Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
File: scIHU2wjS4vDrJgwEUMbp3Q51jc.mft (raw, json)
Hash identifier: hJta2JEKBLC1SwusmxfbD8/UEzIg7986/qAq/+TL6Do=
Subject key identifier: 4C:35:7C:B5:3F:39:5F:A5:8D:DD:B8:52:47:A1:B5:E8:1C:71:80:D4
Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
Certificate issuer: /CN=b1c207536c234b8bc3ac983011431ba77439d637
Certificate serial: 01A12FC5C9312B55E63B7C5089E2305F247E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
Manifest number: 0530
Signing time: Mon 12 Oct 2026 11:00:53 +0000
Manifest this update: Mon 12 Oct 2026 11:00:53 +0000
Manifest next update: Tue 13 Oct 2026 11:00:53 +0000
Files and hashes: 1: 6dmQqOmiLuvsuXnjOJu92trEdrA.asa (hash: JGwW9fJV5axb1wgNyKCQxtbGSmC9R5T5h3NTuwPN6As=)
2: scIHU2wjS4vDrJgwEUMbp3Q51jc.crl (hash: 8gCYGnoaE+qFY0i6UtOJNJmN8Jd0rnOMTJiiaTKnZPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c5:c9:31:2b:55:e6:3b:7c:50:89:e2:30:5f:24:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637
Validity
Not Before: Oct 12 11:00:53 2026 GMT
Not After : Oct 13 11:00:53 2026 GMT
Subject: CN=4c357cb53f395fa58dddb85247a1b5e81c7180d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:22:80:03:eb:a2:15:d6:7d:07:8a:6b:ec:ea:
85:d9:34:6b:bd:c7:87:6c:65:22:21:8f:70:b0:cb:
c9:3e:61:04:41:c9:1d:23:74:f6:ac:fd:eb:29:04:
ce:06:15:d1:6c:a5:88:6d:fc:d0:07:90:48:2e:3c:
47:7c:2e:67:55:91:4b:d3:50:07:9a:34:31:16:50:
ab:4e:5b:27:90:52:5c:9f:70:ba:ce:89:98:fa:a3:
74:75:77:46:c8:3b:27:58:64:2b:d6:99:32:b4:2b:
89:33:31:62:0d:00:78:84:23:f8:cc:8b:ef:08:27:
71:b0:b1:1c:3d:e5:16:96:fd:9f:33:6d:2a:bd:7e:
46:5a:f2:92:54:20:a8:15:06:7e:b3:21:45:10:04:
be:39:dc:5d:77:76:7f:25:c4:5d:41:e6:b6:72:73:
90:80:14:73:b4:19:72:b3:ba:bc:aa:28:17:8b:e6:
44:e6:7b:58:cb:97:d0:af:4f:4d:69:55:37:d1:61:
95:02:85:19:9f:1e:f8:31:e0:d5:35:28:96:6c:e9:
80:0a:e7:c8:d4:dd:4d:fd:83:d1:d2:52:db:5e:ba:
37:92:9a:49:a4:11:d2:d8:69:b2:00:fe:68:e1:c2:
b9:3f:f2:77:3b:54:31:f1:15:89:de:f2:ca:fa:90:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:35:7C:B5:3F:39:5F:A5:8D:DD:B8:52:47:A1:B5:E8:1C:71:80:D4
X509v3 Authority Key Identifier:
keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:af:15:89:5e:6e:5e:2c:40:fc:a6:b9:3f:25:fd:2b:17:53:
91:79:2c:52:0d:5c:56:e0:a5:18:be:5d:9f:ba:81:6f:52:26:
07:a8:c9:da:6c:01:5c:21:ac:c1:00:ce:21:dd:5e:36:b1:5e:
16:e2:e2:04:d0:0c:0f:87:aa:99:26:d6:f5:9d:a6:ba:c1:aa:
7b:c4:39:00:a2:12:2b:db:d4:40:a0:42:b7:e7:dd:8e:87:ce:
6b:12:2e:7f:19:38:67:0a:ce:69:77:ba:4b:a0:cd:96:3d:b9:
0a:47:80:05:2a:49:2e:22:35:1e:ad:9f:ab:d2:e4:6a:f7:8a:
72:e2:dc:72:ba:ab:a2:c1:8f:2b:3b:2b:86:a8:c5:a3:7d:ca:
4d:97:c1:fc:53:92:cb:b3:8e:29:36:cb:68:bb:e3:c3:a3:e6:
41:19:76:6a:6b:49:8f:6b:62:b5:d1:81:3e:78:72:5c:e2:96:
dd:fd:3d:59:59:6c:30:b9:31:4f:8b:b7:63:86:32:52:93:d7:
79:c1:31:20:f3:ba:10:7b:86:f1:ee:0b:3e:9d:ab:d5:25:9a:
c8:40:dd:57:8e:b0:ee:c2:e5:2a:b7:6f:66:0d:1d:a4:fd:12:
fb:97:93:15:49:07:ca:8b:ef:fa:16:f6:d0:00:55:f6:8e:dd:
52:6c:84:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 13:47:45 2026 by rpki-client