
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
File: sMeY09W2CWzTnliSWiihffthznU.mft (raw, json)
Hash identifier: KAsYS7dAi/x+PZ9o2p6jLN/iLg+/El+6CxUB1EXBxZU=
Subject key identifier: 14:4F:DD:07:F2:23:1B:73:16:1B:BA:8D:EA:24:FA:26:82:08:35:AD
Authority key identifier: B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
Certificate issuer: /CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Certificate serial: 019D27727061936248C899EFA3558EB6EE40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
Manifest number: 0DE0
Signing time: Thu 26 Mar 2026 00:01:44 +0000
Manifest this update: Thu 26 Mar 2026 00:01:44 +0000
Manifest next update: Fri 27 Mar 2026 00:01:44 +0000
Files and hashes: 1: oTQStwFSuI2Q1W08FZTLs7BXO5k.roa (hash: C8X1J1aYpfCLBdtwgg3h+C2d55+qHBalin4zkQ6E7f4=)
2: sMeY09W2CWzTnliSWiihffthznU.crl (hash: mD6f9gcy6jObqErh1jLKakxPcVXRglY9miAOs29HWcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:70:61:93:62:48:c8:99:ef:a3:55:8e:b6:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Validity
Not Before: Mar 26 00:01:44 2026 GMT
Not After : Mar 27 00:01:44 2026 GMT
Subject: CN=144fdd07f2231b73161bba8dea24fa26820835ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:02:36:8f:82:01:0a:35:bf:6e:bc:1d:25:
d1:c6:f4:ec:6c:a5:45:36:f8:e6:a1:b9:53:af:43:
53:25:b9:09:79:cf:8e:80:00:0b:99:ff:28:2a:1a:
c0:7b:d2:fc:e5:97:b9:7e:00:8f:23:3b:f7:8f:95:
7b:9f:f2:62:8a:15:45:b8:85:be:9e:89:1c:c0:c0:
1f:23:16:70:52:14:88:11:70:13:8c:5c:2d:c1:ef:
68:cd:2a:bf:46:9f:23:e4:a9:99:a1:42:ee:48:c0:
90:21:31:e8:94:ef:83:86:42:bb:5d:8a:ae:60:cf:
54:d8:4a:e8:a2:99:30:8f:e0:73:ba:15:8b:ce:29:
cb:0d:52:ad:cb:27:97:45:8e:3e:10:24:4a:ac:2d:
a9:18:00:d7:b4:e6:9a:45:93:f7:30:2c:84:01:0a:
53:b7:99:39:bd:27:46:f6:45:ef:0f:e5:e4:c4:af:
02:00:d1:53:07:5b:00:e7:0d:b6:21:67:0e:c3:09:
60:fa:c6:27:7e:46:41:34:06:5d:e9:5e:0e:e1:73:
6e:5b:1d:c8:4a:df:8b:49:56:e4:1c:e9:b0:1b:31:
56:46:9d:05:d9:a2:9a:05:b1:e8:de:3e:b6:f4:07:
38:f3:96:15:a6:9d:27:07:f7:26:f9:82:0d:09:04:
24:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4F:DD:07:F2:23:1B:73:16:1B:BA:8D:EA:24:FA:26:82:08:35:AD
X509v3 Authority Key Identifier:
keyid:B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ac:8f:5b:15:86:14:a6:d7:a9:86:38:36:35:ee:47:01:ac:
4d:4d:75:b9:88:fc:20:67:96:c0:f8:d0:40:52:a0:24:86:95:
76:10:3a:51:3b:c9:31:be:84:b7:92:33:9f:09:b6:1d:62:ab:
61:fd:01:0b:e9:02:c1:2f:de:98:1e:88:7c:1a:cf:4f:40:ec:
46:d7:ee:d6:26:e9:98:bc:cd:b2:d1:eb:a1:47:6c:11:df:27:
bd:67:a6:a4:ef:da:54:2e:ab:15:e9:c7:bb:8f:23:7d:24:4f:
aa:6c:2f:66:6c:c3:1c:85:24:94:49:e8:14:05:9f:9c:4d:d8:
e7:a7:0a:e0:c5:36:40:55:ca:13:9a:5b:1f:df:35:7a:ef:f2:
bd:d8:97:ab:80:ff:3b:e7:a8:72:5f:9d:a2:5b:15:5f:3a:57:
37:2e:94:28:4e:78:b6:f4:07:99:45:5a:e9:bd:38:08:0e:eb:
18:c2:87:a4:21:74:54:88:19:29:50:34:39:b3:c5:67:27:2d:
3b:21:e8:58:86:bb:32:72:2a:8e:1d:f5:37:75:94:b0:5e:67:
58:aa:3f:1c:d3:7d:1a:da:bc:b8:13:a4:5c:fc:a1:2f:78:35:
ea:cf:2a:ef:2b:b5:91:50:3d:39:a5:b5:49:75:b4:9c:f1:27:
04:53:f1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:58 2026 by rpki-client