Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
File: smK_Id5ROFhZQWxMYIAB4gJaXSU.mft (raw, json)
Hash identifier: HIq/Dge1Od0bwsnybdKFgj4ZhLKlPs0yP9opF7D/UNM=
Subject key identifier: 72:AB:9B:71:A6:54:D2:75:62:5E:5F:D2:E7:C6:04:50:35:86:D5:05
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Certificate issuer: /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial: 01A0D796D74274E310B9A77153118736594A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
Manifest number: 12F9
Signing time: Fri 25 Sep 2026 08:03:01 +0000
Manifest this update: Fri 25 Sep 2026 08:03:01 +0000
Manifest next update: Sat 26 Sep 2026 08:03:01 +0000
Files and hashes: 1: 1-WZ68pg0HMraeC1byIxs93xW_wk.roa (hash: hh4UtDOrrr3oi4KiUtbWr/EMIQFLsOpxNDn+Sc5RHOM=)
2: YC9W-iVv9dOJhfbZw9HftS1KxPY.roa (hash: XcqcrEVWbFX4rVC3SqcfN+w6BqsgeWQjFifYF0iAu7k=)
3: smK_Id5ROFhZQWxMYIAB4gJaXSU.crl (hash: umeVgumCX9hAfKLkZe3MLZfRZ/6NDixDayIQweM2gaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:d7:42:74:e3:10:b9:a7:71:53:11:87:36:59:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
Validity
Not Before: Sep 25 08:03:01 2026 GMT
Not After : Sep 26 08:03:01 2026 GMT
Subject: CN=72ab9b71a654d275625e5fd2e7c604503586d505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:1d:51:18:1f:ca:b6:19:8d:44:66:73:01:
3a:89:c8:5f:26:63:57:b7:e9:94:2b:97:60:a3:fe:
a5:e6:ff:26:35:27:9c:6e:3b:81:85:8a:4a:57:f8:
36:31:7c:67:4e:ba:be:a9:a4:ef:68:de:dd:1a:a0:
d0:bd:e2:ae:bb:f9:9a:ec:28:b6:a1:31:0d:96:30:
2f:a0:e2:e7:5d:13:47:12:46:30:b4:0e:93:24:47:
e6:5e:2c:60:3f:3f:5b:8c:10:24:73:cf:9b:f3:c6:
40:56:95:cf:a9:2f:df:9a:56:b9:51:bc:ad:2d:df:
32:23:32:09:b2:50:5f:05:a0:b2:ae:62:5f:43:f9:
db:30:53:ac:2b:f5:d8:b4:54:b2:a7:8b:b6:93:09:
84:1f:74:ec:9c:27:cf:4f:58:ab:b8:22:b6:19:be:
3b:87:a3:27:64:4b:2a:36:e4:2b:ce:53:dd:46:f8:
57:fa:73:90:e9:e3:fa:9c:68:b6:b3:ba:3b:1d:57:
8f:f5:15:98:26:a7:12:0c:a8:82:2f:05:26:09:17:
9a:56:ea:98:68:10:5c:6a:5d:35:84:97:5f:c4:1d:
12:4c:6f:b1:19:04:c9:7b:1e:73:2c:6b:15:3d:2d:
01:c3:f4:60:1c:15:b0:83:80:08:77:cb:e0:e8:44:
32:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AB:9B:71:A6:54:D2:75:62:5E:5F:D2:E7:C6:04:50:35:86:D5:05
X509v3 Authority Key Identifier:
keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e0:b8:6f:2f:e4:56:4e:2d:ef:12:29:56:ac:90:48:84:94:
cf:83:09:04:90:94:ec:b7:02:02:fc:76:cb:fe:e4:5b:af:e6:
a9:10:4d:91:3d:25:af:61:39:3d:00:c1:b5:62:b7:5c:68:e2:
75:5f:e3:5e:4c:fd:a6:81:63:d7:a4:03:ba:85:ab:2b:a4:98:
c6:49:77:cf:7e:70:da:4a:89:5f:4e:24:39:44:fd:4c:5a:96:
2a:ea:4b:6f:b2:c0:25:09:ba:20:39:4d:6d:30:d5:c3:c6:8f:
29:b0:b6:c8:b5:ec:83:15:7d:e6:e4:18:d9:94:2c:d3:70:9c:
59:7e:62:fb:61:af:0a:cb:c5:96:5d:77:ea:ca:9e:01:dc:3f:
a3:a1:ae:79:ad:8d:03:2f:44:02:ed:2c:18:48:ba:3d:e6:71:
6c:e6:e4:f3:bd:07:ad:82:9d:4e:e4:fc:33:bf:7c:08:f8:ce:
2d:72:73:af:ea:6e:c7:94:c4:8f:76:09:19:34:5d:64:7f:b4:
14:84:0d:70:4a:9f:b0:f0:11:5b:a1:4a:cb:f1:0c:e2:7a:26:
e9:97:af:2d:b4:74:f5:52:00:fa:92:6f:d4:db:4c:34:35:62:
ab:75:f4:8c:d0:34:9a:3e:95:7d:e7:5a:a8:fa:b3:c1:99:7d:
86:c9:de:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:06:18 2026 by rpki-client