
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
File: sCJf0DWnzmSnyIveca61YPNIOXQ.mft (raw, json)
Hash identifier: DoEd9o6ErHPfTJekSyOXjaT3AioUJ4L/+GSnEp6W4EU=
Subject key identifier: 3C:0F:0E:78:BB:C4:DE:77:F4:B3:C3:9E:C1:3D:53:CB:78:7D:21:57
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 019F9211371BC63EAE017433EFB15F5FFCBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
Manifest number: 02EB
Signing time: Fri 24 Jul 2026 03:00:29 +0000
Manifest this update: Fri 24 Jul 2026 03:00:29 +0000
Manifest next update: Sat 25 Jul 2026 03:00:29 +0000
Files and hashes: 1: 75dJ9l9pm2mLQKlmsqkMPbP5nLU.roa (hash: y9JQO9ERriwN1YTQ2JmQZB4kivefmPeXhn7RTehloi0=)
2: AEeBq3XFkbn8pyHJEeb3isWEmIA.roa (hash: gkDvS6y+2rhPnDPFUFxFEdfe5IUZN7R+qqVkzML65dE=)
3: EJPyee4QWkKrpHzgKl_UfRlSQ4k.roa (hash: UftVkTCY6ZFe1hDTUIcqILq/ecU3GKzDfqSPxTid57Y=)
4: IIIXZtSualOwJL3v5moeDxfjfvI.roa (hash: 7rMLEXqsuij2IE2v0cNkJojz7+yY0hLnMUTfWDw4n9Q=)
5: S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa (hash: w5hcZAmF4buAGhakgXjQA0sa4vpLG5fCK2GR/ajM+u0=)
6: dNXYaX82NX51pSFvpQpCqsG2lPo.roa (hash: 35cWo5gZ7UeSrOUHr9i+uJyPsLCbl8OtXgjF+qTOIsg=)
7: sCJf0DWnzmSnyIveca61YPNIOXQ.crl (hash: w1VFpURZcQi5aPsX1TtXdjD0VkGM5WJR0TFvyPouV1w=)
8: wJQhpUcYRE9YbrS1hrhEwceSpsw.roa (hash: pKy+CJ0dPgWvUI++SXNGLH/W/2Tj4mADcaq6t4MuXsE=)
9: wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa (hash: VxkO6fBbTYMBO4jXH/JD3dN5+ZLMhiKDYjCspmghV5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:37:1b:c6:3e:ae:01:74:33:ef:b1:5f:5f:fc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: Jul 24 03:00:29 2026 GMT
Not After : Jul 25 03:00:29 2026 GMT
Subject: CN=3c0f0e78bbc4de77f4b3c39ec13d53cb787d2157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:33:88:84:ba:a7:c0:08:e8:d9:20:ca:6c:
3e:b4:c5:98:d0:f1:f6:2c:31:fa:e4:f5:ee:d7:93:
20:c3:f2:76:87:4b:6a:87:05:50:cf:12:5b:31:12:
77:ed:37:73:30:c0:57:ac:d9:52:64:f7:9c:64:1c:
34:44:d8:ab:ad:28:83:8b:3e:ae:3f:86:d7:1d:76:
fb:3d:c6:f7:50:75:c7:91:b0:bd:3d:bf:2d:be:b0:
f7:28:e9:e0:6e:cb:c2:aa:51:bb:52:dd:8a:99:00:
40:14:e7:f1:17:57:df:93:a9:cb:68:f6:72:92:f9:
f0:ea:ad:e0:79:3f:f7:37:70:8c:ac:a3:56:9f:15:
18:fd:70:c9:38:cb:aa:a8:21:4f:0d:10:e3:01:de:
0b:1e:69:9d:ac:ce:b3:5c:e4:3b:3d:00:b3:b2:68:
b6:0c:e6:7d:44:88:63:3c:28:5d:77:b9:e9:f9:44:
e3:b7:d1:2b:c3:72:c0:6b:6d:07:7d:42:d7:c5:b6:
fe:c7:08:a8:75:b0:52:d8:06:5a:0c:f3:11:c1:3c:
f4:9b:df:e7:6f:0a:20:52:60:57:b3:35:ae:46:17:
c5:fb:fe:bd:cf:50:fb:c3:17:c4:46:47:3a:c0:f0:
c9:61:9c:4a:23:20:f1:d7:94:03:8f:82:23:02:df:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0F:0E:78:BB:C4:DE:77:F4:B3:C3:9E:C1:3D:53:CB:78:7D:21:57
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7b:a6:a8:17:d8:cf:da:ef:2f:77:77:f9:0e:98:b6:c3:7a:
47:6d:bf:21:1f:7b:67:3b:e0:56:c8:d2:55:b3:ac:24:f8:da:
e3:7a:7e:b0:c9:e6:1b:d6:bc:74:45:af:d2:b5:8b:fc:c9:48:
60:d5:11:2d:22:5f:02:2d:8f:20:c5:c9:8e:7c:d2:17:8a:f9:
4b:5f:77:25:e5:64:f7:44:35:25:7c:b7:5d:30:3a:cd:64:00:
4c:80:79:1a:fd:bd:7f:70:99:24:7e:8b:e6:e4:6f:d6:3a:7a:
f4:e5:ad:33:09:d4:ec:99:42:68:03:0d:3a:db:5d:a1:16:0e:
c3:20:c9:84:d6:9d:b8:e6:52:12:a3:17:20:5f:a0:e8:98:4b:
d1:f7:19:53:53:23:a8:a5:82:0d:dc:0d:df:33:4a:57:26:c9:
d1:32:5d:2c:fe:a9:10:54:54:40:c4:7d:6a:42:12:35:00:04:
fe:87:a1:f9:cc:57:76:37:f6:66:1f:9d:b0:4d:4a:82:df:ab:
66:05:6f:c6:5b:61:8f:b3:64:d7:7a:c8:bd:be:67:e1:b2:bf:
e1:7d:3a:07:01:3b:ea:bc:bb:71:f2:1d:41:b7:41:40:a7:88:
cd:cd:e3:b7:90:2e:24:fe:a5:df:8c:25:5b:83:83:0d:85:29:
c4:1c:36:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:57:07 2026 by rpki-client