Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
File: scmBDnrcyQAMDFlgEZoS7sbzvYY.mft (raw, json)
Hash identifier: 3IXZTSIwqnpn8PmRoe63KeqJZYseZnv9BRMGdJdVAMQ=
Subject key identifier: 76:C6:F2:DD:DC:E6:4B:94:09:51:21:A4:3F:B7:8B:4E:22:B7:27:71
Authority key identifier: B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86
Certificate issuer: /CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
Certificate serial: 019F8E3486BD7AA2DE008400D0C5750C827E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
Manifest number: 0121
Signing time: Thu 23 Jul 2026 09:00:34 +0000
Manifest this update: Thu 23 Jul 2026 09:00:34 +0000
Manifest next update: Fri 24 Jul 2026 09:00:34 +0000
Files and hashes: 1: oyoI7FD8y08cGB_3MnttuosHBX4.asa (hash: Gih4I07bk9dgtirVroJ3VSVYR02/+ZEzy2HZeD95fYE=)
2: scmBDnrcyQAMDFlgEZoS7sbzvYY.crl (hash: +tozKpiJtRQkH8D+fKD+mAKRmKpatiNpRwDdntlCujg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:86:bd:7a:a2:de:00:84:00:d0:c5:75:0c:82:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
Validity
Not Before: Jul 23 09:00:34 2026 GMT
Not After : Jul 24 09:00:34 2026 GMT
Subject: CN=76c6f2dddce64b94095121a43fb78b4e22b72771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b6:08:fa:0b:2b:58:1e:9a:96:14:69:06:e7:
88:e4:b5:d2:03:9a:be:a0:ed:e1:9c:1d:95:56:c6:
f6:14:66:a0:fd:0f:f5:33:c5:9c:d4:5c:ab:54:a8:
bb:55:af:98:19:b0:9b:e3:1e:d3:99:cd:82:e2:a0:
e9:4c:b8:bf:c4:00:05:79:7c:88:ae:9d:59:fe:d0:
08:8b:d8:cc:eb:f1:91:52:22:c4:79:ed:5f:95:89:
64:e8:9d:c7:fd:ac:fd:17:d0:72:fd:6e:73:8f:37:
1a:9c:d3:26:4d:e2:9c:e0:f5:3e:84:b9:39:f6:0c:
02:2b:c7:95:7f:9b:ab:2d:56:78:46:6d:14:ff:0c:
1e:b1:11:0b:ff:c8:f8:72:b8:5c:b7:b2:22:c2:b6:
84:03:72:9d:1e:63:13:d9:53:04:40:02:c9:ab:d3:
c1:56:92:ed:b0:fc:f6:55:95:12:59:79:b5:1c:a0:
d2:6b:53:d2:5a:e8:1e:46:19:03:f6:97:8b:60:95:
27:f7:0e:99:a9:4c:04:9a:87:81:91:c4:36:5f:13:
59:2d:d9:13:a9:2e:a8:6d:18:14:3d:75:00:28:af:
cd:55:23:96:d9:f7:e9:df:8b:6a:5a:77:a3:ae:f3:
8e:70:f4:c2:69:83:2b:ea:8e:e6:d5:c6:a5:1b:1e:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C6:F2:DD:DC:E6:4B:94:09:51:21:A4:3F:B7:8B:4E:22:B7:27:71
X509v3 Authority Key Identifier:
keyid:B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4b:53:55:c4:87:86:0a:15:33:09:d2:1f:5c:e9:8e:b8:b9:
d9:58:98:92:5a:69:8d:53:e4:cb:60:fc:58:24:cb:70:67:df:
