Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
File: scmBDnrcyQAMDFlgEZoS7sbzvYY.mft (raw, json)
Hash identifier: WOHUEOUqZ3vI5GOPo0jNLzUwvQ1qlV8ZreLWkXTgazY=
Subject key identifier: 12:C7:CB:9F:1C:11:FA:94:1F:CC:6E:7F:19:AA:E7:53:70:5F:19:FB
Authority key identifier: B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86
Certificate issuer: /CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
Certificate serial: 01A1DDCC11C8BC67FDECD939E56B7E4BC2BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
Manifest number: 0254
Signing time: Sun 15 Nov 2026 06:01:40 +0000
Manifest this update: Sun 15 Nov 2026 06:01:40 +0000
Manifest next update: Mon 16 Nov 2026 06:01:40 +0000
Files and hashes: 1: 6FUIhUrbyZvgKQL_O3C2rpKBn0U.asa (hash: 7HvG1bgTeBojq127VNVkKtFoyZMNdVGGL/xSlWrP0r8=)
2: scmBDnrcyQAMDFlgEZoS7sbzvYY.crl (hash: JhICoqVtLACe+8fHNIq2DFGC4jNNy5GSexnd2VPW3XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:11:c8:bc:67:fd:ec:d9:39:e5:6b:7e:4b:c2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
Validity
Not Before: Nov 15 06:01:40 2026 GMT
Not After : Nov 16 06:01:40 2026 GMT
Subject: CN=12c7cb9f1c11fa941fcc6e7f19aae753705f19fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:ac:3f:43:d9:50:1d:11:fa:bd:fc:0d:d0:
98:e2:04:be:cd:6d:e9:8b:f2:98:a8:e3:93:df:4b:
c7:bd:24:53:2c:16:7e:6a:b6:c3:dd:c8:5a:d2:32:
35:35:0b:a6:ff:7a:46:f6:7c:e5:61:29:18:1a:e5:
6f:c7:1e:bc:d1:56:c9:8a:f4:29:3a:74:20:b7:c2:
19:98:6a:46:52:9c:a0:af:74:a4:7f:a3:8c:2b:99:
09:3f:56:c9:ff:63:f7:d2:96:b5:12:6b:ec:b7:bd:
41:1b:a2:bc:7e:33:e7:f8:fb:0c:64:12:a9:38:0f:
42:bc:8c:bb:41:59:02:83:24:38:bc:c3:04:5f:33:
92:74:86:f2:8c:76:b5:71:41:db:04:f0:f8:ba:6d:
52:85:21:c8:e1:25:04:3e:0a:73:1a:dc:ce:be:e5:
16:f6:1d:d4:c2:86:b7:06:dc:e1:8e:33:57:e2:4c:
af:10:cc:b5:6f:6c:04:29:fb:52:74:6d:e1:fe:1f:
d5:5b:2e:74:c8:0c:c7:fd:59:5f:37:4a:4e:7e:a7:
90:5e:51:f8:2d:49:6c:86:93:06:76:19:4e:ca:0f:
03:00:84:c0:16:ff:82:c6:be:73:83:4b:f2:12:96:
1b:ca:ca:39:0d:52:35:f7:64:be:62:a6:fa:fa:7e:
11:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C7:CB:9F:1C:11:FA:94:1F:CC:6E:7F:19:AA:E7:53:70:5F:19:FB
X509v3 Authority Key Identifier:
keyid:B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:86:19:6d:91:a1:76:79:c6:10:05:66:90:32:cb:13:fd:c6:
c6:b1:f6:1f:e0:5f:35:7c:4d:16:bf:ef:23:96:4c:a1:96:0c:
5b:4e:44:9e:f5:96:c2:05:ac:2c:00:13:1d:3e:96:c2:13:a9:
cd:f5:3a:35:66:d2:db:c9:11:dd:e8:eb:3b:4b:f8:09:dd:46:
5c:84:d5:74:08:5b:8c:e2:72:7c:4f:41:ae:16:c8:4f:af:2a:
25:32:3f:f6:87:8f:ab:e8:da:ad:fd:0a:3a:39:9a:79:99:63:
87:32:92:54:06:9b:4c:92:30:ca:be:96:ee:28:95:c3:99:a2:
1f:18:af:e0:ca:91:70:eb:27:2d:f9:24:1d:9a:78:28:c0:f5:
35:3b:66:7f:53:dc:36:38:4c:9e:f9:fa:b1:8e:a7:62:a4:ce:
8a:bf:33:2b:1d:c3:0e:1b:e5:24:30:50:73:40:43:fa:06:6c:
6a:f3:44:dc:97:60:71:6f:3e:c2:60:8b:9a:1e:b3:7c:d0:25:
43:27:50:a1:95:48:98:60:d6:aa:f6:4d:d8:a6:4d:eb:88:2d:
39:df:fb:c0:db:5a:a2:39:c8:94:d9:32:aa:39:06:23:23:da:
6a:30:e0:7e:19:a4:18:ad:86:0f:90:2c:b0:e9:1e:de:53:e0:
21:d7:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:34:06 2026 by rpki-client