Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
File: scIHU2wjS4vDrJgwEUMbp3Q51jc.mft (raw, json)
Hash identifier: MKWso7+KqVHXp3jt2u/nbT1+5Z8lQBM6M/OYIAO+dwQ=
Subject key identifier: F5:1E:EF:E3:B9:3F:6C:95:A4:1F:B8:DB:14:A7:29:B4:E8:D2:2C:D7
Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
Certificate issuer: /CN=b1c207536c234b8bc3ac983011431ba77439d637
Certificate serial: 019F129C59BFEF867536339B545AB7A63B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
Manifest number: 0417
Signing time: Mon 29 Jun 2026 09:01:04 +0000
Manifest this update: Mon 29 Jun 2026 09:01:04 +0000
Manifest next update: Tue 30 Jun 2026 09:01:04 +0000
Files and hashes: 1: XrsyhJgNUO0sCjMskJID68dkack.asa (hash: e8Ve4gNOJ5qd29TIMwDD8LZbjGc8czCkaqt7UGyLIis=)
2: scIHU2wjS4vDrJgwEUMbp3Q51jc.crl (hash: 23q0MJysMQ26pdTESrsYD8FWTC70zXl8W7kaiF8IaTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:59:bf:ef:86:75:36:33:9b:54:5a:b7:a6:3b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637
Validity
Not Before: Jun 29 09:01:04 2026 GMT
Not After : Jun 30 09:01:04 2026 GMT
Subject: CN=f51eefe3b93f6c95a41fb8db14a729b4e8d22cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:bb:d0:e7:3b:5c:a3:5c:b2:fa:7d:51:87:
f0:17:21:f4:09:8b:c5:2b:d1:3c:f3:4d:02:66:25:
9b:0a:02:4b:87:8e:52:72:d5:e0:24:ee:20:70:bd:
4b:a6:26:47:57:b3:c8:76:7e:78:1a:b6:b4:20:6a:
76:25:72:40:bc:5b:f2:d1:02:76:54:64:c9:b8:cf:
cb:7b:b7:74:43:2c:ca:77:29:99:f9:5a:10:14:16:
32:4a:0c:37:19:25:fd:1e:53:79:84:93:66:c8:ba:
32:17:02:6a:af:04:a6:c6:05:39:c0:ec:b0:a0:eb:
46:71:34:e7:2f:d2:34:ee:29:b9:c3:61:b4:fa:de:
48:4b:1d:06:81:ff:a3:f1:46:63:63:e6:32:98:13:
a9:12:be:90:d9:64:b3:92:0d:77:f2:0f:a6:76:a4:
5d:bd:e0:bb:02:93:06:7e:9e:a6:d6:fd:a8:3d:a1:
be:b7:43:80:37:cf:4e:9e:88:39:38:a8:2a:83:1c:
63:76:1d:a9:9e:03:60:6c:d8:1f:35:c5:bd:3c:2e:
0d:96:57:40:f8:99:97:00:95:18:86:52:3e:f8:ef:
cb:ce:d2:fd:df:00:2f:ea:2c:07:6b:ad:90:f8:81:
1d:57:72:cf:2f:47:8f:03:b0:da:88:5c:95:ef:fc:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1E:EF:E3:B9:3F:6C:95:A4:1F:B8:DB:14:A7:29:B4:E8:D2:2C:D7
X509v3 Authority Key Identifier:
keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9b:f9:69:ac:f2:e3:fe:3f:e2:74:b3:02:f7:c8:f0:d9:12:
87:a4:83:fc:92:a4:d9:5a:38:a5:3e:d1:79:69:92:f4:40:5b:
dc:30:e6:d4:76:40:27:f8:85:d1:b3:b0:cd:70:1f:76:d3:32:
a0:cc:b4:b7:b7:68:01:af:5c:eb:6f:17:26:e3:53:68:7e:9d:
53:f0:b3:a2:4a:d9:c1:5f:43:d6:01:aa:0d:c2:a3:26:b2:37:
87:c3:56:67:67:dc:58:c6:f6:b6:f4:0f:83:35:1f:84:68:74:
2f:9f:5a:e8:8f:ff:17:6d:d1:09:38:f2:61:5e:01:96:a5:d3:
95:5a:d6:35:01:cb:d5:50:1a:f7:5b:e6:1d:46:5b:bd:da:d7:
4b:fc:0e:c8:05:e0:89:6d:c1:ad:d5:21:cf:42:d2:a4:1a:92:
31:d9:f6:aa:68:55:c0:e7:87:cf:60:1b:9e:fc:ff:f3:3b:03:
32:9e:7a:c1:10:d9:82:68:a2:c5:e4:e5:0f:30:09:fa:8a:e0:
0c:ae:ad:9d:b9:d2:8b:cc:c7:40:9d:1f:57:24:46:6b:12:27:
8b:66:b8:3c:6f:e3:70:ea:8b:e6:c8:ab:be:1d:ee:5a:13:c3:
43:54:42:a3:9d:2f:02:cf:81:56:ec:33:aa:f0:4f:d2:33:4e:
3f:19:86:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:40:07 2026 by rpki-client