Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
File: SCJSDeYUN6bOZcbjRidHBwPmXtE.mft (raw, json)
Hash identifier: G3MVaORQiWichJSJBORWVdQ+OdssOagFvlvZDBxZtxw=
Subject key identifier: E0:BE:1A:63:2C:B2:B0:A3:5E:DD:41:2D:B4:37:4E:E3:92:0C:8B:27
Authority key identifier: 48:22:52:0D:E6:14:37:A6:CE:65:C6:E3:46:27:47:07:03:E6:5E:D1
Certificate issuer: /CN=4822520de61437a6ce65c6e34627470703e65ed1
Certificate serial: 019E6E0792C0E2B4EF0D01A9FC46AEF13449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
Manifest number: 0147
Signing time: Thu 28 May 2026 10:00:50 +0000
Manifest this update: Thu 28 May 2026 10:00:50 +0000
Manifest next update: Fri 29 May 2026 10:00:50 +0000
Files and hashes: 1: SCJSDeYUN6bOZcbjRidHBwPmXtE.crl (hash: 6AzCQ38QqFdIQa2XhbpdkI35+WdoyGm0OHngALKCbxo=)
2: hy7V_eg1KosUr6B48auj7x_GyG0.roa (hash: esE+dAQn3fgKAAwpaNKRZUcrbj7NuDcvWUlHXEbNi8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:07:92:c0:e2:b4:ef:0d:01:a9:fc:46:ae:f1:34:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4822520de61437a6ce65c6e34627470703e65ed1
Validity
Not Before: May 28 10:00:50 2026 GMT
Not After : May 29 10:00:50 2026 GMT
Subject: CN=e0be1a632cb2b0a35edd412db4374ee3920c8b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:3c:d4:1b:eb:4b:71:e8:91:e6:28:b5:5b:
c0:c3:9c:4b:07:df:56:e2:5c:1b:a7:38:f3:1e:78:
cf:99:fd:23:0c:9c:1e:8d:29:cf:82:19:41:50:94:
44:7a:80:c6:45:9e:95:38:c8:33:24:cd:3f:f8:11:
68:83:dc:23:2b:67:e2:06:f4:ed:8d:73:09:f0:4b:
09:7f:33:1d:bb:bd:c4:49:12:6c:44:e3:f1:f2:82:
d5:40:c9:9f:d8:ad:b0:ad:aa:6e:b8:fc:be:70:48:
b4:a9:5e:bd:1a:e9:9a:cc:7c:72:b8:9b:0e:a7:13:
34:6e:6b:5a:09:d4:07:0d:dc:73:d3:77:d9:fc:e4:
8c:1b:a8:48:c7:e1:8e:f4:f1:b4:3f:a8:45:82:16:
7f:01:ed:64:99:72:13:c9:58:13:f7:1c:3f:3d:63:
f7:2a:3a:7b:c9:ad:e7:79:03:15:4a:bb:1d:92:17:
10:ff:5b:a5:7b:23:cf:e2:e0:28:b0:87:df:f4:7b:
ee:31:5f:13:b6:b2:84:da:38:d9:f5:1a:8c:d0:59:
ac:96:f1:ef:a9:a9:5b:12:1f:0a:6b:f5:43:90:79:
2f:ff:ea:e7:21:a2:89:1e:15:7d:93:53:f8:45:9e:
8c:d6:51:e9:a7:72:d8:b6:2e:27:54:d3:62:00:b2:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BE:1A:63:2C:B2:B0:A3:5E:DD:41:2D:B4:37:4E:E3:92:0C:8B:27
X509v3 Authority Key Identifier:
keyid:48:22:52:0D:E6:14:37:A6:CE:65:C6:E3:46:27:47:07:03:E6:5E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:09:72:ee:9e:70:bb:f6:5e:20:64:b3:77:3a:9f:64:a9:16:
c4:85:1b:99:79:cd:d4:37:bc:e7:f8:09:5c:f5:5b:24:7d:9d:
52:3e:06:dd:e8:fc:23:bd:2b:ee:66:b6:3a:89:99:7b:0c:82:
04:3c:66:10:bd:4f:4e:2a:60:70:3d:95:ad:d0:f0:ac:54:09:
80:9c:99:e5:71:e6:15:0a:02:2c:bf:74:9f:00:76:e9:b9:91:
3f:ad:da:e7:9c:d5:3f:1f:aa:40:5b:61:ff:64:57:6b:f3:b7:
02:07:d5:d2:f8:9e:3f:9c:ab:8b:0b:a1:f4:b2:0c:3a:e3:0f:
1a:12:93:a9:8b:ab:48:12:88:99:bd:f7:b4:c8:a6:8f:db:5e:
98:64:fa:34:27:fd:ba:a2:80:38:77:ff:ca:80:b1:2f:e6:fa:
dd:63:0f:c9:2e:59:88:11:a6:be:e9:61:bb:66:4e:34:db:98:
f0:4a:c4:ab:cb:2e:34:24:b8:e1:07:98:2f:5d:cf:63:9e:28:
80:00:a7:fb:42:cf:58:80:94:19:77:8d:4f:49:8a:f6:f6:b6:
6a:d3:93:37:9b:a4:bf:40:59:ff:9c:9a:43:76:bd:e5:04:e5:
82:35:66:74:b7:25:50:0d:29:5e:da:91:6c:fc:c2:6c:1f:42:
5a:7c:e3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 16:27:13 2026 by rpki-client