Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
File: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft (raw, json)
Hash identifier: DGR5cjebsSkQn23Slcb5vBmck0au/Sh74kukbsjQUwk=
Subject key identifier: E6:62:B7:FB:35:96:37:37:A9:CB:DE:4C:0A:44:8A:79:4E:60:C7:89
Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
Certificate issuer: /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Certificate serial: 019D2772058A2843439F38D7C8622ACB1B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
Manifest number: 0D4A
Signing time: Thu 26 Mar 2026 00:01:17 +0000
Manifest this update: Thu 26 Mar 2026 00:01:17 +0000
Manifest next update: Fri 27 Mar 2026 00:01:17 +0000
Files and hashes: 1: RmVwQ5QDa-u0kfemf1HFPFpXMmA.roa (hash: SnG3ckcP1LKPCXfY1k2hRbtP52VTd5x4C5Z2qirLLxA=)
2: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl (hash: eqgFLAY7u0OefjKxv6KeGPaK4iXjc+Rwyloo5EkUEHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:05:8a:28:43:43:9f:38:d7:c8:62:2a:cb:1b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Validity
Not Before: Mar 26 00:01:17 2026 GMT
Not After : Mar 27 00:01:17 2026 GMT
Subject: CN=e662b7fb35963737a9cbde4c0a448a794e60c789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:c3:1b:97:83:14:7d:d4:2e:9b:e9:f3:1a:
e5:35:b7:fb:62:d1:e9:23:20:55:0a:ea:6f:d6:cf:
51:4d:eb:4b:c9:7a:84:cb:cf:1f:91:3d:28:c7:72:
8c:55:1a:09:63:aa:1e:70:0f:96:63:db:e9:d3:e4:
3e:3f:c1:d6:7f:0f:ae:88:ea:88:88:ec:36:5a:7e:
76:4d:0c:a3:d0:e2:f9:34:f9:b2:82:5a:6f:8b:41:
d6:fe:20:22:2c:89:61:b6:06:75:d8:4a:87:df:d5:
32:54:1d:62:e8:43:34:b9:ff:33:06:c1:7c:a5:7b:
96:09:82:6c:c0:14:fe:6b:c6:5d:fd:57:8f:ac:97:
41:46:2a:70:9a:f9:f7:ed:38:39:ef:fd:a5:44:c2:
98:92:a4:be:3a:2d:41:73:43:93:66:64:36:b7:3b:
98:75:19:49:d0:86:7a:5c:89:d0:ba:3a:1c:fe:1d:
a3:bf:f4:f4:7f:e1:6b:31:c4:07:2b:82:b8:35:ba:
80:8f:c2:d3:93:3f:eb:5b:dc:f3:06:12:af:41:2f:
59:37:5a:1c:c5:91:74:08:5a:99:65:52:0d:35:25:
c4:19:5a:7c:52:40:91:36:1c:49:32:e3:87:6a:88:
ad:9a:2b:02:9e:17:70:43:8b:ef:dc:87:b8:64:b7:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:62:B7:FB:35:96:37:37:A9:CB:DE:4C:0A:44:8A:79:4E:60:C7:89
X509v3 Authority Key Identifier:
keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3c:53:4e:7f:04:e8:cc:68:a0:78:0f:e6:a6:e3:20:0b:6c:
9d:62:a0:c2:ff:2e:5a:e4:00:e1:ba:17:2e:d5:35:5d:e0:a4:
8c:b5:27:63:a4:c0:90:dc:b2:12:4e:22:18:fc:45:1f:58:fb:
6f:1f:d2:f9:b4:2a:62:5c:93:46:31:4b:fe:94:0b:8f:77:22:
15:6f:dc:82:10:71:31:a6:ea:0e:50:dc:ea:80:d5:f0:38:90:
e5:b0:cd:17:48:9b:f8:f5:13:f5:9b:5a:79:9b:bd:a9:a3:13:
c4:45:a8:a9:87:7d:7d:9c:c9:34:eb:51:db:98:da:cb:c1:d7:
29:45:4a:66:09:48:10:28:be:86:e6:47:5d:6d:64:89:45:d0:
9b:4f:03:4d:86:53:11:fb:8f:80:29:71:fe:ee:83:2f:3c:8e:
70:5f:a4:71:03:9c:bb:a1:e1:af:7f:ea:5b:6e:25:db:37:15:
3e:d5:d5:47:67:88:1d:94:a8:9f:c2:f0:fb:39:1b:37:81:e8:
ca:4c:b5:3d:45:ae:05:11:ea:2e:12:f3:be:7a:75:98:0c:85:
b1:28:6b:ae:aa:01:82:5e:3b:d2:a4:f3:ff:b5:ea:69:06:25:
7a:9e:69:0f:5e:b6:19:b3:8b:e2:ca:95:b1:41:94:a1:a1:5e:
9e:26:73:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncgWKKENDnzjXyGIqyxs/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjNkYzY3NTNhOGNiZDc0Yjc0NDUyYzE1MzZmMzdkOWM0
ZGM3MGMwHhcNMjYwMzI2MDAwMTE3WhcNMjYwMzI3MDAwMTE3WjAzMTEwLwYDVQQD
EyhlNjYyYjdmYjM1OTYzNzM3YTljYmRlNGMwYTQ0OGE3OTRlNjBjNzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFrDG5eDFH3ULpvp8xrlNbf7YtHp
IyBVCupv1s9RTetLyXqEy88fkT0ox3KMVRoJY6oecA+WY9vp0+Q+P8HWfw+uiOqI
iOw2Wn52TQyj0OL5NPmyglpvi0HW/iAiLIlhtgZ12EqH39UyVB1i6EM0uf8zBsF8
pXuWCYJswBT+a8Zd/VePrJdBRipwmvn37Tg57/2lRMKYkqS+Oi1Bc0OTZmQ2tzuY
dRlJ0IZ6XInQujoc/h2jv/T0f+FrMcQHK4K4NbqAj8LTkz/rW9zzBhKvQS9ZN1oc
xZF0CFqZZVINNSXEGVp8UkCRNhxJMuOHaoitmisCnhdwQ4vv3Ie4ZLevnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZit/s1ljc3qcveTApEinlOYMeJMB8GA1UdIwQY
MBaAFEpj3GdTqMvXS3RFLBU2832cTccMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZjAzMzUtZTg2MC00NjE5LTkzODAt
ZTM0MWIwZjkxNWQzLzEvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80ZjAzMzUtZTg2MC00NjE5LTkzODAtZTM0MWIwZjkxNWQz
LzEvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzxTTn8E
6MxooHgP5qbjIAtsnWKgwv8uWuQA4boXLtU1XeCkjLUnY6TAkNyyEk4iGPxFH1j7
bx/S+bQqYlyTRjFL/pQLj3ciFW/cghBxMabqDlDc6oDV8DiQ5bDNF0ib+PUT9Zta
eZu9qaMTxEWoqYd9fZzJNOtR25jay8HXKUVKZglIECi+huZHXW1kiUXQm08DTYZT
EfuPgClx/u6DLzyOcF+kcQOcu6Hhr3/qW24l2zcVPtXVR2eIHZSon8Lw+zkbN4Ho
yky1PUWuBRHqLhLzvnp1mAyFsShrrqoBgl470qTz/7XqaQYlep5pD162GbOL4sqV
sUGUoaFeniZzZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:12 2026 by rpki-client