Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
File: SMHp2hp4jQ511Yp1FeApE37W_o4.mft (raw, json)
Hash identifier: lUGIbS1m4Wra4jtd3Q1O3MfYrOHbbwjx9O2Z87oPgJ8=
Subject key identifier: BB:92:A7:94:D3:26:3C:EC:CE:5C:8B:DF:3C:2C:FE:48:39:ED:64:BF
Authority key identifier: 48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
Certificate issuer: /CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Certificate serial: 01A0CB59E747E464D113002F8D8EF86DA787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
Manifest number: 02A7
Signing time: Tue 22 Sep 2026 23:01:01 +0000
Manifest this update: Tue 22 Sep 2026 23:01:01 +0000
Manifest next update: Wed 23 Sep 2026 23:01:01 +0000
Files and hashes: 1: QfXrjLJUb_JZ4_SXYspmGSo1vhU.roa (hash: VbKsZvzC9FvlIfRYrSZ78JLt37iuRlrN1qMCaWZNw9I=)
2: SMHp2hp4jQ511Yp1FeApE37W_o4.crl (hash: LDSUmwyfPKShsL9kWrWrm450rAvQdQJBsL98/TCAoqw=)
3: XvbscRuPqnD44ovHvZ0yezaPks0.asa (hash: uYNvUOr60t3KNGg6ZzvTHqLgdJgE2TTaGqW1+IgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:e7:47:e4:64:d1:13:00:2f:8d:8e:f8:6d:a7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Validity
Not Before: Sep 22 23:01:01 2026 GMT
Not After : Sep 23 23:01:01 2026 GMT
Subject: CN=bb92a794d3263cecce5c8bdf3c2cfe4839ed64bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:3b:09:65:ac:2f:36:c1:00:fd:de:d2:0b:
36:d2:bf:47:92:60:3d:67:c2:bd:a2:59:c7:4a:ee:
30:2d:5d:31:fa:5e:ca:5e:9f:63:fa:74:e8:8f:6c:
a2:26:5f:50:7f:7e:c5:5d:95:f8:a0:7d:6c:e9:de:
46:84:9e:44:a8:35:eb:f2:5d:c5:52:4d:a8:c2:74:
47:92:72:41:8f:71:70:bf:67:b7:b5:7f:ef:48:94:
d9:ce:e0:eb:2b:91:3c:d8:0a:0e:3f:3f:82:08:99:
ea:06:1e:d2:ca:d7:70:10:4a:01:db:de:c8:37:d5:
41:86:33:91:88:22:14:51:5e:ed:0e:95:9f:79:96:
17:01:85:79:9c:ae:09:4f:9c:e8:b8:db:ed:e6:f2:
fb:eb:af:6e:0c:e8:20:41:6f:93:fc:b9:a8:06:53:
54:fe:a6:d6:55:dc:55:96:95:05:02:9c:89:83:82:
a2:21:3c:95:d8:38:39:06:39:19:e6:a0:48:62:4e:
b8:0b:4e:20:c9:a3:47:97:8f:be:c0:41:13:89:c6:
ef:4a:11:09:76:30:4a:0f:18:7d:16:c6:60:0f:ac:
c8:09:9a:1d:48:07:f5:6e:f7:a5:18:57:8b:be:d6:
79:4b:38:c2:fb:cd:5e:22:e5:99:64:2e:1a:6e:34:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:92:A7:94:D3:26:3C:EC:CE:5C:8B:DF:3C:2C:FE:48:39:ED:64:BF
X509v3 Authority Key Identifier:
keyid:48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:29:b1:41:8c:92:89:8d:64:07:ae:72:1a:5a:32:58:8d:a8:
08:83:d9:43:e0:e0:16:92:2f:9b:85:17:4a:32:3b:12:7a:61:
6d:e0:d3:36:b0:e8:52:66:39:3f:f9:58:67:c2:89:e6:f1:86:
a5:8c:e2:b1:ee:fb:e1:51:d4:7f:01:19:b6:8d:62:ca:30:99:
a1:65:b6:b3:aa:cc:9d:87:5b:3a:20:85:e7:b5:f9:5a:e1:fe:
11:cd:99:3f:3b:e0:01:8f:55:02:dc:77:c3:4b:d9:bc:68:e8:
c4:a3:6c:ce:53:7c:c0:17:e9:09:bd:2b:b8:17:81:d3:e5:7f:
3e:89:37:4d:5c:3b:7c:3b:92:fc:74:6e:ff:8d:c5:97:f3:d6:
54:e6:99:3a:4f:7c:08:fe:ce:c4:b4:59:b6:c6:bd:ec:c7:65:
94:ec:84:28:1d:c5:5f:94:9e:54:d1:2b:1d:80:5b:59:f4:98:
a3:cc:eb:af:5f:f1:52:4e:95:38:41:e7:3f:11:d9:ad:d4:d4:
f8:63:33:99:0b:d9:43:83:56:4c:37:0d:a9:06:15:09:c3:bb:
0c:11:54:5f:90:81:a3:9e:0d:05:04:b6:a2:d9:fa:b9:8f:0f:
d8:0f:67:2d:69:e1:34:c5:4d:a5:9a:da:08:78:32:64:13:35:
84:10:ee:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:23:20 2026 by rpki-client