Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
File: scIHU2wjS4vDrJgwEUMbp3Q51jc.mft (raw, json)
Hash identifier: PHP0QjDQ9zLtpkSxS2aDw/7CRBLhc9CElSzK9ZMY1ew=
Subject key identifier: 54:E5:B7:DD:D3:D3:E1:5A:25:0C:6A:23:4B:76:29:E3:06:18:81:94
Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
Certificate issuer: /CN=b1c207536c234b8bc3ac983011431ba77439d637
Certificate serial: 019D9BF52976A204B4794F25A54B84FE5EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
Manifest number: 0355
Signing time: Fri 17 Apr 2026 15:00:28 +0000
Manifest this update: Fri 17 Apr 2026 15:00:28 +0000
Manifest next update: Sat 18 Apr 2026 15:00:28 +0000
Files and hashes: 1: XrsyhJgNUO0sCjMskJID68dkack.asa (hash: e8Ve4gNOJ5qd29TIMwDD8LZbjGc8czCkaqt7UGyLIis=)
2: scIHU2wjS4vDrJgwEUMbp3Q51jc.crl (hash: otG3K9GVYGMsqLLA6OWFdRSQLGRgmB1LAImsdrf+PFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:29:76:a2:04:b4:79:4f:25:a5:4b:84:fe:5e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637
Validity
Not Before: Apr 17 15:00:28 2026 GMT
Not After : Apr 18 15:00:28 2026 GMT
Subject: CN=54e5b7ddd3d3e15a250c6a234b7629e306188194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:23:9a:27:da:52:0e:32:0c:d2:cb:9c:9e:
a2:55:78:5f:9c:06:0e:f3:71:ae:f3:72:21:b1:d4:
99:f5:09:19:03:b9:55:87:9e:bd:db:a6:2e:11:8c:
46:b0:97:a1:3d:fa:3f:bc:74:98:b1:8e:0a:40:18:
cf:f3:30:41:7a:86:a2:fb:2a:f4:b5:57:5b:9e:ea:
b9:4b:b4:34:1c:dd:43:89:ce:3b:a3:54:99:1d:12:
97:8b:3b:f8:74:ca:c1:ac:54:7e:f2:68:8d:47:93:
8c:b1:85:9c:87:ff:f5:0d:05:27:12:34:05:fb:3b:
38:c0:8e:a3:16:28:f5:4c:fb:c2:0b:2f:83:4b:56:
cc:0b:e8:b7:d7:c4:63:ea:a8:d5:a3:45:86:a4:51:
02:a9:88:e8:93:28:07:f4:a4:2c:d5:11:13:57:35:
d1:42:9b:ca:2b:d4:dc:86:0f:e6:a9:fd:6b:22:5f:
9e:81:66:81:53:ec:ce:94:18:7e:9e:02:f3:7b:bf:
45:6e:d7:62:f5:db:04:89:b1:65:7b:27:e6:1e:fe:
e5:5d:56:68:cd:21:31:2b:10:97:8d:51:8b:00:04:
7b:36:7d:cb:80:6b:5b:67:c7:bb:2c:16:a0:38:1c:
9c:c9:b3:ee:36:a0:20:6b:03:bd:c0:1e:41:42:b8:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E5:B7:DD:D3:D3:E1:5A:25:0C:6A:23:4B:76:29:E3:06:18:81:94
X509v3 Authority Key Identifier:
keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8a:49:f0:54:22:22:2d:49:b2:7d:99:d5:1b:da:d7:e5:c0:
ab:9d:28:a6:44:76:5f:2b:11:24:5d:ef:8d:d5:ab:8e:76:4d:
56:94:9b:7f:44:cf:14:4c:61:71:85:8e:d4:a2:cb:8f:0a:85:
52:03:27:fe:c2:af:d0:b2:d7:f0:77:73:22:d0:39:76:d2:15:
3d:54:5d:9a:4f:8b:e5:00:8d:5d:1b:ce:5c:2b:fa:a6:96:1f:
09:73:b6:b0:50:92:de:e4:7a:28:7d:87:97:c9:55:69:50:db:
65:b6:26:98:3b:ef:fc:f5:00:da:a7:9f:b3:08:6e:f0:36:05:
71:f0:e4:bd:6d:9b:52:e2:a7:65:1b:81:cb:3c:94:6d:10:1b:
a2:78:9a:56:e6:70:3a:9e:63:3b:65:0e:f6:ac:b6:2b:32:69:
97:94:3b:f8:d7:03:0a:64:7a:cf:23:84:2e:97:2a:86:b6:4d:
e2:91:66:30:2e:2f:1f:34:0d:30:71:81:ea:f2:7b:6e:a6:ed:
19:4b:53:5f:9b:30:bb:42:c1:93:38:05:8c:d5:5a:18:56:e4:
85:6c:88:58:b0:fd:48:18:da:8b:68:7f:b0:a9:62:b6:5a:a5:
a8:55:49:23:48:9e:1c:f5:ee:ec:cd:7b:79:4b:23:58:50:62:
c6:7f:1d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:41:50 2026 by rpki-client