Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
File: sMnhFmeJWbipR4_Op8o8BgMQIWI.mft (raw, json)
Hash identifier: EmYjQhazbKXsHMm0PJGUtkMFg/6kyP9q1YC7FsPqfF4=
Subject key identifier: 84:25:F0:D5:BE:66:77:72:4F:A6:0A:77:AD:9D:70:5F:26:AC:8D:4F
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Certificate issuer: /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial: 01A0D3536B885B680C622BCFED21CDA105C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
Manifest number: 1A10
Signing time: Thu 24 Sep 2026 12:10:54 +0000
Manifest this update: Thu 24 Sep 2026 12:10:54 +0000
Manifest next update: Fri 25 Sep 2026 12:10:54 +0000
Files and hashes: 1: XUGY9TbOMBX49Z8u90RGUe-ExLs.roa (hash: qtTspg26ND5GYRKyrYjwXIvA6gCRcdmehMVXE9EcA5s=)
2: l4dSZXl8dhmZMC6S5Tn_0a5uKMw.asa (hash: LGg4oCMfH/vcblyxp8BRS8a3iyoB8BazHkO/Mi3w7Wg=)
3: lOfQEvwoGb6EUzR8igepatl8tR0.roa (hash: UIorciYUX/cQU7EzhNShktkOU5HOrFanh5Tg0ubMaOM=)
4: sMnhFmeJWbipR4_Op8o8BgMQIWI.crl (hash: lE1+SX+tzlpPMO588tlmknHqcf+Dm2pKywqmVQKTSHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:53:6b:88:5b:68:0c:62:2b:cf:ed:21:cd:a1:05:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Validity
Not Before: Sep 24 12:10:54 2026 GMT
Not After : Sep 25 12:10:54 2026 GMT
Subject: CN=8425f0d5be6677724fa60a77ad9d705f26ac8d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c5:bf:d0:ba:ef:43:d6:7f:a8:5f:7d:d0:48:
7b:b4:3b:26:a4:ad:0a:25:af:c0:e0:80:0b:cf:5a:
5a:a4:41:c0:f1:03:08:66:aa:33:af:60:b6:ab:85:
4f:9f:a0:53:f9:3a:d6:f8:fb:10:59:d9:9f:b5:81:
fe:7d:43:d3:53:ff:dc:1a:26:99:22:a3:08:54:73:
9f:01:5f:73:9b:1a:f4:e0:12:5f:84:e3:4d:8a:c9:
9e:f9:a5:ff:6f:ea:8c:46:06:57:e9:9a:35:ce:9d:
2b:8e:3c:00:07:6c:5b:51:b3:c4:2a:13:18:3e:3b:
43:65:0b:e6:30:81:2c:1e:e9:c4:0f:2c:ca:15:b0:
32:d1:da:be:58:a6:47:21:07:b1:27:c6:66:03:e1:
3c:f3:e6:f6:29:27:7e:56:d0:d2:26:a4:56:58:67:
83:7e:b8:d8:0b:c5:bf:68:6e:02:c8:8e:72:10:18:
8d:7b:e8:fe:fc:10:a9:ea:29:fa:82:4c:5a:6b:15:
3c:02:33:e1:05:39:30:ee:e4:95:ad:6d:e9:14:b4:
9d:c9:17:f1:80:91:9c:7e:6d:4f:ef:8c:08:9c:8e:
0b:32:93:69:d4:93:f7:82:71:ec:e8:a0:81:fb:22:
31:38:3f:66:1e:be:d7:41:2c:23:0e:27:1e:20:01:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:25:F0:D5:BE:66:77:72:4F:A6:0A:77:AD:9D:70:5F:26:AC:8D:4F
X509v3 Authority Key Identifier:
keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:17:18:d2:78:b1:c9:ee:3e:34:31:a2:1a:5f:5a:2d:8b:bc:
6d:69:d2:50:90:3f:39:5b:1f:69:77:33:72:f4:82:7b:d4:73:
af:2f:a6:18:45:93:5f:b6:04:d6:ee:d7:99:67:55:da:94:a1:
a6:6a:fc:ab:6e:ad:45:51:43:0f:e1:ea:f1:e1:53:05:41:1e:
5f:6f:66:1b:43:55:ef:6d:70:24:30:78:24:9d:dc:18:04:7c:
34:1e:bf:66:ef:6b:b3:84:ba:d3:aa:df:23:ba:d2:9e:28:ab:
ad:5a:d4:47:85:23:df:0e:7b:5e:13:06:1c:27:31:59:af:92:
4c:a5:c0:45:d5:fc:bf:17:63:a9:95:16:c8:bb:e8:54:bc:a3:
9b:4a:2f:65:88:18:8e:66:72:74:6b:aa:11:a9:e3:22:23:7e:
eb:4d:2a:8d:e0:e5:a6:d6:40:83:fc:de:b5:d2:23:ec:16:a1:
1b:5a:cf:6e:8a:c6:b2:ce:d3:15:a6:37:ef:5a:5c:d1:f0:f7:
ce:c4:95:02:10:55:57:41:08:d6:95:11:16:ea:89:c5:76:6b:
ef:48:1e:d9:39:92:0e:0f:c8:39:fa:1e:c1:52:11:dd:cd:10:
52:12:03:9e:4a:10:a4:e6:89:35:08:8e:62:a0:92:92:28:5f:
de:08:2e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:29:42 2026 by rpki-client