Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
File: scIHU2wjS4vDrJgwEUMbp3Q51jc.mft (raw, json)
Hash identifier: ghJyQzxK4at8EWlTBSPkh6bk/L2CTbaV2/m0wQEEACo=
Subject key identifier: 26:B2:F4:FF:CE:EC:FE:76:09:23:FB:27:B9:7C:DA:F7:D8:3F:8E:F5
Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
Certificate issuer: /CN=b1c207536c234b8bc3ac983011431ba77439d637
Certificate serial: 019D26283A2FBC8C4DED2A5C7AA1498F1CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
Manifest number: 0318
Signing time: Wed 25 Mar 2026 18:01:03 +0000
Manifest this update: Wed 25 Mar 2026 18:01:03 +0000
Manifest next update: Thu 26 Mar 2026 18:01:03 +0000
Files and hashes: 1: XrsyhJgNUO0sCjMskJID68dkack.asa (hash: e8Ve4gNOJ5qd29TIMwDD8LZbjGc8czCkaqt7UGyLIis=)
2: scIHU2wjS4vDrJgwEUMbp3Q51jc.crl (hash: Bjm7WVCZwyVTfaXaGdDi+is8cEE4TmAQlyJ7pE1vWQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3a:2f:bc:8c:4d:ed:2a:5c:7a:a1:49:8f:1c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637
Validity
Not Before: Mar 25 18:01:03 2026 GMT
Not After : Mar 26 18:01:03 2026 GMT
Subject: CN=26b2f4ffceecfe760923fb27b97cdaf7d83f8ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:c9:a6:22:6a:97:42:84:35:b9:fc:4f:4a:
ce:b7:6e:8d:d7:8d:be:2e:0a:3b:ac:45:66:fe:47:
2f:f9:be:5e:39:ec:ac:73:9e:6d:20:1b:67:74:1a:
64:bd:cd:05:e0:1a:8a:0c:d8:de:8f:d9:c3:50:18:
05:3a:41:4a:76:93:41:bb:d2:0c:e0:11:d3:a9:9d:
c2:09:49:00:2b:30:0c:ae:ca:b0:26:00:a3:3f:b1:
32:ef:5b:ed:a5:02:33:23:a0:1c:ed:9d:b2:eb:75:
5a:48:16:e1:89:ec:b8:99:b4:d1:9f:98:c9:b6:cf:
83:e2:9d:b1:a5:27:a8:93:19:40:d0:be:93:f9:ff:
6b:6b:0b:d4:15:e4:16:36:3d:d5:53:8c:6c:10:04:
c4:13:1c:8d:e8:15:a7:41:3b:48:e4:1a:a4:2b:ed:
91:3c:33:94:72:b2:18:9f:80:65:4a:f7:5c:d3:f2:
37:90:89:98:e1:ff:1f:dd:5e:8b:4a:ed:18:70:d0:
72:b8:b3:e8:a6:5c:eb:71:a9:15:68:fe:28:e7:63:
51:9e:19:8e:8d:83:ff:d7:f1:cd:43:c0:db:b9:52:
fe:5f:d2:d6:d6:e6:54:d9:c4:82:4b:80:32:b5:c4:
f6:e3:4c:b9:1e:38:13:6d:24:02:23:a5:33:43:0f:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B2:F4:FF:CE:EC:FE:76:09:23:FB:27:B9:7C:DA:F7:D8:3F:8E:F5
X509v3 Authority Key Identifier:
keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2b:24:62:bb:93:0c:84:1b:52:41:a0:e6:21:a8:35:26:c4:
20:3b:82:39:de:fa:bd:69:53:4c:6a:09:f5:c2:05:41:8f:17:
68:d6:d7:aa:1c:21:dd:55:5f:d3:62:8b:bd:c8:17:bf:fa:db:
e3:f8:58:90:7f:88:5f:7c:15:ba:b6:25:62:b3:f7:fd:a0:a9:
25:5f:13:a2:22:86:9f:96:0f:91:d1:ee:03:2d:52:7d:c5:73:
58:03:2e:c4:f5:d3:23:21:f3:34:11:32:0f:2d:3e:a5:9f:ee:
e9:f5:ef:ef:6b:49:50:9f:71:f4:5f:f7:56:b1:a9:69:bb:13:
c0:ec:a9:40:97:98:22:38:85:25:ef:03:30:fc:c6:39:3b:03:
15:55:78:13:9e:6a:1a:e2:da:2b:de:08:d0:a2:72:58:16:f3:
d2:4b:a0:3a:40:72:b5:45:15:22:80:8c:5d:b6:57:c6:e7:47:
01:ef:8d:e6:88:0a:c3:3c:5e:07:d4:db:1f:03:37:d0:89:a0:
28:02:65:0d:da:9a:eb:27:c3:5e:10:79:18:fe:74:2f:b2:24:
bf:a6:4d:3c:c2:5d:16:bf:fb:6c:e3:64:46:73:a9:5b:cf:58:
0c:12:16:4f:33:f8:3b:7d:d7:ed:9a:b9:53:33:a2:c8:88:5b:
c1:73:95:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:43 2026 by rpki-client