Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
File: scmBDnrcyQAMDFlgEZoS7sbzvYY.mft (raw, json)
Hash identifier: yjYU0UyMV84TMoypX8zbjyy9nJO+20J4I51X/j/gmjg=
Subject key identifier: DB:56:FA:89:88:F5:1D:CD:F9:92:CB:41:92:2D:CA:AA:2F:6D:26:E6
Authority key identifier: B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86
Certificate issuer: /CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
Certificate serial: 019E99CD62624644AF7E5A74C7414382AEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
Manifest number: A0
Signing time: Fri 05 Jun 2026 22:00:34 +0000
Manifest this update: Fri 05 Jun 2026 22:00:34 +0000
Manifest next update: Sat 06 Jun 2026 22:00:34 +0000
Files and hashes: 1: YUg_MdZJ_6lF6Qpxti_zYM3Wmv4.asa (hash: iwOMR1VHsxe5VawZKy+EqitcK6kizlZazlcOwvAKuPk=)
2: scmBDnrcyQAMDFlgEZoS7sbzvYY.crl (hash: cfJ+0bg/ioR9JVQ9pS+Y79EzdlLpp0FCyww+DHW6u1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:cd:62:62:46:44:af:7e:5a:74:c7:41:43:82:ae:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
Validity
Not Before: Jun 5 22:00:34 2026 GMT
Not After : Jun 6 22:00:34 2026 GMT
Subject: CN=db56fa8988f51dcdf992cb41922dcaaa2f6d26e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:96:82:36:56:82:90:d9:b3:70:6f:a7:25:
dc:d3:1b:b0:b2:32:23:86:9e:48:27:a7:f9:93:db:
29:1a:4b:e4:06:8f:0f:ec:9b:52:28:ed:0b:9a:b5:
a0:0e:4c:d1:93:da:7c:af:30:91:4f:ff:98:61:c6:
e4:9e:7d:39:6e:4d:22:8b:9d:50:a1:6c:d9:ff:f4:
26:1c:b4:d5:a9:b6:70:04:06:4c:c8:dd:64:7a:dd:
e8:3f:8d:8d:d8:f6:0c:b0:a5:47:32:37:8b:92:13:
d9:b9:8d:41:ea:39:ce:f3:5a:e8:c4:5f:32:36:c7:
7b:8d:4b:44:6e:9c:66:fe:62:d1:77:12:ee:a7:fe:
fd:bd:3f:64:bb:57:3a:7c:0e:bd:97:62:6e:86:d1:
e2:5d:95:27:e1:2d:1e:67:05:25:e7:7a:7f:33:dd:
84:97:98:ff:98:c5:bd:50:59:05:14:52:43:0a:4c:
40:08:dc:8c:a7:bc:0f:60:45:bc:6a:36:e0:8e:3c:
95:78:9d:da:1b:fb:8c:69:b9:dd:c4:2c:fc:59:da:
97:ba:9b:90:a6:22:40:73:6c:56:85:cf:45:cd:a6:
b3:7c:0a:d9:fa:28:4c:c7:12:96:d2:bb:a0:83:c9:
f6:b8:e5:04:8d:0e:92:ca:85:31:c2:86:00:f3:0d:
0c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:56:FA:89:88:F5:1D:CD:F9:92:CB:41:92:2D:CA:AA:2F:6D:26:E6
X509v3 Authority Key Identifier:
keyid:B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6a:5c:56:57:b4:fa:92:7a:30:a7:2b:75:10:37:99:eb:fb:
25:5c:7f:31:99:80:98:cd:41:6c:a2:ee:18:d8:77:c1:11:65:
6c:ec:ab:05:e7:fd:ef:6a:90:bf:e5:4f:37:ea:ec:b6:ec:9d:
57:c0:a0:37:42:da:6e:88:ba:6c:e7:62:87:16:fd:be:d4:5e:
ea:9f:97:b1:a9:bd:91:db:e0:97:29:26:dc:8d:90:6b:4c:f4:
ec:12:8c:e7:93:9c:c3:ff:2a:ab:93:de:1c:59:4e:26:b2:e8:
99:d9:9d:57:50:4f:79:ff:e1:03:c4:85:c9:ba:a8:97:4f:69:
47:bd:26:2c:be:10:0e:14:23:ca:be:72:30:18:44:bd:29:e2:
69:12:7e:53:9f:c3:81:16:3e:a9:fa:26:a1:17:4d:8a:a9:08:
54:68:2d:e5:82:bb:16:27:7e:24:71:2b:56:bb:18:f0:55:b5:
88:cb:da:1d:3e:98:84:0d:d6:f5:09:4b:9f:80:5c:0e:e8:08:
aa:70:4f:1d:98:8f:56:b6:a3:01:3e:6e:70:af:8f:5d:e1:a1:
e2:40:e2:ba:8f:c5:87:ea:88:3a:6e:00:29:19:06:1f:fa:3e:
61:9a:dd:e3:07:a6:54:0e:eb:41:c8:13:0d:41:2c:3c:b3:36:
c2:dc:fa:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:48:04 2026 by rpki-client