Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
File: smbm5NXff4olZUFEdV172ZLnNTk.mft (raw, json)
Hash identifier: olribZyBYT9Vd+XFZj8gshTi1UG4pswKBnZHrS0lpfo=
Subject key identifier: E9:04:27:78:0D:2E:2C:14:3A:DA:82:B9:57:87:74:3D:12:D6:07:26
Authority key identifier: B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
Certificate issuer: /CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Certificate serial: 019D27DFF4FE017889EB19E9D890B93280EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
Manifest number: 0B90
Signing time: Thu 26 Mar 2026 02:01:21 +0000
Manifest this update: Thu 26 Mar 2026 02:01:21 +0000
Manifest next update: Fri 27 Mar 2026 02:01:21 +0000
Files and hashes: 1: JlEL__d65JQ_tfOKiJmQEWtDYCM.roa (hash: GgRAVhQTIpXTw8lHuxPoRTh/pEuAXi31/QuDq0oYfZA=)
2: smbm5NXff4olZUFEdV172ZLnNTk.crl (hash: z1X2/uuHpGgD0qST0k7JRtcPu2dK2agacPHMV4QRM+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f4:fe:01:78:89:eb:19:e9:d8:90:b9:32:80:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Validity
Not Before: Mar 26 02:01:21 2026 GMT
Not After : Mar 27 02:01:21 2026 GMT
Subject: CN=e90427780d2e2c143ada82b95787743d12d60726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:a5:22:f9:59:d0:2b:6d:b0:c5:74:74:16:
b9:b2:42:16:92:f4:5e:c0:e6:4f:d5:9e:46:0d:f1:
8f:22:50:05:02:62:69:b8:87:a1:f2:82:ed:d7:88:
08:64:07:54:d6:88:87:b8:13:c8:ee:13:cc:6c:34:
b1:8f:c9:80:20:ca:47:8d:23:75:22:30:d1:ce:40:
f8:8d:84:12:3d:ad:4d:4c:d3:a8:62:5c:24:ea:17:
38:d6:89:99:f0:b9:3b:55:27:82:a5:65:a5:7a:97:
a3:29:60:e6:90:50:42:fc:71:24:be:6c:c4:03:e4:
85:0a:3c:4e:bd:6d:b6:7c:9b:c8:37:d4:a3:23:ef:
44:f2:5f:cf:30:ec:65:ea:33:d0:65:61:35:ab:70:
ba:67:d5:35:01:d1:b1:2f:02:75:33:80:8f:bf:5b:
2b:7d:78:63:74:99:1b:6e:2c:86:65:6f:34:ad:be:
84:ea:22:21:63:16:a7:20:33:f9:73:df:a9:cb:a8:
90:fd:e5:5f:62:51:bd:18:b0:4e:30:37:fa:04:a6:
05:86:32:39:e6:3e:13:76:4a:de:7e:48:d1:4a:38:
82:1f:09:f0:02:ab:37:d5:af:76:75:ae:fd:2f:13:
42:c1:21:f6:e4:a5:83:cc:17:d4:bc:7a:ca:6b:67:
16:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:04:27:78:0D:2E:2C:14:3A:DA:82:B9:57:87:74:3D:12:D6:07:26
X509v3 Authority Key Identifier:
keyid:B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3e:e6:83:f9:82:0c:98:25:b6:e0:25:e9:ea:f5:40:bb:84:
90:64:9c:f0:d3:da:13:84:36:7d:5a:eb:d6:80:e6:83:7b:55:
