
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
File: SCJSDeYUN6bOZcbjRidHBwPmXtE.mft (raw, json)
Hash identifier: i1xVjz7hvaZrMLnqdnvB7dYns94+BsEJmiBXTatty5s=
Subject key identifier: 62:CF:D0:51:5E:71:E4:7D:D8:79:8B:49:07:42:7D:59:3F:DE:1B:35
Authority key identifier: 48:22:52:0D:E6:14:37:A6:CE:65:C6:E3:46:27:47:07:03:E6:5E:D1
Certificate issuer: /CN=4822520de61437a6ce65c6e34627470703e65ed1
Certificate serial: 019DA52F7F6A24B6EA4484FEFF8FDD4BE86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 10:00:46 +0000
Manifest this update: Sun 19 Apr 2026 10:00:46 +0000
Manifest next update: Mon 20 Apr 2026 10:00:46 +0000
Files and hashes: 1: SCJSDeYUN6bOZcbjRidHBwPmXtE.crl (hash: uXzqPLTYu0haTt+SaHjdR2AWw0QgMLSP43xZWSXmpTk=)
2: hy7V_eg1KosUr6B48auj7x_GyG0.roa (hash: esE+dAQn3fgKAAwpaNKRZUcrbj7NuDcvWUlHXEbNi8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:7f:6a:24:b6:ea:44:84:fe:ff:8f:dd:4b:e8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4822520de61437a6ce65c6e34627470703e65ed1
Validity
Not Before: Apr 19 10:00:46 2026 GMT
Not After : Apr 20 10:00:46 2026 GMT
Subject: CN=62cfd0515e71e47dd8798b4907427d593fde1b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:9a:67:da:6c:3d:5f:a1:ac:4d:ff:f4:f3:
86:9e:2b:89:88:00:04:9e:42:ba:3a:bc:d3:42:17:
03:2b:cd:31:a7:9a:77:08:d2:7e:10:d1:66:65:0b:
29:19:62:53:c1:7c:39:c9:20:38:98:da:1f:94:1e:
9a:12:63:ae:07:19:e3:63:79:e2:c2:e0:3c:9d:65:
ae:71:3a:8e:88:3a:ec:e3:87:da:20:42:55:a3:fe:
80:84:be:84:c4:b3:9f:49:d8:71:4f:d1:0a:f1:f3:
f3:ce:3b:02:c7:93:9c:da:b8:88:76:93:b7:ea:b7:
fb:69:30:3c:95:aa:19:96:5e:6f:2e:d9:dd:39:80:
ed:f1:ed:8c:3f:72:b6:99:80:22:bd:d7:62:c8:3c:
35:63:14:1f:f8:9d:fd:b4:9b:2c:cc:ef:d1:da:3b:
de:36:b6:c2:09:e3:b5:d7:0f:32:cc:71:ed:bd:ac:
25:4e:39:8e:7c:22:ac:86:a2:d3:6a:b0:c4:63:80:
99:a3:b9:d2:59:46:a8:fe:53:e0:b8:23:7a:6a:3c:
79:e1:c5:c3:75:cd:93:c4:c3:12:c0:c6:62:17:9d:
45:26:bb:45:fd:6d:99:4e:b6:a7:0e:d5:90:02:64:
7d:50:e8:e8:68:64:50:0a:1f:16:37:04:64:af:bf:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CF:D0:51:5E:71:E4:7D:D8:79:8B:49:07:42:7D:59:3F:DE:1B:35
X509v3 Authority Key Identifier:
keyid:48:22:52:0D:E6:14:37:A6:CE:65:C6:E3:46:27:47:07:03:E6:5E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:17:c9:97:c4:f9:46:40:c5:a7:9e:76:d2:69:95:7c:a8:4b:
8d:98:03:97:c3:b0:d3:be:af:c1:74:8e:5d:51:62:32:a3:25:
