Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
File: scIHU2wjS4vDrJgwEUMbp3Q51jc.mft (raw, json)
Hash identifier: 1kXgiTigjWASCR9SWI0GJw3bB0Kpr+KqOQ3C31LTqBI=
Subject key identifier: B6:F8:0F:53:D3:C6:54:DB:06:67:A1:73:0A:7B:B4:B4:9E:44:DB:AC
Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
Certificate issuer: /CN=b1c207536c234b8bc3ac983011431ba77439d637
Certificate serial: 019CA8A124E03955B33A73764AA56A8F2F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
Manifest number: 02D7
Signing time: Sun 01 Mar 2026 09:00:58 +0000
Manifest this update: Sun 01 Mar 2026 09:00:58 +0000
Manifest next update: Mon 02 Mar 2026 09:00:58 +0000
Files and hashes: 1: XrsyhJgNUO0sCjMskJID68dkack.asa (hash: e8Ve4gNOJ5qd29TIMwDD8LZbjGc8czCkaqt7UGyLIis=)
2: scIHU2wjS4vDrJgwEUMbp3Q51jc.crl (hash: soiadPNrIc111g5x0olY/pfr9MK05bLmonWFnQTzxWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:24:e0:39:55:b3:3a:73:76:4a:a5:6a:8f:2f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637
Validity
Not Before: Mar 1 09:00:58 2026 GMT
Not After : Mar 2 09:00:58 2026 GMT
Subject: CN=b6f80f53d3c654db0667a1730a7bb4b49e44dbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:f9:ff:87:29:46:bc:23:7e:97:61:7f:bc:
b0:81:c8:74:27:34:69:2b:83:09:45:cd:d4:fb:86:
1d:a5:44:fc:5c:71:c7:ad:2d:26:9a:25:bd:95:cb:
bc:6b:5d:89:01:8e:4c:23:a2:3a:02:90:f6:04:e8:
68:8d:75:bb:91:9a:f7:f1:18:f8:f1:fe:65:40:17:
6b:39:70:43:1f:15:2f:ec:e5:89:d8:03:10:bc:f7:
a2:17:88:66:6d:4f:eb:bc:01:f6:1b:b5:dc:cc:6f:
f5:56:5a:ef:e9:9f:b5:5d:d0:6f:92:8c:21:3e:e0:
fe:01:57:71:15:8e:49:5b:c2:78:32:b6:5d:b6:85:
25:05:ae:8d:46:4b:4e:d7:2f:d5:93:74:c1:27:2c:
14:35:54:fa:86:71:71:99:60:fc:6e:35:24:de:4c:
47:16:0e:ce:cf:e5:c8:95:b9:a7:c6:27:cd:b1:8c:
d8:0d:f9:df:bc:f0:3d:9b:db:1b:41:5e:87:93:5d:
23:0b:1e:70:ef:43:53:33:0d:c3:52:83:60:63:94:
fd:42:8e:54:90:a2:83:71:bd:55:02:82:36:c6:4f:
d7:10:5e:a3:3d:fe:23:96:37:5c:86:3e:0f:87:50:
f5:f0:03:ef:6e:04:96:58:7b:a7:fe:3c:0a:78:4f:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F8:0F:53:D3:C6:54:DB:06:67:A1:73:0A:7B:B4:B4:9E:44:DB:AC
X509v3 Authority Key Identifier:
keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0d:7e:02:18:9e:67:86:93:f3:45:0d:21:64:aa:28:1a:fa:
72:92:0d:ad:c1:d8:36:e4:f4:68:4e:b6:7a:3e:0d:90:2d:d4:
40:36:78:a8:64:24:da:2a:6f:3d:eb:81:b8:31:be:01:d9:c6:
ef:f2:2f:79:45:25:b8:63:a3:96:55:d5:72:96:77:c3:33:3e:
28:5b:b1:61:b8:69:02:90:33:b3:bc:8d:cf:2e:35:b8:88:6b:
1b:e3:9f:cc:1b:3b:e3:31:48:73:75:a7:85:d1:a2:4a:a4:6d:
8a:eb:9f:01:ba:ab:26:3e:70:92:ce:98:75:f6:c9:3b:26:17:
ae:c0:01:de:d7:56:3b:84:82:66:20:67:c7:cc:ae:a2:57:03:
64:a0:18:cb:cb:24:d1:db:c7:db:e2:db:cc:49:1b:49:71:25:
21:f1:e5:4c:1c:4b:81:f1:84:8c:be:a5:6f:0b:c9:c7:5b:fe:
1b:96:da:0d:66:3a:21:5e:1e:c6:c3:f8:48:06:a5:fe:c1:71:
b2:75:fe:bb:71:95:ce:ee:53:dc:81:9d:04:c8:02:40:10:a4:
42:1a:02:cc:fd:6f:98:83:cd:f4:17:e7:07:5b:d1:03:3f:80:
c4:74:c7:b8:fe:e2:41:57:1f:8e:17:94:73:54:a2:33:cb:c1:
7f:b6:7c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:33:44 2026 by rpki-client