Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
File: scmBDnrcyQAMDFlgEZoS7sbzvYY.mft (raw, json)
Hash identifier: LY2rTWwdbVpPJyCvOgunAfroE4s1rfKnX71KnBQHxBA=
Subject key identifier: 3A:6D:C5:CA:6C:AE:12:55:42:16:22:2F:AF:1B:EF:17:B2:0A:D7:FA
Authority key identifier: B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86
Certificate issuer: /CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
Certificate serial: 019E1C7DEADAACAA01A44402A43A0EC0A5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
Manifest number: 5F
Signing time: Tue 12 May 2026 14:01:14 +0000
Manifest this update: Tue 12 May 2026 14:01:14 +0000
Manifest next update: Wed 13 May 2026 14:01:14 +0000
Files and hashes: 1: 2iH0vuh4Oj6U9QHeJXD2zhrkE5E.asa (hash: /NGaO6MowA9UsYK6RmgdYnGCN4zn2zTi6jLe3qk+mb4=)
2: scmBDnrcyQAMDFlgEZoS7sbzvYY.crl (hash: gXDqJawlYSwRAOQMpOOMN9VXB64eK98HuUwhrdblKdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:ea:da:ac:aa:01:a4:44:02:a4:3a:0e:c0:a5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
Validity
Not Before: May 12 14:01:14 2026 GMT
Not After : May 13 14:01:14 2026 GMT
Subject: CN=3a6dc5ca6cae12554216222faf1bef17b20ad7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9c:81:83:e9:7c:52:b6:2c:be:03:cf:3f:ec:
2c:d3:d1:cc:73:ff:29:4d:2d:a9:97:04:b7:a0:6f:
57:0e:f1:a1:71:ab:19:cf:d4:91:41:60:19:9e:ba:
4c:60:00:29:9a:74:53:33:82:dd:b9:04:b9:d0:4e:
4f:6f:cc:3f:af:cb:ef:54:12:f3:5b:59:53:43:24:
d2:7f:c5:be:a2:c6:62:0a:1b:94:e4:c7:71:9a:a6:
48:21:11:4a:54:8b:1b:a6:cd:73:d7:61:a1:a0:4d:
e1:51:25:76:81:18:38:69:c2:fe:34:16:aa:41:1b:
c2:f0:0d:ca:ca:a6:70:bf:5b:14:ef:8e:56:51:51:
8a:e1:10:40:a4:65:72:e1:09:1b:3d:7b:86:14:c8:
a3:58:13:27:9a:6d:21:ea:d5:ee:f3:cf:90:c0:52:
c1:1b:cc:6b:4d:8f:6b:30:18:3b:4e:b8:3e:5f:ef:
9c:8f:86:41:7d:55:ec:11:a1:be:28:7f:c9:cb:f3:
63:eb:b7:35:c1:c6:5e:d5:e6:ba:4c:9d:27:bc:c6:
1e:aa:7f:79:bc:ed:c4:2b:6b:94:ba:b0:10:db:6e:
5f:fd:39:cb:c2:09:25:aa:fe:88:23:a8:b8:0a:cc:
e4:f1:db:03:40:13:63:51:ce:2f:91:2e:0d:ae:33:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6D:C5:CA:6C:AE:12:55:42:16:22:2F:AF:1B:EF:17:B2:0A:D7:FA
X509v3 Authority Key Identifier:
keyid:B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f5:49:20:97:d5:8a:3f:ef:db:69:62:b9:eb:02:eb:30:66:
76:6a:b2:ae:39:4b:3c:e3:03:27:00:b6:15:64:66:1c:bf:e0:
e4:fb:cc:77:73:38:b9:2d:bd:ca:f0:a4:bc:b0:46:c7:85:95:
60:8e:22:fa:64:c5:4f:63:e7:c5:99:e8:a3:e6:65:c8:30:86:
ed:da:63:87:a5:54:41:6f:60:b1:3d:6e:ad:d1:d0:ec:49:2d:
c2:4c:d1:81:95:97:f6:6c:20:c0:35:ed:c9:9d:06:e9:60:d8:
e8:af:0e:79:d8:84:99:76:e0:64:fe:0d:72:ad:de:8c:58:db:
24:40:7b:07:ef:f0:48:b1:ea:e6:4e:4e:a8:b0:b8:09:63:cd:
bf:8a:17:63:77:31:a8:b4:27:ed:2e:7b:ff:e4:69:ba:47:45:
a2:f2:a3:f1:f2:9e:db:b9:60:57:31:a7:c0:77:ea:62:2b:42:
f9:7a:7c:23:a4:e7:42:b9:79:7e:6a:84:7b:3b:23:05:54:57:
a5:da:aa:3b:f9:de:f3:3a:18:a8:f8:c0:28:9d:48:0a:60:5d:
1d:68:0a:96:54:89:6b:65:30:17:81:d4:4a:b6:22:99:aa:58:
7b:fc:53:5f:26:36:5d:b9:33:a1:8a:60:1c:a5:9f:eb:ba:ba:
a5:28:29:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:43 2026 by rpki-client