Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: /XD2B/44HB9utFjG3QbqylUh/ER5UXxjCi3EElZFvk4=
Subject key identifier: 1A:03:98:A0:FE:89:AF:18:14:B0:CD:40:8D:E2:B7:AE:51:C8:F3:24
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 01A0CEFFD4938F087407CB585A830B3EB764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 0A01
Signing time: Wed 23 Sep 2026 16:01:07 +0000
Manifest this update: Wed 23 Sep 2026 16:01:07 +0000
Manifest next update: Thu 24 Sep 2026 16:01:07 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: rzcbRvIT0grgvE8UYtmeKdEa8MazFTsCrbYs8AshN7Y=)
2: UQfa-j4WEyyr4Tqn408a6pJMbHc.roa (hash: EJyCOkuGunERLH3RxVLohocub+Eh42R4y/uoWugcYsM=)
3: a1xgjXAhseZu7nFnf5HzZCndeXI.roa (hash: 3IPBZUSGpWqKuOh5YxmXZBNnrJCY4hG1fNK2MQxNxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:d4:93:8f:08:74:07:cb:58:5a:83:0b:3e:b7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Sep 23 16:01:07 2026 GMT
Not After : Sep 24 16:01:07 2026 GMT
Subject: CN=1a0398a0fe89af1814b0cd408de2b7ae51c8f324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e9:00:06:59:8f:26:c5:d4:2b:08:72:ba:62:
9f:a9:12:6e:15:5a:2f:82:11:ce:79:d0:fd:44:1f:
71:2c:a1:58:84:d3:09:e1:f9:6b:28:9a:05:ba:8f:
0d:0b:1e:a8:15:fc:cd:16:59:4c:0e:25:e1:d6:85:
eb:ac:15:c9:4c:38:0a:ed:31:87:93:43:fa:f2:60:
69:d7:17:d3:02:70:2c:3d:11:f9:8c:42:18:4c:df:
95:6c:c3:d2:3c:83:c7:69:89:15:ac:73:19:2a:35:
65:45:94:98:cb:90:08:12:cf:bd:ce:85:a0:8a:a0:
93:d0:ab:42:0e:ce:0e:9b:82:e0:f1:35:69:74:87:
bf:c8:e2:77:22:2a:5d:91:63:b5:42:a8:dd:de:a3:
52:d3:3b:7b:3b:86:06:ab:1b:63:29:a6:40:e6:d0:
40:6f:a9:cd:33:2d:15:c9:cd:b8:d7:37:27:1e:b8:
1d:c1:7d:6c:14:fd:25:93:e5:1c:91:89:6f:23:93:
22:fb:dc:69:e7:b8:5e:aa:3b:56:bd:06:94:a3:e3:
96:33:41:9f:7b:bf:a6:5d:33:cb:83:61:b0:3f:f8:
b2:e6:ab:19:c5:73:03:da:74:76:17:54:4f:71:73:
f3:71:a9:59:31:95:e0:1a:af:72:b9:f0:d0:45:b9:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:03:98:A0:FE:89:AF:18:14:B0:CD:40:8D:E2:B7:AE:51:C8:F3:24
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:07:ee:50:33:9a:66:70:42:1a:5c:ee:4c:8a:5d:d3:40:28:
d9:ae:0c:ea:3b:da:33:ba:b0:fe:f0:e2:84:e4:7a:9c:23:37:
cb:f1:76:3e:38:f5:76:43:c9:76:e1:f5:a0:ff:0a:14:ae:69:
45:90:22:63:39:6a:f3:76:5c:90:87:d9:f7:94:ad:8a:a6:ee:
67:9d:38:53:94:36:c0:7a:21:78:7c:c2:d4:d4:99:34:da:d8:
5f:46:31:05:69:9f:4a:5f:b4:58:68:9e:42:67:52:5e:1e:82:
1f:1f:83:d2:70:b5:fb:92:08:f2:d6:cf:72:11:af:ba:13:20:
99:40:39:0b:d4:0d:4a:4d:5d:97:e5:cf:cc:eb:de:64:75:0d:
0e:02:f5:65:1b:c6:bb:51:8e:71:fb:54:76:df:28:74:f9:d6:
20:dc:e5:9d:59:f7:3b:cc:dc:8b:40:4e:5f:8f:e0:fe:ad:5b:
16:2a:3a:b8:67:36:03:b2:92:a1:ff:06:c7:7a:94:f3:8b:4b:
72:71:59:2a:55:ed:11:e9:d7:e5:5c:3d:19:a7:04:86:c6:ca:
d0:11:83:61:5e:da:22:00:48:01:a7:54:2b:7f:56:e5:a7:3a:
c7:67:e6:1b:f5:f8:84:7b:d1:cf:d1:55:78:22:99:1f:3f:41:
d1:7f:5f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:32:38 2026 by rpki-client