Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
File: scIHU2wjS4vDrJgwEUMbp3Q51jc.mft (raw, json)
Hash identifier: NV4vcLDnqTL+faSSeslPVSFAEDgujZP7OA3SbHVhhJg=
Subject key identifier: FB:FD:69:6A:BE:98:A5:A5:51:4A:95:68:68:9D:69:B7:F0:DD:40:1E
Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
Certificate issuer: /CN=b1c207536c234b8bc3ac983011431ba77439d637
Certificate serial: 019D3977F50A19698F0797F361348E1A3896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
Manifest number: 0322
Signing time: Sun 29 Mar 2026 12:00:55 +0000
Manifest this update: Sun 29 Mar 2026 12:00:55 +0000
Manifest next update: Mon 30 Mar 2026 12:00:55 +0000
Files and hashes: 1: XrsyhJgNUO0sCjMskJID68dkack.asa (hash: e8Ve4gNOJ5qd29TIMwDD8LZbjGc8czCkaqt7UGyLIis=)
2: scIHU2wjS4vDrJgwEUMbp3Q51jc.crl (hash: Gn+a+wO2r9ahlG42M1VhwYK8i/kuw0nw/RlV+5/iymA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f5:0a:19:69:8f:07:97:f3:61:34:8e:1a:38:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637
Validity
Not Before: Mar 29 12:00:55 2026 GMT
Not After : Mar 30 12:00:55 2026 GMT
Subject: CN=fbfd696abe98a5a5514a9568689d69b7f0dd401e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:37:65:fb:cb:f7:25:19:55:96:56:12:ce:
5b:51:a2:f2:25:43:c0:c3:39:88:33:89:15:d1:02:
ab:73:5a:f0:e9:00:6e:91:d0:e6:d1:67:33:14:f5:
7a:98:a7:19:d1:75:68:69:7d:2f:79:b4:7e:19:f9:
eb:be:3a:ac:c8:a9:94:18:a2:aa:6c:90:aa:7b:84:
74:43:88:5c:35:e2:49:c5:91:cc:0e:89:c8:3f:95:
17:f3:d6:4b:21:20:73:6d:1a:11:11:ce:47:9d:31:
bd:71:98:28:6b:37:c2:51:3e:30:49:59:34:f3:4a:
a0:69:74:c0:da:bc:9d:cd:a7:6c:d0:ab:69:46:e0:
b2:93:77:d0:5d:5e:ba:37:a1:64:33:4c:3e:ba:5e:
76:e1:fe:da:2d:99:ed:28:00:5f:dc:1a:39:c0:1e:
39:44:de:a9:69:ec:07:0c:8a:33:04:c4:21:44:c1:
74:d6:1c:d3:2c:03:df:17:47:d8:9f:0a:ce:38:e9:
f9:ec:0c:28:d7:ca:70:f6:b2:7b:b2:21:9c:cc:79:
15:74:6a:27:b0:18:b6:d1:73:69:73:b0:af:93:57:
06:16:62:dc:f2:7e:9a:5f:74:58:95:62:37:ec:7f:
96:5f:a7:59:ea:b2:1a:fc:0e:6e:17:c8:40:cf:24:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FD:69:6A:BE:98:A5:A5:51:4A:95:68:68:9D:69:B7:F0:DD:40:1E
X509v3 Authority Key Identifier:
keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e6:b8:9c:7e:07:e1:10:aa:a3:a7:6e:5b:ae:5f:d3:62:9e:
bb:f7:1d:7d:1d:d6:50:3c:24:22:e2:0e:88:9f:5a:4a:9a:f1:
77:34:8d:ea:71:d6:da:2a:6d:c5:03:3c:b3:bf:88:c5:d2:26:
59:a6:2e:fd:7a:80:27:b7:60:9f:11:c2:4e:87:02:c9:ab:ec:
3d:5a:ae:a0:da:67:6a:df:8d:e7:66:d8:53:b7:4c:02:c9:28:
b4:12:3c:48:c8:a6:2f:f4:96:6d:e1:a8:be:98:ec:6c:ee:16:
0d:6a:20:e6:13:d6:b8:68:40:1b:32:0f:a5:84:37:dd:bd:8c:
42:1f:91:96:28:4b:85:36:89:48:67:5e:fa:43:b4:50:d5:e2:
20:6b:e8:22:e2:e9:e8:ea:3f:3a:99:70:2c:37:75:ab:ce:35:
1e:7a:96:c8:7b:6e:b6:64:1f:64:29:c0:10:33:1f:fa:d6:8e:
d8:ef:9e:5a:c5:c5:6b:fa:26:4a:a8:ad:fd:cc:67:ac:1c:35:
99:01:00:ce:52:47:a6:9f:8f:a2:af:95:54:de:cf:2e:16:03:
81:20:8b:86:cc:39:2c:b1:2d:8f:a7:e5:b9:9b:92:bf:0c:17:
3b:18:24:78:33:36:0f:24:29:a8:f5:d9:ae:38:dd:f7:fd:89:
78:6b:7e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:17 2026 by rpki-client