32:3b:ae:8d:06:30:1e:d1:cc:18:bd:28:5e:79:56:9d:37:ec:
16:80:62:e0:bf:86:e0:3d:b5:c5:c7:6e:a2:50:81:a2:f8:3b:
ad:ca:1c:fc:7a:c2:43:34:a6:88:7f:69:58:ab:9d:bc:dd:23:
36:3c:b8:16:03:b2:dc:64:b8:b3:cb:86:ca:83:5e:62:71:2f:
78:f4:a8:e3:63:dd:9b:ac:0b:f3:b4:88:7c:d1:52:ac:f1:c4:
46:b9:5b:88:cb:90:22:5d:0a:77:c2:39:70:6b:a0:76:cb:71:
a6:4b:f5:84:4b:7b:7f:5a:33:5c:21:fd:91:39:3a:06:de:73:
71:47:01:ef:d0:99:e6:42:08:13:48:95:8e:57:2d:e5:63:58:
79:5d:8c:e8:d8:df:89:82:1f:b6:8a:b2:7b:5a:c9:33:19:dc:
88:4f:9b:35:5b:04:67:e7:6b:bb:60:a4:51:cc:38:93:1b:18:
f4:c9:e7:65:27:2a:07:e1:83:9e:15:13:c5:03:c9:67:06:cf:
ce:90:cf:aa:34:60:fa:e9:d9:c2:f5:e6:dd:7d:0f:b2:0e:d2:
a4:45:dc:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ONIa9eqLeAIQA0MV1DIJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYzk4MTBlN2FkY2M5MDAwYzBjNTk2MDExOWExMmVlYzZm
M2JkODYwHhcNMjYwNzIzMDkwMDM0WhcNMjYwNzI0MDkwMDM0WjAzMTEwLwYDVQQD
Eyg3NmM2ZjJkZGRjZTY0Yjk0MDk1MTIxYTQzZmI3OGI0ZTIyYjcyNzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbYI+gsrWB6alhRpBueI5LXSA5q+
oO3hnB2VVsb2FGag/Q/1M8Wc1FyrVKi7Va+YGbCb4x7Tmc2C4qDpTLi/xAAFeXyI
rp1Z/tAIi9jM6/GRUiLEee1flYlk6J3H/az9F9By/W5zjzcanNMmTeKc4PU+hLk5
9gwCK8eVf5urLVZ4Rm0U/wwesREL/8j4crhct7IiwraEA3KdHmMT2VMEQALJq9PB
VpLtsPz2VZUSWXm1HKDSa1PSWugeRhkD9peLYJUn9w6ZqUwEmoeBkcQ2XxNZLdkT
qS6obRgUPXUAKK/NVSOW2ffp34tqWnejrvOOcPTCaYMr6o7m1calGx7kswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbG8t3c5kuUCVEhpD+3i04itydxMB8GA1UdIwQY
MBaAFLHJgQ563MkADAxZYBGaEu7G872GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2NtQkRucmN5UUFNREZsZ0Vab1M3c2J6dllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lMTRjMWItNGQ4YS00MzA5LTlhMDEt
NWQ3ZDI2NzRiZTdjLzEvc2NtQkRucmN5UUFNREZsZ0Vab1M3c2J6dllZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9lMTRjMWItNGQ4YS00MzA5LTlhMDEtNWQ3ZDI2NzRiZTdj
LzEvc2NtQkRucmN5UUFNREZsZ0Vab1M3c2J6dllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEtTVcSH
hgoVMwnSH1zpjri52ViYklppjVPky2D8WCTLcGffMjuujQYwHtHMGL0oXnlWnTfs
FoBi4L+G4D21xcduolCBovg7rcoc/HrCQzSmiH9pWKudvN0jNjy4FgOy3GS4s8uG
yoNeYnEvePSo42Pdm6wL87SIfNFSrPHERrlbiMuQIl0Kd8I5cGugdstxpkv1hEt7
f1ozXCH9kTk6Bt5zcUcB79CZ5kIIE0iVjlct5WNYeV2M6NjfiYIftoqye1rJMxnc
iE+bNVsEZ+dru2CkUcw4kxsY9MnnZScqB+GDnhUTxQPJZwbPzpDPqjRg+unZwvXm
3X0Psg7SpEXc8Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:49 2026 by rpki-client