Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
File: scmBDnrcyQAMDFlgEZoS7sbzvYY.mft (raw, json)
Hash identifier: zuaNd2P9zLtx+yEuTU7th6J4Fdjk+kFk6Dx6QGMahUA=
Subject key identifier: A4:5A:B3:56:D8:5B:F8:A5:A4:52:2E:83:14:C8:6C:2A:02:33:B5:83
Authority key identifier: B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86
Certificate issuer: /CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
Certificate serial: 019D9D07C5BA709A8ADCE8245EB5E915B270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
Manifest number: 1D
Signing time: Fri 17 Apr 2026 20:00:25 +0000
Manifest this update: Fri 17 Apr 2026 20:00:25 +0000
Manifest next update: Sat 18 Apr 2026 20:00:25 +0000
Files and hashes: 1: 2iH0vuh4Oj6U9QHeJXD2zhrkE5E.asa (hash: /NGaO6MowA9UsYK6RmgdYnGCN4zn2zTi6jLe3qk+mb4=)
2: scmBDnrcyQAMDFlgEZoS7sbzvYY.crl (hash: aKqu4cvgUFgP/3yMiUPJtb3AUqec3C8paUjKj/CxzXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:c5:ba:70:9a:8a:dc:e8:24:5e:b5:e9:15:b2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
Validity
Not Before: Apr 17 20:00:25 2026 GMT
Not After : Apr 18 20:00:25 2026 GMT
Subject: CN=a45ab356d85bf8a5a4522e8314c86c2a0233b583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f9:ef:fa:36:fc:0d:85:e7:c5:60:5b:9c:ee:
ee:66:44:fd:ed:ae:12:dd:3c:8f:09:c0:63:53:ee:
d6:35:49:4e:a7:b6:eb:f3:d0:36:75:39:4d:23:39:
0f:86:7f:e4:66:7b:cd:71:c3:97:60:2a:89:bf:cc:
8f:5e:b1:a0:7b:2e:28:73:bc:bd:64:7b:1e:b0:1d:
12:ac:3a:5b:c4:fe:22:44:43:81:6a:3d:36:bf:68:
4d:67:b2:28:8c:28:ba:85:23:28:de:b5:3d:20:cf:
ba:3f:18:3c:e0:5e:54:f5:c8:2e:ba:6f:79:0a:98:
6e:d2:f7:3c:7c:e5:f5:f3:73:c4:be:40:be:71:fa:
73:23:28:53:3b:1f:17:4f:82:21:f5:4a:95:01:5f:
75:3d:72:84:59:66:5c:c1:a0:a4:b2:07:83:66:ce:
2d:b9:45:a5:0e:95:2c:f6:fd:d7:ae:6b:5d:c5:f3:
17:f7:c8:d8:4d:37:b2:23:e0:1d:61:dd:be:90:52:
3b:79:66:93:52:13:9b:26:37:e0:33:72:62:f2:dc:
e5:ca:50:c6:f1:8b:d5:50:94:b1:4c:16:9b:ff:a3:
17:12:2d:30:e9:d4:c2:65:95:48:11:da:29:7e:ee:
3c:06:da:48:9b:f6:4b:44:23:74:13:90:e4:71:4d:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5A:B3:56:D8:5B:F8:A5:A4:52:2E:83:14:C8:6C:2A:02:33:B5:83
X509v3 Authority Key Identifier:
keyid:B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:89:39:1a:dc:22:4c:d4:bb:f5:20:66:3e:20:35:39:ef:76:
5c:52:66:48:07:d3:5f:a5:19:6e:36:bc:e3:b7:55:91:1d:c8:
