Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
File: SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json)
Hash identifier: OLJJroBY+GAxnDjjm1w+u0eQtuq/D2kkK8E43flD9r8=
Subject key identifier: 8C:3A:EC:8D:D8:14:B9:D9:8B:C6:39:FE:94:10:97:D1:08:09:70:61
Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Certificate issuer: /CN=48c311ede28b92f5c61a912be06039498b23422a
Certificate serial: 019D2960B868EBB108D02B02B27977B2A379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
Manifest number: 0971
Signing time: Thu 26 Mar 2026 09:01:37 +0000
Manifest this update: Thu 26 Mar 2026 09:01:37 +0000
Manifest next update: Fri 27 Mar 2026 09:01:37 +0000
Files and hashes: 1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: oH2m5eS/2sAuu9PZMmGdRqlWKZIBoj6SX8BJLVicHPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:b8:68:eb:b1:08:d0:2b:02:b2:79:77:b2:a3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a
Validity
Not Before: Mar 26 09:01:37 2026 GMT
Not After : Mar 27 09:01:37 2026 GMT
Subject: CN=8c3aec8dd814b9d98bc639fe941097d108097061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d8:10:ed:a4:c8:02:eb:8e:0b:1a:90:0c:18:
c7:11:5c:ba:32:04:14:73:06:cb:4b:51:77:8b:70:
d8:05:49:4b:a2:62:ce:49:63:68:58:e0:e4:48:d1:
4a:fe:be:04:1e:89:f1:f8:08:c7:75:45:3d:2e:56:
67:5e:49:c1:4b:2f:b2:04:3c:97:15:0f:5b:9b:27:
47:43:7e:be:1b:96:ed:0d:e7:cb:ee:3c:89:1a:49:
34:d7:f7:f0:16:59:9e:c0:11:83:82:b7:89:9e:2d:
10:b3:b0:e2:90:6b:e7:9d:0b:1b:f9:e4:bb:79:4b:
68:6a:b8:f9:cc:ac:0f:80:a9:cb:c4:d4:66:a0:0a:
3a:35:20:da:94:79:b4:1e:74:25:8c:7d:8b:8a:d3:
74:3a:2c:00:0a:ef:e1:53:ed:65:b8:e5:02:3a:31:
f7:36:27:9e:16:4f:f4:67:1e:bd:2b:c8:dc:09:bd:
00:9b:6b:c8:6e:b3:4c:00:55:cd:f1:89:ba:b0:1d:
43:47:cf:7e:86:2a:9e:6e:d6:3b:78:73:10:76:92:
ad:5c:c3:85:15:3f:77:74:c1:28:86:17:21:33:97:
10:ee:0b:bf:a4:ef:29:89:03:b1:ea:64:a8:52:44:
79:38:f3:5d:e3:88:f7:24:34:54:19:00:f1:27:93:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3A:EC:8D:D8:14:B9:D9:8B:C6:39:FE:94:10:97:D1:08:09:70:61
X509v3 Authority Key Identifier:
keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:98:b1:ae:aa:1d:25:fd:35:32:e1:92:bb:b3:f7:56:39:2a:
1f:a7:2d:0c:7f:b7:72:aa:89:12:cf:b0:87:a5:3f:72:e5:82:
05:5d:b6:65:74:0f:7f:b3:25:a0:cc:ef:df:81:ea:0f:84:e4:
75:60:9e:84:5d:7e:4e:7d:98:9e:80:cb:13:c9:ad:a6:9c:23:
d5:db:27:51:f5:09:b9:71:77:fc:63:8c:3d:08:ef:63:dd:ad:
5a:8e:d7:91:a0:7b:e1:f1:40:61:75:07:1c:76:83:83:fd:5b:
e7:92:73:28:eb:d6:54:87:c4:64:3a:6d:38:79:b1:e4:74:3f:
fe:bd:13:ea:67:47:33:87:54:e5:d1:03:d9:27:76:e7:51:60:
41:27:6f:5f:06:f8:f8:ab:ce:e4:14:66:ae:e7:0d:2b:00:e5:
89:7d:23:34:64:f2:95:8e:00:bf:3f:72:03:ff:54:54:d7:6c:
70:67:bd:51:37:fb:27:ac:1c:e9:d8:67:76:4c:e1:8e:a6:3b:
8a:a5:7d:fe:be:8c:09:fb:1e:d3:f1:c0:f3:2e:f6:71:e0:63:
81:17:3a:aa:c5:bc:08:2c:3e:35:b3:81:82:c4:74:a3:88:e4:
4e:53:60:84:33:b1:59:51:a7:e8:10:52:c1:cf:67:1e:c9:ff:
b6:59:6d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:37 2026 by rpki-client