Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
File: scIHU2wjS4vDrJgwEUMbp3Q51jc.mft (raw, json)
Hash identifier: Xd10z5Ggt6ordku0Np3QnSag9n+Nu/SKBJF2D5ZYlUQ=
Subject key identifier: 23:FE:84:F3:55:35:EE:10:7B:C7:7B:B7:05:1B:F2:A1:18:A2:B4:9F
Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
Certificate issuer: /CN=b1c207536c234b8bc3ac983011431ba77439d637
Certificate serial: 019F8EA2D36F73752FA501EEB0BCD6D02AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
Manifest number: 0458
Signing time: Thu 23 Jul 2026 11:01:03 +0000
Manifest this update: Thu 23 Jul 2026 11:01:03 +0000
Manifest next update: Fri 24 Jul 2026 11:01:03 +0000
Files and hashes: 1: 6dmQqOmiLuvsuXnjOJu92trEdrA.asa (hash: JGwW9fJV5axb1wgNyKCQxtbGSmC9R5T5h3NTuwPN6As=)
2: scIHU2wjS4vDrJgwEUMbp3Q51jc.crl (hash: z4PDxl04ogr5mnpADS4TLxd/RujPcSxkK11H+JbwdVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:d3:6f:73:75:2f:a5:01:ee:b0:bc:d6:d0:2a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637
Validity
Not Before: Jul 23 11:01:03 2026 GMT
Not After : Jul 24 11:01:03 2026 GMT
Subject: CN=23fe84f35535ee107bc77bb7051bf2a118a2b49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:e9:c7:06:d1:ae:0d:05:b6:ef:17:92:9a:
10:24:6e:71:75:d6:67:a1:d4:9a:4c:a3:22:b3:09:
55:70:9d:0f:31:62:05:1c:40:c2:56:32:91:89:88:
0c:84:0f:5b:b3:8c:b1:df:11:0f:88:84:b1:90:99:
96:19:33:c2:35:3d:9b:76:00:78:00:17:41:53:da:
2f:71:70:b8:a1:d1:f5:97:df:fa:a6:aa:8f:8b:e4:
4c:ef:98:42:b8:ca:53:21:bc:a9:27:b7:5c:c6:7e:
71:c3:99:f8:ed:ea:de:57:67:73:0f:22:0d:86:43:
52:2c:a9:9b:50:c7:83:75:56:07:f7:90:35:20:e6:
49:ee:13:05:4d:5b:c2:57:b1:c8:91:b2:5e:12:3c:
4b:93:74:9a:1b:99:6c:40:8c:9e:fd:90:d1:d4:cf:
25:31:78:12:8a:2c:c7:d8:08:bf:82:e6:ad:29:ff:
4e:fb:27:8e:ec:08:2c:c1:15:77:1e:0f:89:ef:be:
7b:1a:aa:e6:4f:ba:2d:c6:b9:5f:1a:e2:06:3a:ea:
a1:04:73:76:ef:e4:0c:72:04:e0:1f:62:0a:af:2f:
52:e3:bd:16:9f:5c:dd:8e:33:6b:64:a6:21:c6:d0:
ee:14:8f:17:37:c4:23:17:8d:e2:75:db:67:00:e5:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FE:84:F3:55:35:EE:10:7B:C7:7B:B7:05:1B:F2:A1:18:A2:B4:9F
X509v3 Authority Key Identifier:
keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6f:23:db:3c:16:e9:51:3c:f2:25:af:e7:05:2a:11:54:af:
80:7c:62:ad:99:cb:2b:0a:ce:d8:8b:0a:86:bf:2d:bf:f1:6d:
8c:22:6d:3d:30:92:26:3f:38:9e:e9:55:af:fc:a3:78:7a:b0:
