Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
File: SMHp2hp4jQ511Yp1FeApE37W_o4.mft (raw, json)
Hash identifier: nlWS0pIzsW4CuPsjGzSG6FLcRgHveGfjlyY4Hl8G+lU=
Subject key identifier: DB:DE:DF:08:37:63:CC:9F:58:09:EB:A5:31:6F:5A:DD:31:59:AA:D2
Authority key identifier: 48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
Certificate issuer: /CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Certificate serial: 019F8EA21FED8DDC670346036C5F78BFB5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
Manifest number: 0203
Signing time: Thu 23 Jul 2026 11:00:17 +0000
Manifest this update: Thu 23 Jul 2026 11:00:17 +0000
Manifest next update: Fri 24 Jul 2026 11:00:17 +0000
Files and hashes: 1: QfXrjLJUb_JZ4_SXYspmGSo1vhU.roa (hash: VbKsZvzC9FvlIfRYrSZ78JLt37iuRlrN1qMCaWZNw9I=)
2: SMHp2hp4jQ511Yp1FeApE37W_o4.crl (hash: phIA/5JRy7suywNPEI7yFtmMXN/RcYeNk5hwzFTFs+g=)
3: XvbscRuPqnD44ovHvZ0yezaPks0.asa (hash: uYNvUOr60t3KNGg6ZzvTHqLgdJgE2TTaGqW1+IgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:1f:ed:8d:dc:67:03:46:03:6c:5f:78:bf:b5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Validity
Not Before: Jul 23 11:00:17 2026 GMT
Not After : Jul 24 11:00:17 2026 GMT
Subject: CN=dbdedf083763cc9f5809eba5316f5add3159aad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:e6:f5:32:46:cc:f2:46:51:97:81:e6:54:
72:2d:35:5d:4c:92:b5:c6:f3:4d:54:f1:86:2d:28:
7a:79:de:48:69:06:29:a6:7d:7b:17:47:f8:e7:b4:
4a:55:c8:f4:ff:1e:e5:78:d4:57:c8:56:4e:e4:fc:
7f:5f:fe:76:53:01:9e:fa:ab:9c:0f:d3:94:3f:d2:
cf:6f:ba:41:d4:90:65:96:2b:d9:5c:77:94:e8:2a:
09:04:0c:9d:5c:11:db:31:fb:e6:ed:3d:87:44:e1:
fd:7d:f6:f0:52:c8:6a:65:5c:7d:65:fc:05:f3:53:
eb:24:27:7c:04:47:cd:71:92:77:37:ac:63:44:16:
69:dc:a7:28:81:ab:89:7e:2d:10:a8:b4:eb:0f:90:
dc:57:4a:61:96:b6:10:21:6d:8c:42:2a:f3:24:03:
99:d0:1a:b2:4e:af:d1:72:0b:b1:88:d3:39:8f:5e:
e8:b3:c2:18:d2:a2:b4:e8:3f:02:87:64:9c:21:89:
98:5a:bb:60:e9:48:b3:8c:74:2e:78:af:f4:f9:f0:
00:88:c3:9c:b8:0b:98:9d:09:71:2a:16:c3:27:21:
e8:59:e0:4d:54:86:32:38:0a:ba:7f:d4:bd:9c:92:
ab:2f:03:13:00:ce:52:b9:a6:34:60:b1:ff:35:ad:
ec:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DE:DF:08:37:63:CC:9F:58:09:EB:A5:31:6F:5A:DD:31:59:AA:D2
X509v3 Authority Key Identifier:
keyid:48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e0:9d:a1:7e:10:b2:53:00:de:59:0e:bc:9a:ea:18:a2:a7:
a9:62:ae:22:cd:93:58:46:8b:66:bf:23:04:2f:c9:0b:37:8c:
6b:84:5e:48:7d:dc:e4:e0:a4:25:ea:b7:aa:9f:d5:f6:6e:a9:
a1:04:71:1d:72:6e:0d:74:47:1d:46:6b:57:93:db:83:3c:e1:
d6:50:7e:45:92:b5:7f:7f:a6:25:8c:e1:d6:fa:e6:63:01:70:
07:e1:cb:09:d5:ff:cf:17:c3:73:ed:78:e3:9b:f3:00:6e:e1:
ab:ed:63:59:77:4e:35:64:0e:a6:d9:3b:46:2e:1a:24:77:9d:
b7:2e:bd:f6:f3:f8:a6:01:1e:22:68:f6:cb:c3:9f:d6:4b:0c:
7d:d0:d7:f1:b1:5e:a9:98:dd:e5:a9:2a:23:8b:2a:35:5a:fe:
12:91:15:70:c6:60:e4:a7:8d:28:3c:8a:cc:07:b2:6f:69:a1:
62:2e:43:53:e8:95:c8:78:b9:86:58:62:b3:a5:10:57:07:b6:
c1:9b:dc:27:fe:93:93:72:8c:90:e3:2c:ed:2d:7d:04:1e:27:
1e:06:ef:89:31:06:07:af:cc:59:df:68:05:aa:36:96:09:9e:
f6:58:d7:1a:c5:d0:6c:df:ea:e7:c4:5c:a3:8c:1a:79:c7:a0:
e0:c8:93:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:51 2026 by rpki-client