4f:7f:ea:73:d8:2f:2c:4e:0b:30:a5:7b:bb:9a:b8:e4:60:0d:
01:29:39:2f:8a:8b:b5:d1:0e:cb:36:6a:cf:50:07:1b:9f:3d:
5c:0c:a0:44:bf:76:2c:32:96:cb:af:94:18:ef:37:5d:d8:68:
1b:52:d6:54:dd:17:94:21:28:7b:84:04:5c:50:e0:56:80:ed:
83:cd:93:4b:1a:9a:e6:f3:e7:02:82:f8:50:f5:87:67:47:d7:
ed:7d:b1:7d:7f:e2:3c:3f:e1:ce:f4:ba:08:71:e7:ab:ab:b1:
13:2d:4c:5e:52:82:45:4d:56:00:c6:03:8a:b4:1b:1d:ba:ff:
b0:44:20:a9:a5:d9:56:45:fe:3c:9c:c4:3c:e8:fc:a3:2f:52:
e9:d9:59:8f:67:cd:d3:2b:e0:d2:6d:17:e6:a4:53:5a:11:32:
57:ed:ff:e5:89:56:b4:ff:2e:29:57:1a:26:60:6b:61:42:3f:
9d:a0:82:2b:6c:38:78:81:ac:19:b3:86:cc:56:93:35:61:ee:
01:58:9a:22:62:a3:2b:e3:33:f4:f9:3a:71:d2:4c:2d:78:8a:
fb:36:5e:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dB8W6cJqK3OgkXrXpFbJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYzk4MTBlN2FkY2M5MDAwYzBjNTk2MDExOWExMmVlYzZm
M2JkODYwHhcNMjYwNDE3MjAwMDI1WhcNMjYwNDE4MjAwMDI1WjAzMTEwLwYDVQQD
EyhhNDVhYjM1NmQ4NWJmOGE1YTQ1MjJlODMxNGM4NmMyYTAyMzNiNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Pnv+jb8DYXnxWBbnO7uZkT97a4S
3TyPCcBjU+7WNUlOp7br89A2dTlNIzkPhn/kZnvNccOXYCqJv8yPXrGgey4oc7y9
ZHsesB0SrDpbxP4iREOBaj02v2hNZ7IojCi6hSMo3rU9IM+6Pxg84F5U9cguum95
Cphu0vc8fOX183PEvkC+cfpzIyhTOx8XT4Ih9UqVAV91PXKEWWZcwaCksgeDZs4t
uUWlDpUs9v3XrmtdxfMX98jYTTeyI+AdYd2+kFI7eWaTUhObJjfgM3Ji8tzlylDG
8YvVUJSxTBab/6MXEi0w6dTCZZVIEdopfu48BtpIm/ZLRCN0E5DkcU3a3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRas1bYW/ilpFIugxTIbCoCM7WDMB8GA1UdIwQY
MBaAFLHJgQ563MkADAxZYBGaEu7G872GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2NtQkRucmN5UUFNREZsZ0Vab1M3c2J6dllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lMTRjMWItNGQ4YS00MzA5LTlhMDEt
NWQ3ZDI2NzRiZTdjLzEvc2NtQkRucmN5UUFNREZsZ0Vab1M3c2J6dllZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9lMTRjMWItNGQ4YS00MzA5LTlhMDEtNWQ3ZDI2NzRiZTdj
LzEvc2NtQkRucmN5UUFNREZsZ0Vab1M3c2J6dllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIk5Gtwi
TNS79SBmPiA1Oe92XFJmSAfTX6UZbja847dVkR3IT3/qc9gvLE4LMKV7u5q45GAN
ASk5L4qLtdEOyzZqz1AHG589XAygRL92LDKWy6+UGO83XdhoG1LWVN0XlCEoe4QE
XFDgVoDtg82TSxqa5vPnAoL4UPWHZ0fX7X2xfX/iPD/hzvS6CHHnq6uxEy1MXlKC
RU1WAMYDirQbHbr/sEQgqaXZVkX+PJzEPOj8oy9S6dlZj2fN0yvg0m0X5qRTWhEy
V+3/5YlWtP8uKVcaJmBrYUI/naCCK2w4eIGsGbOGzFaTNWHuAViaImKjK+Mz9Pk6
cdJMLXiK+zZeuw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:49 2026 by rpki-client