90:b1:92:e4:5a:c6:0e:3e:71:23:73:ae:b1:96:18:71:dc:45:
24:95:cf:61:8b:ac:d3:1e:74:30:1c:55:4f:12:74:f8:fa:6a:
5f:1b:34:56:58:e6:ac:e1:53:6b:5e:68:69:85:35:7f:49:5e:
5b:a5:ba:8c:10:f0:6d:ad:ac:66:13:af:ca:c8:e1:01:93:10:
6d:53:c8:d1:93:78:2e:9e:6e:f5:a5:5c:7f:8d:e9:17:bb:08:
06:db:30:4b:9d:5d:ef:e6:fb:a8:32:c9:6c:e0:cb:be:52:cf:
1f:05:75:8c:c1:a4:b9:da:8f:d0:09:8b:47:1d:86:f6:f1:33:
e2:b4:8e:35:2a:01:ae:ed:fe:63:c1:e5:ef:62:54:bc:58:33:
38:b8:46:fb:3a:db:7e:50:f2:c5:8f:ff:f0:b9:97:fc:fb:50:
5a:af:f3:b0:8d:de:b6:4e:ce:4a:51:d7:b9:0f:86:23:93:ec:
33:72:6a:8c:f4:d6:3f:92:32:ff:a6:9e:a5:de:15:a6:a8:03:
d0:4f:6a:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OotNvc3UvpQHusLzW0CrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYzIwNzUzNmMyMzRiOGJjM2FjOTgzMDExNDMxYmE3NzQz
OWQ2MzcwHhcNMjYwNzIzMTEwMTAzWhcNMjYwNzI0MTEwMTAzWjAzMTEwLwYDVQQD
EygyM2ZlODRmMzU1MzVlZTEwN2JjNzdiYjcwNTFiZjJhMTE4YTJiNDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaXpxwbRrg0Ftu8XkpoQJG5xddZn
odSaTKMiswlVcJ0PMWIFHEDCVjKRiYgMhA9bs4yx3xEPiISxkJmWGTPCNT2bdgB4
ABdBU9ovcXC4odH1l9/6pqqPi+RM75hCuMpTIbypJ7dcxn5xw5n47ereV2dzDyIN
hkNSLKmbUMeDdVYH95A1IOZJ7hMFTVvCV7HIkbJeEjxLk3SaG5lsQIye/ZDR1M8l
MXgSiizH2Ai/guatKf9O+yeO7AgswRV3Hg+J7757GqrmT7otxrlfGuIGOuqhBHN2
7+QMcgTgH2IKry9S470Wn1zdjjNrZKYhxtDuFI8XN8QjF43iddtnAOUR0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCP+hPNVNe4Qe8d7twUb8qEYorSfMB8GA1UdIwQY
MBaAFLHCB1NsI0uLw6yYMBFDG6d0OdY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2NJSFUyd2pTNHZEckpnd0VVTWJwM1E1MWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80NTZhZjEtNDM0MC00NzI5LWIzNDIt
NWVkNzVlNDI0NDY4LzEvc2NJSFUyd2pTNHZEckpnd0VVTWJwM1E1MWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS80NTZhZjEtNDM0MC00NzI5LWIzNDItNWVkNzVlNDI0NDY4
LzEvc2NJSFUyd2pTNHZEckpnd0VVTWJwM1E1MWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJG8j2zwW
6VE88iWv5wUqEVSvgHxirZnLKwrO2IsKhr8tv/FtjCJtPTCSJj84nulVr/yjeHqw
kLGS5FrGDj5xI3OusZYYcdxFJJXPYYus0x50MBxVTxJ0+PpqXxs0VljmrOFTa15o
aYU1f0leW6W6jBDwba2sZhOvysjhAZMQbVPI0ZN4Lp5u9aVcf43pF7sIBtswS51d
7+b7qDLJbODLvlLPHwV1jMGkudqP0AmLRx2G9vEz4rSONSoBru3+Y8Hl72JUvFgz
OLhG+zrbflDyxY//8LmX/PtQWq/zsI3etk7OSlHXuQ+GI5PsM3JqjPTWP5Iy/6ae
pd4VpqgD0E9q4w==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:21 2026 by rpki-client