2a:86:01:86:cc:42:ea:26:24:5a:b5:78:9f:b3:0d:2d:a0:12:
df:b0:03:d0:51:46:3f:ec:f2:d6:12:71:bd:42:42:b1:33:72:
89:70:d2:4b:ed:43:0a:6b:88:02:e5:ff:78:48:7a:49:a1:1c:
21:18:fa:b4:a8:cc:ec:62:7c:1d:51:83:42:88:48:4f:17:51:
e3:d8:47:cd:85:ad:55:f3:8c:a3:c5:31:44:14:60:03:93:e4:
b3:cd:62:c0:a5:f9:b6:df:e3:02:64:72:8a:24:32:8e:80:d3:
dd:c3:f6:6f:db:93:46:eb:c4:a3:1d:45:41:1b:ea:8e:c1:3b:
76:0e:a9:9d:af:d4:7d:68:be:f3:e5:26:d3:89:e7:c8:33:59:
71:c2:34:44:ff:55:e9:7d:c5:67:3d:3f:bd:40:f0:6a:1a:9f:
7f:bc:80:d5:e9:9a:d4:4c:5d:cd:45:5a:5d:77:e6:78:e4:2d:
db:85:b1:10:54:72:1b:0d:56:44:87:8c:f4:ee:07:08:88:0e:
cf:eb:0f:66:36:e6:21:0e:59:bf:ec:85:7c:01:8a:6e:a1:28:
78:57:10:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3/T+AXiJ6xnp2JC5MoDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNjZlNmU0ZDVkZjdmOGEyNTY1NDE0NDc1NWQ3YmQ5OTJl
NzM1MzkwHhcNMjYwMzI2MDIwMTIxWhcNMjYwMzI3MDIwMTIxWjAzMTEwLwYDVQQD
EyhlOTA0Mjc3ODBkMmUyYzE0M2FkYTgyYjk1Nzg3NzQzZDEyZDYwNzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXulIvlZ0CttsMV0dBa5skIWkvRe
wOZP1Z5GDfGPIlAFAmJpuIeh8oLt14gIZAdU1oiHuBPI7hPMbDSxj8mAIMpHjSN1
IjDRzkD4jYQSPa1NTNOoYlwk6hc41omZ8Lk7VSeCpWWlepejKWDmkFBC/HEkvmzE
A+SFCjxOvW22fJvIN9SjI+9E8l/PMOxl6jPQZWE1q3C6Z9U1AdGxLwJ1M4CPv1sr
fXhjdJkbbiyGZW80rb6E6iIhYxanIDP5c9+py6iQ/eVfYlG9GLBOMDf6BKYFhjI5
5j4TdkrefkjRSjiCHwnwAqs31a92da79LxNCwSH25KWDzBfUvHrKa2cW1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkEJ3gNLiwUOtqCuVeHdD0S1gcmMB8GA1UdIwQY
MBaAFLJm5uTV33+KJWVBRHVde9mS5zU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc21ibTVOWGZmNG9sWlVGRWRWMTcyWkxuTlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lYzg4MDEtMGE3Yy00ODdlLWExMDMt
NTI1ZDdlMjJjNzg4LzEvc21ibTVOWGZmNG9sWlVGRWRWMTcyWkxuTlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9lYzg4MDEtMGE3Yy00ODdlLWExMDMtNTI1ZDdlMjJjNzg4
LzEvc21ibTVOWGZmNG9sWlVGRWRWMTcyWkxuTlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANj7mg/mC
DJgltuAl6er1QLuEkGSc8NPaE4Q2fVrr1oDmg3tVKoYBhsxC6iYkWrV4n7MNLaAS
37AD0FFGP+zy1hJxvUJCsTNyiXDSS+1DCmuIAuX/eEh6SaEcIRj6tKjM7GJ8HVGD
QohITxdR49hHzYWtVfOMo8UxRBRgA5Pks81iwKX5tt/jAmRyiiQyjoDT3cP2b9uT
RuvEox1FQRvqjsE7dg6pna/UfWi+8+Um04nnyDNZccI0RP9V6X3FZz0/vUDwahqf
f7yA1ema1ExdzUVaXXfmeOQt24WxEFRyGw1WRIeM9O4HCIgOz+sPZjbmIQ5Zv+yF
fAGKbqEoeFcQQw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:17 2026 by rpki-client