Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
File: sCJf0DWnzmSnyIveca61YPNIOXQ.mft (raw, json)
Hash identifier: GVkvcTO/2+hyfc7fp7c07pfqxev5pEBUN2S0RyIjmw4=
Subject key identifier: D2:23:37:3D:CE:29:73:14:24:A8:E6:8E:4B:08:51:27:90:B7:A9:5E
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 01A0CE5A9C395449338EA7A3C3C0FEF69A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
Manifest number: 0390
Signing time: Wed 23 Sep 2026 13:00:39 +0000
Manifest this update: Wed 23 Sep 2026 13:00:39 +0000
Manifest next update: Thu 24 Sep 2026 13:00:39 +0000
Files and hashes: 1: 0CCIV1hEHH3hY6pokk9jTnU8V30.roa (hash: GgaU+5w/qihCGGu/5k2TUotqsGtIXN8Ll7E8ReKlxoQ=)
2: 75dJ9l9pm2mLQKlmsqkMPbP5nLU.roa (hash: y9JQO9ERriwN1YTQ2JmQZB4kivefmPeXhn7RTehloi0=)
3: 7k8If11aObVXGmnKtKwIcne1q0o.roa (hash: YMdPgL5RHn3ZUXXjNuLlB+pdjKmlISEakxjgynyqsGg=)
4: AEeBq3XFkbn8pyHJEeb3isWEmIA.roa (hash: gkDvS6y+2rhPnDPFUFxFEdfe5IUZN7R+qqVkzML65dE=)
5: EJPyee4QWkKrpHzgKl_UfRlSQ4k.roa (hash: UftVkTCY6ZFe1hDTUIcqILq/ecU3GKzDfqSPxTid57Y=)
6: IIIXZtSualOwJL3v5moeDxfjfvI.roa (hash: 7rMLEXqsuij2IE2v0cNkJojz7+yY0hLnMUTfWDw4n9Q=)
7: S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa (hash: w5hcZAmF4buAGhakgXjQA0sa4vpLG5fCK2GR/ajM+u0=)
8: sCJf0DWnzmSnyIveca61YPNIOXQ.crl (hash: fPmmM2BJ1xquOC4HGtWsg2yKH9FwkF+/FLOfd2U7ItY=)
9: wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa (hash: VxkO6fBbTYMBO4jXH/JD3dN5+ZLMhiKDYjCspmghV5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:9c:39:54:49:33:8e:a7:a3:c3:c0:fe:f6:9a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: Sep 23 13:00:39 2026 GMT
Not After : Sep 24 13:00:39 2026 GMT
Subject: CN=d223373dce29731424a8e68e4b08512790b7a95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:e8:fa:64:76:a3:0b:96:38:be:6e:96:3b:
77:62:31:cb:c8:7c:94:e7:76:ca:18:ab:d7:0b:1c:
fd:bd:7f:bf:cc:6e:26:97:52:9e:53:5c:a7:a5:49:
79:db:cc:32:7a:ca:9a:8d:d1:52:48:1e:a7:94:9e:
10:6f:9b:ae:4f:ad:ef:34:93:66:5b:16:3c:df:e2:
aa:8d:8f:d3:e0:ff:43:e1:58:6e:cf:0f:05:11:8b:
70:93:da:69:10:d0:a1:b7:48:dc:44:f5:34:bb:52:
f8:ee:e7:06:80:7b:57:4a:85:04:dc:b2:de:2f:1a:
e6:f1:ec:02:d9:36:db:91:26:53:8b:ff:7c:05:5e:
8e:57:39:0a:72:9d:a5:80:6f:d7:03:99:68:b6:20:
fc:73:b6:20:17:36:2b:4a:f1:81:7c:e2:54:2a:15:
97:48:17:48:1f:e7:78:90:56:90:42:39:9c:1a:37:
45:82:9a:80:25:09:bc:77:4e:52:d3:93:27:93:cc:
a9:f4:25:11:ff:62:64:84:39:f7:3c:b2:33:c5:d1:
e1:1f:19:6c:b9:fd:73:88:c4:59:db:a8:37:4a:58:
6f:d4:be:a8:5e:73:16:b8:4c:65:7b:62:8b:55:8b:
a8:71:3e:01:6a:9e:86:e8:c6:ab:24:8d:23:2f:2c:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:23:37:3D:CE:29:73:14:24:A8:E6:8E:4B:08:51:27:90:B7:A9:5E
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:38:56:ea:ff:8c:f0:de:0c:66:e7:97:84:d3:c7:4d:77:36:
d4:52:bb:c1:a5:69:30:9d:ea:5b:59:5f:c1:60:d8:4c:1f:20:
d4:82:9b:94:cd:7f:90:d9:2d:17:0d:bb:a8:87:f0:8a:80:f1:
c1:39:0d:c5:a7:6c:e3:12:92:e4:fd:a3:9b:65:7c:9d:81:13:
a2:b1:02:15:93:17:df:95:38:12:2d:e1:fe:b3:ac:21:03:a4:
89:b9:9a:82:2c:cf:3b:36:62:91:3e:3a:3b:45:b7:da:ee:1b:
20:9e:33:20:4b:47:4a:e6:02:68:bb:bb:de:88:84:13:bd:35:
50:b4:df:cc:f4:72:ee:6e:56:b8:98:e7:d9:45:52:0f:f4:d1:
69:9a:aa:3e:40:0e:cf:53:cb:6f:d1:93:6a:cd:b3:a1:ff:fe:
f8:21:70:a6:c9:a9:18:1a:5c:03:67:5e:1d:c5:43:6d:e2:47:
32:c8:ff:f5:19:ea:e2:2c:14:bf:ad:7a:a4:42:55:08:0a:62:
ce:50:2f:1a:b3:b1:c9:8a:c3:78:1a:cb:14:d8:72:59:13:e6:
0d:79:e5:9d:2f:7a:ea:67:e1:4f:2b:b4:63:25:b4:c8:80:28:
fa:ba:55:13:7f:7c:a5:2a:e8:b6:13:35:ea:46:ee:38:7b:ac:
5b:05:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:48:27 2026 by rpki-client