
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
File: sCqa8vxf6TxDFIqssTxRvpBMjkw.mft (raw, json)
Hash identifier: eiduifRIAFKdo91dghy76vgwL/+sfewj+Hkm8UHybbk=
Subject key identifier: 4B:F7:30:66:89:53:A2:28:08:70:88:55:25:C3:61:9D:B0:DF:30:A4
Authority key identifier: B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
Certificate issuer: /CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Certificate serial: 01A0D64B7E4D8596681C3D301FCB6F3835EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
Manifest number: 08A9
Signing time: Fri 25 Sep 2026 02:01:06 +0000
Manifest this update: Fri 25 Sep 2026 02:01:06 +0000
Manifest next update: Sat 26 Sep 2026 02:01:06 +0000
Files and hashes: 1: sCqa8vxf6TxDFIqssTxRvpBMjkw.crl (hash: 6+NulbC7U2e86Xud202fHNfOBZjUAuuIQBhXAJF3OJA=)
2: y0urSuZI8k80qDTQJ3kG5eohDE0.roa (hash: Y9liF5XubPckrTgkSr37iUFqjTSMFsZSlRvzu6Hk6eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:7e:4d:85:96:68:1c:3d:30:1f:cb:6f:38:35:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Validity
Not Before: Sep 25 02:01:06 2026 GMT
Not After : Sep 26 02:01:06 2026 GMT
Subject: CN=4bf730668953a2280870885525c3619db0df30a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:6f:2e:ee:5f:42:e4:1a:7e:8b:db:3b:e4:
21:8c:8f:ab:f0:c2:48:b8:08:92:5e:01:d8:29:0d:
19:8b:38:49:1f:db:91:95:6b:c5:bf:7f:62:6c:c2:
db:65:f3:3b:c0:b7:cf:00:df:0d:c3:8c:ac:57:0a:
d8:39:65:38:70:1d:9a:6b:42:f4:51:dc:93:95:d5:
4f:25:d1:11:d7:b7:1e:5a:2c:83:5e:35:45:06:98:
96:cc:6d:f8:f7:aa:7a:da:6e:cd:25:82:6b:ae:ab:
9f:ca:79:b2:32:7a:a6:e8:1d:09:fc:e8:22:cb:2a:
44:2c:f4:5c:cc:74:f4:51:49:10:14:78:5b:a7:e7:
59:f9:60:34:b3:e1:ec:8a:81:1c:ca:f6:f6:5e:33:
17:2c:50:9b:6f:79:7a:6f:8b:cb:64:d3:50:80:c8:
2e:88:40:a3:59:53:53:b6:3f:68:c5:dc:b3:14:17:
a0:27:5c:d2:e0:0c:d7:dc:6e:61:a2:27:ff:9f:d3:
dd:39:35:d3:af:3f:81:c5:35:b0:78:44:3f:05:01:
25:a4:98:17:ef:50:fb:6c:8c:0b:89:10:d8:34:c1:
87:47:a0:82:48:a4:65:6a:4a:4c:d1:db:5c:ca:71:
7d:37:c0:6c:e8:33:21:3e:b3:2e:5a:a9:85:54:72:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F7:30:66:89:53:A2:28:08:70:88:55:25:C3:61:9D:B0:DF:30:A4
X509v3 Authority Key Identifier:
keyid:B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c9:1e:59:31:08:23:d1:22:4e:bb:f8:77:2e:f4:37:90:9c:
d3:92:e1:e1:b2:0e:c6:6f:a9:12:9f:ea:31:f7:56:73:40:ef:
b4:33:a0:9f:6b:84:8a:bf:29:09:c3:0d:99:8d:4a:81:41:17:
7c:d0:5a:1e:40:94:31:73:e5:96:23:d6:2a:db:67:5a:04:e6:
47:91:33:2d:35:93:e9:18:c2:0e:8a:3b:54:5a:ba:6f:b2:be:
da:db:18:0d:d3:dc:6f:3a:48:33:af:11:a0:1a:33:5c:83:ec:
5a:5d:3a:a9:5b:b8:73:bc:a8:2f:5f:23:1c:a2:19:f2:a7:cb:
f8:a3:47:53:21:df:4f:97:94:63:9d:19:7d:35:67:ce:65:93:
c2:9a:d9:c0:2c:dd:c1:5c:d2:08:f7:0a:cb:e9:e2:9a:38:3c:
6d:fd:40:50:e0:03:04:3e:6b:00:13:26:4a:1e:03:66:d5:e9:
78:2c:9e:43:50:f3:86:36:f5:e8:7c:db:dc:62:78:93:6c:9d:
c4:4c:cf:99:fa:56:96:4d:4a:b2:d9:d1:a6:84:de:4a:32:5f:
42:c5:5c:cf:37:34:ef:06:10:9a:d5:d7:f4:26:8a:84:54:83:
1c:00:84:83:3e:37:19:6f:a4:f7:8e:2c:bf:e3:15:96:7e:21:
06:7f:e6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:02:59 2026 by rpki-client