Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: pjqof5bMPBg9SVbqtecgzG4YOFPHnMKOb/Xhzx0lpS8=
Subject key identifier: 29:B9:89:7E:CE:7E:80:5F:07:EE:FA:93:5C:71:3B:9C:05:D4:2B:60
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 019E1D90BE224B8A19078D284C67F1C55FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 089C
Signing time: Tue 12 May 2026 19:01:25 +0000
Manifest this update: Tue 12 May 2026 19:01:25 +0000
Manifest next update: Wed 13 May 2026 19:01:25 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: t/u50+vi3Ph8NviGbknPoOsI2JshpVc9x7AAGBy5aMA=)
2: UQfa-j4WEyyr4Tqn408a6pJMbHc.roa (hash: EJyCOkuGunERLH3RxVLohocub+Eh42R4y/uoWugcYsM=)
3: a1xgjXAhseZu7nFnf5HzZCndeXI.roa (hash: 3IPBZUSGpWqKuOh5YxmXZBNnrJCY4hG1fNK2MQxNxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:be:22:4b:8a:19:07:8d:28:4c:67:f1:c5:5f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: May 12 19:01:25 2026 GMT
Not After : May 13 19:01:25 2026 GMT
Subject: CN=29b9897ece7e805f07eefa935c713b9c05d42b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4a:07:cd:89:41:dc:ae:7d:81:94:7b:51:0b:
ec:59:d3:2d:af:e2:72:3b:c9:a5:c5:40:f3:cd:b5:
6b:b4:d8:ae:05:bb:09:09:5f:6a:63:3e:6f:23:43:
0a:43:ab:78:5c:86:27:23:c9:93:8a:d4:f0:c8:ab:
e3:1f:07:a9:36:97:ca:b1:b4:da:ad:25:19:60:01:
95:0e:a1:3c:6b:e9:22:60:5f:ae:c3:91:3e:83:24:
71:cf:6f:a4:37:ac:80:01:3f:08:ee:83:cd:55:2c:
1d:7b:94:27:0c:57:20:aa:e3:8d:45:97:6f:a7:5e:
b3:34:7f:5a:90:ff:3b:46:4b:58:5d:4b:51:c5:e2:
a6:61:bb:75:f0:45:1e:17:0e:86:38:61:79:dd:d7:
dd:46:dd:ae:49:36:a4:05:54:d5:a1:ab:1a:90:f0:
cd:5b:44:d2:3a:93:68:66:76:7a:78:f6:e6:82:2f:
da:64:fd:fc:f5:24:2d:3a:2d:a6:45:dc:0c:c4:88:
93:0e:eb:ac:3e:cc:b9:fe:b5:28:d9:e1:ec:59:94:
02:cf:b0:ef:09:24:bf:98:74:2b:95:4e:74:ff:18:
4c:b0:81:f0:c7:21:bb:ab:af:91:97:d1:a5:2e:7f:
2a:c2:9e:d6:38:44:25:35:60:2c:66:4b:58:d2:fb:
1b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B9:89:7E:CE:7E:80:5F:07:EE:FA:93:5C:71:3B:9C:05:D4:2B:60
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:dc:cb:bd:de:1b:78:b0:5f:c8:00:92:3f:44:2e:f8:00:d0:
21:cc:c9:9f:13:09:c4:d7:07:46:43:e1:8a:cb:c9:a8:22:08:
fc:74:af:7e:34:98:80:5e:e5:e5:05:61:9b:f1:75:96:2c:20:
4d:7b:2d:d8:68:e4:d0:23:45:89:dd:b2:a4:53:c1:2f:5e:65:
6a:f8:42:df:24:ee:6b:c7:62:aa:18:de:5f:0e:72:f5:60:b5:
84:d2:d0:c4:2a:8e:0f:7d:39:93:19:d1:0e:7a:e4:42:6c:02:
05:ab:41:65:f9:4c:da:03:00:2d:3b:6a:4d:53:d2:43:1f:7c:
00:46:b4:57:fe:88:fb:56:d5:32:87:e8:6f:4f:32:52:56:8d:
ce:ed:2c:a5:8a:fd:7e:cd:99:7e:ce:c3:6a:fc:8c:6c:98:5e:
93:97:a7:40:8f:4a:bc:b5:de:57:86:0c:9d:34:6f:e4:9b:97:
19:aa:02:4b:ea:a4:ee:c5:e2:67:f4:f7:ef:89:0e:3d:ca:3d:
70:9c:88:92:46:1f:5a:12:8d:ed:2f:59:c8:19:fd:bf:93:9a:
d8:ba:f1:40:d3:cb:d1:9f:a8:e6:3f:9c:b4:a1:d1:40:83:43:
cc:58:85:d3:c3:a3:dc:03:ba:09:41:34:fa:db:8d:b1:d3:da:
f7:c7:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:01 2026 by rpki-client