b4:fe:e3:81:c7:57:82:f7:e9:a1:ef:1b:f7:13:79:b9:72:86:
48:26:02:d3:da:94:12:70:23:68:60:dd:4a:7f:7f:42:8f:3a:
4e:60:de:0a:9f:ac:11:78:a9:32:9b:8c:b8:fc:5c:1e:4c:a5:
b4:e4:83:b6:4f:ad:bf:12:a5:da:fc:e9:3c:cf:fe:5d:1f:b7:
84:bc:80:4f:05:d0:c7:af:e5:04:d3:57:2f:d8:ac:c6:91:e1:
22:56:8b:b1:ce:91:60:e3:7a:43:af:d9:0e:f1:03:ed:ba:f9:
17:60:7e:43:71:96:ca:f7:82:c2:bb:55:10:31:c5:9a:e4:12:
61:94:79:5e:54:05:20:ae:ac:bb:10:81:06:ab:12:81:fe:63:
c5:bd:f6:3b:05:9f:52:dc:9b:19:d3:37:1a:8b:31:03:7c:a7:
7d:3d:dd:54:21:b1:c0:18:cd:52:98:a7:fa:c6:d5:6a:c1:a0:
be:8b:9a:e8:c3:27:0e:a5:9c:ef:ff:2f:9c:80:f6:2a:41:3e:
d5:3e:d9:c9:c8:6d:95:7c:ee:5e:af:8d:29:df:14:cf:32:65:
47:39:0b:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL39qJLbqRIT+/4/dS+hsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MjI1MjBkZTYxNDM3YTZjZTY1YzZlMzQ2Mjc0NzA3MDNl
NjVlZDEwHhcNMjYwNDE5MTAwMDQ2WhcNMjYwNDIwMTAwMDQ2WjAzMTEwLwYDVQQD
Eyg2MmNmZDA1MTVlNzFlNDdkZDg3OThiNDkwNzQyN2Q1OTNmZGUxYjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiKaZ9psPV+hrE3/9POGniuJiAAE
nkK6OrzTQhcDK80xp5p3CNJ+ENFmZQspGWJTwXw5ySA4mNoflB6aEmOuBxnjY3ni
wuA8nWWucTqOiDrs44faIEJVo/6AhL6ExLOfSdhxT9EK8fPzzjsCx5Oc2riIdpO3
6rf7aTA8laoZll5vLtndOYDt8e2MP3K2mYAivddiyDw1YxQf+J39tJsszO/R2jve
NrbCCeO11w8yzHHtvawlTjmOfCKshqLTarDEY4CZo7nSWUao/lPguCN6ajx54cXD
dc2TxMMSwMZiF51FJrtF/W2ZTranDtWQAmR9UOjoaGRQCh8WNwRkr78SkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLP0FFeceR92HmLSQdCfVk/3hs1MB8GA1UdIwQY
MBaAFEgiUg3mFDemzmXG40YnRwcD5l7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0NKU0RlWVVONmJPWmNialJpZEhCd1BtWHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jODZjYzMtMzQ3OC00NDA3LTg0OTEt
N2RjODczZjUyODViLzEvU0NKU0RlWVVONmJPWmNialJpZEhCd1BtWHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jODZjYzMtMzQ3OC00NDA3LTg0OTEtN2RjODczZjUyODVi
LzEvU0NKU0RlWVVONmJPWmNialJpZEhCd1BtWHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxfJl8T5
RkDFp5520mmVfKhLjZgDl8Ow076vwXSOXVFiMqMltP7jgcdXgvfpoe8b9xN5uXKG
SCYC09qUEnAjaGDdSn9/Qo86TmDeCp+sEXipMpuMuPxcHkyltOSDtk+tvxKl2vzp
PM/+XR+3hLyATwXQx6/lBNNXL9isxpHhIlaLsc6RYON6Q6/ZDvED7br5F2B+Q3GW
yveCwrtVEDHFmuQSYZR5XlQFIK6suxCBBqsSgf5jxb32OwWfUtybGdM3GosxA3yn
fT3dVCGxwBjNUpin+sbVasGgvoua6MMnDqWc7/8vnID2KkE+1T7ZychtlXzuXq+N
Kd8UzzJlRzkLSQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 16:29:07 2026 by rpki-client