Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
File: sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json)
Hash identifier: lTmOnzPnMosqes6gCFhJFWJw+15CEkOXmRqZKYiwoWA=
Subject key identifier: 84:8A:36:DD:78:68:B1:13:FE:56:A9:FA:AB:ED:C5:98:BE:AB:1C:38
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Certificate issuer: /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial: 019D27A8F18FCC471B65FC72F6157FEC6FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
Manifest number: 0F18
Signing time: Thu 26 Mar 2026 01:01:16 +0000
Manifest this update: Thu 26 Mar 2026 01:01:16 +0000
Manifest next update: Fri 27 Mar 2026 01:01:16 +0000
Files and hashes: 1: CFu9oBncqnpNmNRX4mjTnLjrg88.roa (hash: B2878+aNIHIe1LVscKgla2xHXSTcQOkvuEd8azDazoE=)
2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: r8sfC4FRLm+OtV1u60SbnK2fJCVpQM8HoAFInU0Fb5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f1:8f:cc:47:1b:65:fc:72:f6:15:7f:ec:6f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Validity
Not Before: Mar 26 01:01:16 2026 GMT
Not After : Mar 27 01:01:16 2026 GMT
Subject: CN=848a36dd7868b113fe56a9faabedc598beab1c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:1b:b0:78:f1:d2:65:2a:48:dc:74:7f:98:
72:e2:2f:54:c6:e7:d0:21:86:ae:2a:86:cf:ef:76:
fe:7d:01:a5:a7:33:87:a5:9d:63:79:0b:8d:87:6f:
51:af:13:2f:28:4e:9d:8c:e7:28:78:6d:85:2d:46:
7f:f0:ed:9d:ad:5a:56:e2:12:f2:5e:1f:93:88:fc:
e5:e8:33:ca:35:15:33:92:cd:d3:3b:c0:82:43:1f:
59:e0:4f:8a:8a:f8:e4:af:f5:74:a1:1b:e3:da:4d:
3b:7e:e7:52:7f:ec:fb:42:dd:44:74:d7:14:d5:13:
e4:7b:bd:0b:49:2d:6e:c5:ea:92:ef:f8:83:95:b8:
4c:b4:7f:e9:94:1f:ee:3f:4c:27:c1:dc:40:d0:d8:
56:54:a0:c4:d3:64:aa:fe:02:68:15:18:4e:cb:80:
5b:bb:20:d5:f4:ff:23:23:01:81:51:f0:8e:32:30:
ea:3e:0d:5d:fb:fc:87:8d:d4:da:23:14:09:e8:5c:
14:55:ed:d7:ce:cf:68:c7:e1:43:e3:5c:1f:3e:27:
c7:6c:d5:44:8a:19:75:98:af:25:6e:95:1f:65:61:
6f:bd:27:ec:0d:5b:5a:8e:d1:47:4a:84:93:bc:4b:
83:d6:cb:0f:81:a1:c3:9e:b1:bf:73:89:70:b4:6d:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8A:36:DD:78:68:B1:13:FE:56:A9:FA:AB:ED:C5:98:BE:AB:1C:38
X509v3 Authority Key Identifier:
keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:17:c7:cb:46:66:f3:78:f3:7d:5c:b8:12:49:7f:2d:53:41:
cc:d3:a2:8d:b7:80:d1:cb:ea:eb:77:1b:61:89:74:f9:e9:7c:
e7:c8:c4:3b:7d:ee:52:5e:48:66:ff:1a:8d:9e:18:37:f2:b9:
fd:2e:49:90:f6:c3:7d:f0:37:2b:e6:8e:9e:28:25:be:13:4c:
3b:b9:67:4a:15:5c:3c:50:8b:1f:54:24:b0:a1:15:da:0e:f7:
ec:98:51:08:85:db:e2:29:2a:53:3f:fe:ba:ae:cd:3d:10:67:
a6:16:69:28:8e:f2:59:fb:a8:b9:e0:74:9f:78:72:5e:16:97:
c7:5a:e8:05:7a:58:ec:ac:8e:93:d5:06:50:28:61:93:84:9f:
b6:5d:88:ae:b1:b6:f0:08:aa:69:ef:d1:c9:f0:9c:ec:56:4d:
6c:d5:c1:a6:04:af:8b:a8:d5:a9:01:6f:66:7e:46:5e:ed:90:
27:c9:96:c4:5e:9a:b3:1a:bb:34:ad:9d:d4:23:84:6b:b4:3d:
31:08:f0:16:a2:a2:b4:54:c5:87:5b:fd:4d:80:fe:6d:e6:bf:
f9:6e:a2:25:c5:4c:a0:43:de:8f:f5:cc:a3:db:fc:d5:e7:ec:
64:17:c0:ff:ca:71:c2:55:6a:71:02:dd:87:7c:45:6c:68:ed:
75:4b:38:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqPGPzEcbZfxy9hV/7G+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzk5Yjk1MWM2YTZmNmFkY2M4NjhkODg1YTk0MGFkZjAw
NTFhMTkwHhcNMjYwMzI2MDEwMTE2WhcNMjYwMzI3MDEwMTE2WjAzMTEwLwYDVQQD
Eyg4NDhhMzZkZDc4NjhiMTEzZmU1NmE5ZmFhYmVkYzU5OGJlYWIxYzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI4bsHjx0mUqSNx0f5hy4i9UxufQ
IYauKobP73b+fQGlpzOHpZ1jeQuNh29RrxMvKE6djOcoeG2FLUZ/8O2drVpW4hLy
Xh+TiPzl6DPKNRUzks3TO8CCQx9Z4E+Kivjkr/V0oRvj2k07fudSf+z7Qt1EdNcU
1RPke70LSS1uxeqS7/iDlbhMtH/plB/uP0wnwdxA0NhWVKDE02Sq/gJoFRhOy4Bb
uyDV9P8jIwGBUfCOMjDqPg1d+/yHjdTaIxQJ6FwUVe3Xzs9ox+FD41wfPifHbNVE
ihl1mK8lbpUfZWFvvSfsDVtajtFHSoSTvEuD1ssPgaHDnrG/c4lwtG3eHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISKNt14aLET/lap+qvtxZi+qxw4MB8GA1UdIwQY
MBaAFLDJm5Ucam9q3Mho2IWpQK3wBRoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMt
M2U2OTU2ZWQyYzZhLzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMtM2U2OTU2ZWQyYzZh
LzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBfHy0Zm
83jzfVy4Ekl/LVNBzNOijbeA0cvq63cbYYl0+el858jEO33uUl5IZv8ajZ4YN/K5
/S5JkPbDffA3K+aOniglvhNMO7lnShVcPFCLH1QksKEV2g737JhRCIXb4ikqUz/+
uq7NPRBnphZpKI7yWfuoueB0n3hyXhaXx1roBXpY7KyOk9UGUChhk4Sftl2IrrG2
8Aiqae/RyfCc7FZNbNXBpgSvi6jVqQFvZn5GXu2QJ8mWxF6asxq7NK2d1COEa7Q9
MQjwFqKitFTFh1v9TYD+bea/+W6iJcVMoEPej/XMo9v81efsZBfA/8pxwlVqcQLd
h3xFbGjtdUs4DQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:17 2026 by rpki-client