:49:be:45:e9:40:f9:a2:
28:9d:2e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:59:40 2026 by rpki-client