
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: eTYDhGqQ6NBLy/lCVdEjH9aQmSBd6Vb/QHbd4gtqYiY=
Subject key identifier: 9C:1C:A6:09:2E:5F:FE:CA:F9:36:AD:6F:29:D5:5F:9B:BF:BF:CF:88
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 019D284DC60F007DAE3379B2CD9F2233C9E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 081D
Signing time: Thu 26 Mar 2026 04:01:18 +0000
Manifest this update: Thu 26 Mar 2026 04:01:18 +0000
Manifest next update: Fri 27 Mar 2026 04:01:18 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: bjnuAE3BIQJQGkHBAo8IzZKOwc9gIrspyvDTKuh7oXs=)
2: UQfa-j4WEyyr4Tqn408a6pJMbHc.roa (hash: EJyCOkuGunERLH3RxVLohocub+Eh42R4y/uoWugcYsM=)
3: a1xgjXAhseZu7nFnf5HzZCndeXI.roa (hash: 3IPBZUSGpWqKuOh5YxmXZBNnrJCY4hG1fNK2MQxNxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c6:0f:00:7d:ae:33:79:b2:cd:9f:22:33:c9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Mar 26 04:01:18 2026 GMT
Not After : Mar 27 04:01:18 2026 GMT
Subject: CN=9c1ca6092e5ffecaf936ad6f29d55f9bbfbfcf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:25:b3:df:13:77:ca:dc:2b:3e:1d:ab:75:0e:
16:12:a6:51:46:ce:bf:69:82:63:cb:70:22:13:83:
52:8d:97:a8:59:9a:f6:c8:c7:0e:df:1f:52:92:97:
dc:32:fa:8f:b2:2e:64:36:df:20:ce:33:d0:24:b7:
fe:ec:26:42:bf:f5:f8:0d:45:ce:14:e1:a5:4b:0a:
e1:ac:7c:37:82:3a:18:7a:25:95:5a:76:fa:6c:c8:
42:31:65:3c:46:6e:50:23:a9:ef:43:c7:35:c5:82:
bc:33:b2:08:ed:2e:bb:24:d0:31:73:5e:78:53:47:
fc:f3:94:60:6d:36:7a:e9:b6:b4:81:be:f8:f6:35:
4d:d6:5e:92:4d:3e:71:5b:9e:f4:f7:8d:cd:5b:cc:
f1:e2:c9:48:c4:f4:05:4e:a4:4e:2a:f1:7d:12:06:
a4:ab:46:e8:35:26:70:f2:3e:e7:c9:97:f1:5a:d6:
d0:fa:3c:a5:2b:90:04:3a:e4:67:4d:e6:81:b2:f7:
45:15:9e:3c:6f:9d:3d:d4:67:bd:3d:69:e7:e3:37:
5a:62:9d:00:5f:77:f2:26:4f:72:3b:62:ac:c3:d3:
6d:27:0c:1c:51:b2:2f:5c:b0:39:b6:bc:88:94:20:
74:15:38:57:c2:a9:1a:14:de:17:0d:04:01:27:41:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1C:A6:09:2E:5F:FE:CA:F9:36:AD:6F:29:D5:5F:9B:BF:BF:CF:88
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5f:9f:73:86:b2:02:4d:c0:63:94:85:a6:1a:b6:73:b7:8b:
5a:0a:95:56:cf:3a:09:fa:82:53:cd:99:db:1c:29:c6:7e:63:
dd:5a:01:e6:10:92:fb:11:79:8f:6c:0b:53:29:7b:01:10:fa:
51:29:d0:76:3c:16:0a:d2:53:6e:a3:cd:28:ff:31:19:a0:4e:
e2:18:92:ed:a9:34:1e:1a:98:8f:90:f5:03:fb:a1:88:c0:bf:
0a:a8:43:a7:90:5a:ab:4b:a0:0f:41:28:65:9b:8c:70:fb:59:
dd:4f:31:d4:78:d9:2d:f7:9d:74:db:d4:1c:d2:88:e0:92:5c:
98:18:70:c0:59:2b:65:78:54:08:57:08:5b:34:b7:b0:22:ca:
75:d3:6f:83:e5:72:19:c5:97:11:97:60:3e:39:45:ba:a5:dc:
4c:b1:4d:6a:d4:a0:7d:ed:d3:01:1a:33:fa:01:56:6f:d2:49:
31:74:59:26:8e:eb:5a:f1:1e:11:9a:e3:25:93:35:3c:d1:35:
a0:a2:bc:79:bf:6c:f0:4b:ce:ad:6a:c3:65:02:85:06:b6:ac:
2e:9d:a4:db:5f:01:91:a4:ff:71:f0:6b:0a:51:91:09:8c:af:
e4:3f:4d:04:bd:3e:ef:e1:47:5d:4c:8e:b3:c6:a8:f2:fb:8e:
d8:c1:cd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:29 2026 by rpki-client