Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
File: smu0Mz7-nhTEgxsFghQW5cVb30I.mft (raw, json)
Hash identifier: SsUSjrYIX1DtV9Ma95f4E45Y3fSgVwmUjD306PFKTh8=
Subject key identifier: 4D:1C:1D:44:ED:3F:68:7C:8B:DC:EB:BB:CA:E6:2D:0A:8D:8D:C9:A4
Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
Certificate issuer: /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Certificate serial: 019D2B17271F4BF4404DE9B20806ACD03B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
Manifest number: 1341
Signing time: Thu 26 Mar 2026 17:00:30 +0000
Manifest this update: Thu 26 Mar 2026 17:00:30 +0000
Manifest next update: Fri 27 Mar 2026 17:00:30 +0000
Files and hashes: 1: K3--tSHrK6jHY5tkxG0drJwKCRw.roa (hash: FEwiaAI6iVYZhO3Y0U4cLdmpsBfhF+ZTk9nAW/Qd0gc=)
2: smu0Mz7-nhTEgxsFghQW5cVb30I.crl (hash: CB+ih0xU0+HBnPl9gAhvQmrBcNdmg4T4hV6IqZ+h920=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:27:1f:4b:f4:40:4d:e9:b2:08:06:ac:d0:3b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Validity
Not Before: Mar 26 17:00:30 2026 GMT
Not After : Mar 27 17:00:30 2026 GMT
Subject: CN=4d1c1d44ed3f687c8bdcebbbcae62d0a8d8dc9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8c:be:19:25:23:b2:e0:1d:4e:d2:92:24:7b:
55:d2:5d:5c:8f:3e:fd:97:68:2d:e5:4a:71:6d:4a:
f5:11:4c:a3:98:75:2d:c9:65:00:d2:6c:77:8a:ad:
bf:44:ff:cd:bd:aa:34:7e:a6:1e:37:78:19:06:29:
be:c1:99:a7:df:58:15:75:5c:63:7c:05:a2:ad:2f:
92:97:d0:ac:4e:83:e5:aa:a8:49:d2:d5:0d:43:96:
36:5e:f0:d9:56:42:e8:d0:e4:dd:11:a8:36:b3:10:
4b:be:b0:68:68:3d:fc:2a:0b:b1:5e:c8:fd:5c:8c:
4f:8c:d9:c1:61:48:da:17:fb:83:ad:9c:3f:05:76:
58:6e:0b:e0:78:bd:15:77:1e:23:8c:be:46:85:0a:
0b:57:ea:c1:e7:ba:7c:ab:51:9b:0a:4f:49:8f:53:
7f:30:9d:d9:99:bd:f1:b7:1b:05:fb:4f:45:0c:37:
ab:6e:3d:37:34:87:17:ea:e4:4c:d7:99:87:0c:62:
9d:20:37:6b:8d:f1:4e:bf:39:b5:57:28:97:91:76:
40:99:c0:f2:a0:15:bf:02:3d:95:20:cc:c3:09:6a:
b0:42:5b:14:d9:6b:f9:b9:3c:38:44:df:c6:bf:3d:
e0:25:0c:cc:f4:a8:08:db:2c:ac:85:88:af:f7:7d:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1C:1D:44:ED:3F:68:7C:8B:DC:EB:BB:CA:E6:2D:0A:8D:8D:C9:A4
X509v3 Authority Key Identifier:
keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:de:0d:5d:1d:97:8f:09:fb:fc:7f:70:b2:e2:95:f0:4d:58:
25:54:10:88:5b:19:d9:0b:3f:ea:ee:b5:09:5c:12:f1:da:0a:
61:31:30:a0:e7:2e:db:d0:79:f1:ef:d6:0a:4b:e3:58:c8:47:
2e:93:81:cb:31:55:28:ed:b2:93:6d:aa:2a:bf:c5:41:26:d4:
17:50:68:bc:58:91:dc:d3:ce:38:0a:f5:63:43:81:4d:5e:1c:
e5:e5:d9:f8:4a:e4:4e:d7:35:53:ec:a3:dd:cb:18:7f:d2:49:
17:ae:8b:fe:3f:f2:90:b6:ea:85:29:f3:9b:24:48:26:a3:71:
d2:e4:74:2c:7f:3f:b6:53:8d:f8:35:2d:c5:a5:f3:ea:2d:1c:
80:49:88:c7:2c:b6:f4:f7:8d:cd:b0:ad:3a:dc:c4:5c:93:d6:
ea:29:d1:07:4e:5c:5f:6c:6e:3c:65:bb:a0:3e:d9:f4:15:61:
6d:10:0f:32:45:70:8f:92:88:17:be:73:c0:13:12:c6:62:d3:
97:f4:ce:bf:34:03:ae:43:ac:e4:ef:07:fb:9f:1d:cc:dc:a2:
71:22:c6:db:12:1e:88:ce:8d:04:ff:89:5a:95:e7:fd:4b:dd:
8d:37:ac:48:d4:eb:0f:1b:06:0a:a9:a7:15:b3:22:14:12:e9:
2b:42:cc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:26:00 2026 by rpki-client