Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
File: scIHU2wjS4vDrJgwEUMbp3Q51jc.mft (raw, json)
Hash identifier: hC5PCWoGLWrjYwcxOUKO0Kz2bDXN/p8wpCg2PEjOn/c=
Subject key identifier: 7F:56:24:38:FD:8F:2E:11:73:D7:AA:D7:FE:C2:C7:4C:71:33:50:A7
Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
Certificate issuer: /CN=b1c207536c234b8bc3ac983011431ba77439d637
Certificate serial: 019D9DE371F9202DA5AB3DC06763EF3CF753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
Manifest number: 0356
Signing time: Sat 18 Apr 2026 00:00:21 +0000
Manifest this update: Sat 18 Apr 2026 00:00:21 +0000
Manifest next update: Sun 19 Apr 2026 00:00:21 +0000
Files and hashes: 1: XrsyhJgNUO0sCjMskJID68dkack.asa (hash: e8Ve4gNOJ5qd29TIMwDD8LZbjGc8czCkaqt7UGyLIis=)
2: scIHU2wjS4vDrJgwEUMbp3Q51jc.crl (hash: G4dY400sKH7++jC+F4wqVQGo2YO3XpKioGaQ9S55QDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:71:f9:20:2d:a5:ab:3d:c0:67:63:ef:3c:f7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637
Validity
Not Before: Apr 18 00:00:21 2026 GMT
Not After : Apr 19 00:00:21 2026 GMT
Subject: CN=7f562438fd8f2e1173d7aad7fec2c74c713350a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:a2:1f:dc:49:ce:35:38:d4:ee:13:92:0f:
98:26:cf:bc:a1:e0:c7:8f:f4:43:61:53:8b:03:3e:
72:23:60:1b:9f:67:bb:fc:0b:3e:42:39:06:1e:99:
7b:cb:7c:ef:ea:d1:db:6f:63:c7:77:1d:1d:a6:70:
d4:91:c5:29:a6:b3:c8:15:d3:b1:a3:cd:0c:ab:93:
85:28:6e:3d:65:b1:15:b8:bf:de:73:1d:3c:9c:ff:
8a:c5:e6:0d:c6:61:f4:42:ac:b5:46:13:de:84:7d:
0b:45:81:1c:a9:15:23:d7:f7:43:e4:18:0a:6a:68:
ca:6d:02:20:7a:d3:cf:a2:68:41:03:b4:c4:f0:18:
a9:0f:9f:40:e5:d6:aa:76:d4:a6:2b:98:c7:72:71:
53:49:5b:b4:98:c0:2a:35:61:6f:90:f1:e6:0a:2f:
9b:ea:79:22:58:c3:f2:ba:8f:57:aa:dd:41:96:00:
71:b1:01:ed:3f:1d:2d:9b:04:ef:f5:17:9b:92:43:
e8:10:54:15:5a:b6:45:aa:e9:13:ef:8c:5a:8d:05:
ed:f5:04:f3:87:19:36:c5:c7:84:56:33:27:2e:8e:
0d:ff:68:0c:2b:14:43:20:0f:d3:dd:e0:76:db:e0:
81:49:32:4b:8d:2d:e9:c3:22:ed:ec:ab:62:19:66:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:56:24:38:FD:8F:2E:11:73:D7:AA:D7:FE:C2:C7:4C:71:33:50:A7
X509v3 Authority Key Identifier:
keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1a:ac:58:8d:5d:e8:7d:b5:89:d3:b4:a5:2e:6a:43:a0:49:
8d:39:35:99:77:ab:f5:0e:1c:02:26:2f:4c:77:65:c4:91:02:
a5:d9:d6:44:58:c7:80:34:5c:21:72:1f:02:cf:a1:55:d6:89:
0e:84:4c:46:85:c5:b0:72:41:33:ed:29:26:ca:b9:85:b8:1a:
9e:c5:f4:76:e4:cf:e8:f7:fe:79:6b:c4:66:13:46:ad:8f:07:
20:7b:bb:dc:aa:89:b5:03:3d:bd:25:b0:f5:cb:17:0c:c7:f9:
3d:17:78:b9:68:05:98:5a:91:8b:59:ae:ad:81:aa:96:82:14:
49:5a:c8:a2:27:b4:0e:05:27:8e:ec:ff:2b:5a:43:6f:08:f5:
79:02:a2:64:07:38:9b:55:b4:a8:00:03:b3:31:cf:5b:37:cd:
cf:cf:92:75:0f:a9:e7:62:c0:27:27:01:d2:e0:df:15:60:b1:
c9:82:ce:d3:00:69:96:13:09:f1:78:bf:9d:43:05:9c:2c:0b:
a9:fc:5d:0c:fc:6e:90:c4:f8:11:05:bb:e4:22:b4:81:df:64:
06:46:52:c4:70:40:01:26:7b:6b:b9:95:44:10:04:5a:a8:0d:
a5:4b:36:ea:d9:8f:0d:81:05:80:54:6a:f0:93:92:c2:8d:8d:
74:cd:4a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:08:26 2026 by rpki-client