Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
File: SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json)
Hash identifier: MInZpbyiUItELTZ+ixbBmyUtx2+KwH2Q7YjXxPmRnBs=
Subject key identifier: E0:53:61:EA:A9:B4:AC:8D:69:0F:FD:AB:5A:9F:7A:95:4F:29:5D:8D
Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Certificate issuer: /CN=4a6376ce92087e4c7ce536686537769e2cc34059
Certificate serial: 01A0D83B67F0FAFD8F792664D793F38E8A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 11:02:46 +0000
Manifest this update: Fri 25 Sep 2026 11:02:46 +0000
Manifest next update: Sat 26 Sep 2026 11:02:46 +0000
Files and hashes: 1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: H5AAcdG2GCqomTgpcM/itDJH+XbqLSPD6kNEGH67bBI=)
2: b6GatGiUFxM_87xt_5qHFxZqZQ0.roa (hash: aB8H9RSypH5EK63/M5cIx7z9EJKV2WitqNTM48KwyXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:67:f0:fa:fd:8f:79:26:64:d7:93:f3:8e:8a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059
Validity
Not Before: Sep 25 11:02:46 2026 GMT
Not After : Sep 26 11:02:46 2026 GMT
Subject: CN=e05361eaa9b4ac8d690ffdab5a9f7a954f295d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:72:19:8f:0e:68:93:32:e5:19:74:0d:a2:99:
0a:fd:9b:3f:6c:78:e1:ec:d2:2e:95:0b:f6:63:e3:
49:93:5f:5a:1e:fc:4c:41:dd:05:7f:5b:49:1a:5f:
b7:b2:63:d1:7c:8f:2b:a5:9a:2c:62:0d:a4:28:af:
15:08:ff:46:b2:33:05:f0:58:be:4b:d7:09:b9:91:
44:f4:42:51:96:ef:38:dd:86:d0:f3:13:0b:a5:6e:
54:80:c4:4c:26:fb:33:81:9e:56:22:eb:c0:58:98:
31:06:b4:dc:7f:f7:b4:81:27:0f:63:98:6a:62:65:
3e:70:08:e2:ac:07:7e:87:bd:f1:31:e7:43:52:c2:
cf:82:41:93:f9:ff:3d:c1:90:75:1d:f6:cb:d3:21:
b9:4a:74:d0:63:a6:08:a8:59:5c:3e:22:76:ce:06:
7b:b7:9e:ed:09:90:fc:64:aa:8b:c7:b3:45:7c:9f:
fc:e0:53:10:9a:69:18:c4:2c:3b:cf:24:78:9e:75:
3a:47:59:26:70:62:fe:3c:61:b9:82:ad:34:11:32:
c3:24:60:f9:8c:3c:d5:78:ff:c5:ac:4a:a3:19:da:
98:1c:82:13:d9:3c:e2:a6:36:59:39:ab:2f:b4:15:
22:15:6d:db:64:b9:ee:ce:a1:b7:2f:54:52:22:69:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:53:61:EA:A9:B4:AC:8D:69:0F:FD:AB:5A:9F:7A:95:4F:29:5D:8D
X509v3 Authority Key Identifier:
keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:76:12:76:08:98:f6:e9:0f:2f:c4:12:c8:89:52:be:51:e4:
6d:fe:fd:d4:de:e1:79:8a:16:25:0b:67:31:03:c0:03:e4:32:
8e:19:bc:df:47:86:2d:88:2b:c4:2a:7a:26:7e:14:39:93:3d:
3b:21:a9:05:6a:9b:3e:a1:59:d0:01:b5:25:93:02:d0:e5:a2:
f2:81:14:d6:4f:75:cb:b5:a8:1a:fe:4b:99:1a:f0:4b:ac:c6:
f8:e8:b0:0f:a4:ad:f9:e7:91:39:ec:71:4b:fb:c3:f5:a8:13:
0a:3f:6e:49:80:ce:75:1d:e5:8d:90:2f:82:de:52:85:d6:d4:
ed:fd:c7:19:06:e2:b3:df:34:a5:eb:3c:bb:9f:27:f2:f4:52:
86:16:8c:68:cc:5b:14:c2:ef:de:af:4c:39:a4:4e:c0:dd:f7:
75:06:3a:4f:64:6d:8a:46:e2:e3:99:5d:28:b7:d5:4a:98:4a:
7b:fe:3c:26:09:1c:ab:f9:1f:98:84:59:a7:e2:aa:fc:97:d3:
e4:1b:b9:79:ca:da:ef:2c:16:db:04:a6:0d:85:27:cd:13:6c:
e5:0f:bb:f2:ee:32:25:23:3c:72:58:e3:5a:e6:82:86:5a:37:
3e:4e:75:5c:99:6c:98:fb:b8:39:16:55:6d:3d:5a:5c:d7:bb:
15:48:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:44:37 2026 by rpki-client