Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
File: smu0Mz7-nhTEgxsFghQW5cVb30I.mft (raw, json)
Hash identifier: ugB4b5fvlc7htDj+j+3Zz0OXsiDVSg4oA8xjT7RL0Hk=
Subject key identifier: D3:B1:9D:3B:61:F1:0E:39:C9:F5:F2:D9:C3:8A:46:B3:CB:09:04:73
Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
Certificate issuer: /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Certificate serial: 01A12A9F8E3C08CCF5B1BB4CDE9857E0973D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
Manifest number: 1553
Signing time: Sun 11 Oct 2026 11:01:01 +0000
Manifest this update: Sun 11 Oct 2026 11:01:01 +0000
Manifest next update: Mon 12 Oct 2026 11:01:01 +0000
Files and hashes: 1: K3--tSHrK6jHY5tkxG0drJwKCRw.roa (hash: FEwiaAI6iVYZhO3Y0U4cLdmpsBfhF+ZTk9nAW/Qd0gc=)
2: smu0Mz7-nhTEgxsFghQW5cVb30I.crl (hash: sQXHbdehayAif1WzqJ7GYdWqfdIzT26uNlbeQqv9JAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:8e:3c:08:cc:f5:b1:bb:4c:de:98:57:e0:97:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Validity
Not Before: Oct 11 11:01:01 2026 GMT
Not After : Oct 12 11:01:01 2026 GMT
Subject: CN=d3b19d3b61f10e39c9f5f2d9c38a46b3cb090473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:7b:4d:41:e5:d6:88:66:55:de:a2:ab:f1:
86:86:ca:d8:07:91:cd:65:90:69:ba:71:e4:23:ba:
39:7c:b4:50:32:0c:9f:1d:83:7a:a0:b1:9c:6c:4b:
bc:25:2f:ad:a8:65:5f:1d:bc:e8:8c:3b:d7:77:d0:
84:2b:75:9c:b8:3f:e9:60:28:c0:a7:89:b8:30:93:
cc:26:07:26:19:00:ec:3a:bd:46:45:6c:d2:29:f5:
bc:ea:ba:b6:09:b6:d6:a0:7b:3b:96:8c:09:36:11:
66:61:6d:6a:be:c9:b8:4a:2e:30:07:a7:fd:e4:22:
66:4a:8f:04:e8:6b:ed:64:37:75:b0:33:b5:eb:31:
c2:58:45:3a:d6:bd:f0:4f:23:6c:21:ed:9a:68:d2:
ee:83:07:b9:ca:cb:1b:be:10:1b:8c:f4:86:58:17:
c9:be:8d:5a:b4:96:09:62:84:01:f6:f1:5a:78:60:
b2:49:85:d5:10:91:8c:af:94:8d:61:f7:cd:7a:41:
43:c6:99:a9:0b:90:7d:83:31:da:a4:32:15:43:0c:
b2:91:f0:57:22:a9:82:32:c9:e4:c3:42:70:a0:08:
7c:75:20:7d:f4:e8:61:aa:ec:d2:d8:4b:a3:5f:6c:
94:d7:b5:05:d9:9a:11:78:be:0b:4d:b8:85:1e:25:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B1:9D:3B:61:F1:0E:39:C9:F5:F2:D9:C3:8A:46:B3:CB:09:04:73
X509v3 Authority Key Identifier:
keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ea:b6:18:a5:ee:41:6f:88:bb:8e:f0:ad:8c:ec:c2:ac:23:
a3:01:d9:ca:37:6d:dc:83:ea:e6:db:0f:70:7e:ba:fb:a9:a6:
bd:b6:21:04:3f:8e:10:28:2c:9a:be:40:24:77:67:7b:ab:56:
aa:6d:ec:85:5b:f4:3c:e5:88:e3:58:c4:43:1c:7b:60:b2:d3:
df:3b:08:bb:bc:cf:a1:75:18:ce:1c:48:7b:c7:3a:4c:8d:08:
fd:a2:bf:69:06:b3:36:d2:ba:09:c3:85:8d:3b:e1:52:6d:d0:
2e:08:78:32:6e:7a:d4:38:d8:2e:15:53:c6:27:87:30:a0:e9:
07:fb:c2:20:be:1f:40:de:3b:05:e9:74:2c:70:83:02:9e:0a:
a3:7c:fb:28:5c:fc:02:97:52:b1:3b:59:be:79:51:52:2a:c9:
ef:df:6f:9a:84:78:a6:23:eb:23:46:d8:fb:c0:1c:6f:00:ac:
a6:82:08:9e:e9:ba:0c:09:f8:0f:14:06:a6:be:74:83:d9:a7:
2d:df:3d:a2:9c:ff:cf:d0:31:58:66:0c:cb:f5:d5:98:c8:10:
ff:07:a9:71:1e:e5:76:7e:6d:11:0a:bf:b7:99:ce:f7:57:d7:
41:4a:ad:16:74:3e:91:7f:30:15:89:ec:21:9e:28:4e:aa:7d:
0d:3f:ba:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:00:34 2026 by rpki-client