Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
File: scmBDnrcyQAMDFlgEZoS7sbzvYY.mft (raw, json)
Hash identifier: /H7GJnTz3/s2Hi7V3D+4suuF0hzMGZgGOGGiF88sw0w=
Subject key identifier: B6:01:45:1B:F2:8B:2C:85:B7:7E:E5:77:10:0D:69:8E:5D:14:18:3D
Authority key identifier: B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86
Certificate issuer: /CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
Certificate serial: 019DB05805DC42F62C306B14364CB2A81CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
Manifest number: 27
Signing time: Tue 21 Apr 2026 14:00:51 +0000
Manifest this update: Tue 21 Apr 2026 14:00:51 +0000
Manifest next update: Wed 22 Apr 2026 14:00:51 +0000
Files and hashes: 1: 2iH0vuh4Oj6U9QHeJXD2zhrkE5E.asa (hash: /NGaO6MowA9UsYK6RmgdYnGCN4zn2zTi6jLe3qk+mb4=)
2: scmBDnrcyQAMDFlgEZoS7sbzvYY.crl (hash: jI8mGgRp56YWIsqSgfvmySq1/p9S7PWA7d7siiINQMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:58:05:dc:42:f6:2c:30:6b:14:36:4c:b2:a8:1c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
Validity
Not Before: Apr 21 14:00:51 2026 GMT
Not After : Apr 22 14:00:51 2026 GMT
Subject: CN=b601451bf28b2c85b77ee577100d698e5d14183d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:1f:8d:01:4b:6f:b2:6d:91:ee:c2:01:53:
c2:34:b1:fe:7f:31:1d:24:cb:62:31:79:0c:21:d7:
c6:20:c2:c6:3d:e0:e8:86:70:bf:ac:92:b5:a6:9f:
9f:7d:45:fb:ce:1d:e9:15:86:a4:20:09:ec:a0:09:
6d:5b:27:53:a2:e1:4d:20:90:4a:3a:d4:8b:4f:4b:
38:06:e6:57:87:80:66:4d:09:42:ba:83:9a:57:52:
7c:95:93:76:7f:63:10:c7:d0:3c:2a:9d:b8:a0:d8:
ed:3a:d7:52:84:95:d0:3e:23:60:06:15:6e:0a:19:
7f:77:28:a3:3d:b9:0b:d0:77:90:c8:a1:a3:62:14:
8e:96:ef:ee:a2:40:1a:89:46:9c:b1:c0:83:4a:06:
56:71:79:a8:b4:f7:d2:de:05:99:28:2c:90:f7:5b:
2d:7d:e2:45:1e:4d:7e:a4:01:74:25:cf:b4:6f:d1:
a4:90:e4:18:16:30:30:a4:7f:f9:7b:c3:9a:82:7c:
ae:12:e8:69:d8:34:56:85:1f:39:ce:d5:9b:2c:91:
24:df:3e:46:4e:1c:80:c6:57:b3:3f:48:71:7d:da:
44:9f:88:5a:26:d3:15:8f:96:4d:58:a6:a0:7a:44:
46:09:5c:34:a6:d4:c9:03:75:96:78:80:b0:8f:fb:
da:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:01:45:1B:F2:8B:2C:85:B7:7E:E5:77:10:0D:69:8E:5D:14:18:3D
X509v3 Authority Key Identifier:
keyid:B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9e:d4:a1:e7:aa:fe:4f:07:d8:e0:34:84:8d:1a:d9:90:32:
24:18:27:f3:c0:5e:2e:c8:a5:da:63:38:6a:99:ad:ae:30:5f:
c7:61:15:1c:a0:c7:8d:52:71:9f:8b:c4:b0:18:e5:c5:9d:6f:
dc:f6:66:b5:d6:b1:cc:61:18:ee:d9:3e:99:43:2e:aa:45:52:
9b:bf:ad:75:7a:03:44:08:6b:cd:72:a4:88:55:6e:7b:c1:46:
c2:56:41:fa:a8:f8:bc:a9:cb:a7:93:0e:5f:97:e3:79:f4:06:
80:73:da:6b:48:23:53:16:6d:2e:48:f3:f4:f8:1d:d1:ad:35:
c3:4c:e0:30:bf:96:d8:18:19:a3:f4:ca:ed:ca:be:9f:21:2d:
32:2c:9f:d6:06:3a:49:68:28:00:74:b0:f9:a5:5a:02:30:39:
94:45:2d:69:9a:7e:2e:78:24:13:3d:4b:cd:ff:1a:08:72:13:
ef:b8:58:0b:84:88:ba:d7:a5:37:8c:f7:d1:86:7b:47:dc:72:
6e:45:50:5c:60:7d:64:3b:48:13:5f:06:a2:06:6a:ab:33:25:
f6:60:2d:df:69:f5:ff:6d:49:dd:1e:84:11:38:58:f0:ea:69:
4f:ca:44:8a:0d:9a:12:9e:01:7d:e3:17:64:eb:49:45:d2:b4:
ab:7a:bc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 16:05:59 2026 by rpki-client