Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
File: Sm8eAa8k15JJfXftH3mQrjphKQ0.mft (raw, json)
Hash identifier: 5J6SdStzg8D4QBSMJIRyi5UI2X8jln6PeHUXCIHnhZQ=
Subject key identifier: C3:26:D9:3A:C1:C0:6B:42:F6:0D:F8:98:F6:37:0F:15:97:18:87:6F
Authority key identifier: 4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
Certificate issuer: /CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Certificate serial: 01A0E2F457D82408669EFADB7F7C6FA9B47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
Manifest number: 1A78
Signing time: Sun 27 Sep 2026 13:00:59 +0000
Manifest this update: Sun 27 Sep 2026 13:00:59 +0000
Manifest next update: Mon 28 Sep 2026 13:00:59 +0000
Files and hashes: 1: Sm8eAa8k15JJfXftH3mQrjphKQ0.crl (hash: yq6X0vZGyx4xMhbxhJi3bCYrw8YDtGuOeK5ZanzoYXM=)
2: yxxhUC74SIbRktXGpRFDG2q_WYY.roa (hash: td7+f7LbCoSoHd1AQOFqrxF0PL/qRZNlsL9bZXllNto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f4:57:d8:24:08:66:9e:fa:db:7f:7c:6f:a9:b4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Validity
Not Before: Sep 27 13:00:59 2026 GMT
Not After : Sep 28 13:00:59 2026 GMT
Subject: CN=c326d93ac1c06b42f60df898f6370f159718876f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:7d:83:dc:6c:48:e3:57:16:03:b5:84:f7:
85:54:20:ef:47:54:d9:d3:e2:c7:8e:f7:38:75:71:
a7:04:5c:c4:54:0b:53:28:19:fe:a7:8e:f7:a4:02:
cf:6e:96:28:a3:25:57:f0:37:c2:d3:de:81:a7:45:
04:55:f2:b5:27:28:99:82:da:39:18:de:ca:43:47:
2b:64:04:b5:4f:d5:81:0a:a6:85:af:8b:3f:5b:46:
03:b3:e5:d6:9c:f8:70:24:f6:70:cd:e0:f1:c7:f5:
0c:25:4c:0e:7a:5b:3c:64:70:4d:c1:8f:6f:19:b7:
25:d2:fa:1e:48:33:b1:e2:c5:d1:b7:b7:e2:38:11:
ae:3a:fa:d4:03:40:45:89:bc:81:9c:28:46:cc:7b:
4a:55:e1:6c:ec:24:6c:7f:59:70:54:1b:ac:95:4a:
1d:79:70:1f:c4:45:9d:a4:38:2d:de:33:36:88:d0:
ef:a5:5c:9c:f3:a4:7a:da:be:8f:ee:39:86:6f:d3:
9f:67:b5:88:6c:7b:ee:33:86:03:f8:66:c8:90:ee:
01:46:44:2e:73:d5:01:17:e0:b5:ad:17:7c:0e:1b:
f4:19:e9:24:04:30:a4:b1:7a:31:22:a8:69:46:60:
40:4e:e3:2a:86:91:94:18:7e:aa:e0:c4:3d:13:19:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:26:D9:3A:C1:C0:6B:42:F6:0D:F8:98:F6:37:0F:15:97:18:87:6F
X509v3 Authority Key Identifier:
keyid:4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0d:02:ff:7d:67:43:24:dd:ba:4c:1d:3b:fb:e7:79:2d:39:
f8:c7:9f:81:76:77:0d:4b:6e:98:78:a9:70:a9:16:80:c9:1e:
21:ae:fe:8b:b0:e0:20:58:80:f1:cc:fa:47:a8:7b:7a:c0:f3:
27:39:13:a7:43:56:42:c6:db:34:36:14:49:03:38:61:b9:39:
d6:fe:fa:ae:7a:d3:1f:0f:a6:19:39:f0:90:fb:de:c8:07:58:
ca:eb:be:be:52:7b:7d:07:69:4a:d7:a7:b1:ce:08:b1:74:3a:
a1:c6:ab:66:60:5d:86:98:f2:5d:4c:b4:9e:35:8b:07:5b:a2:
d3:b8:1b:ef:d3:48:9b:24:c5:44:71:5d:ab:49:f9:e6:fc:a4:
2e:16:8e:27:10:c3:86:20:44:ad:3a:de:c0:3c:5e:26:ab:0b:
5f:6d:03:2e:bd:b1:64:6c:2d:96:5b:27:b2:4f:c2:b8:fe:8a:
e4:af:e0:0d:68:6b:1b:a8:62:2c:d3:9f:a2:0d:43:5f:33:05:
d3:3b:e1:e8:e1:ad:b6:f5:99:6c:c7:10:60:85:e6:a8:3f:fb:
bf:14:ec:31:6a:ef:88:22:4f:ff:0a:29:a3:39:83:bd:57:8f:
f2:0e:ef:98:38:f9:66:d0:2f:4d:b8:a5:46:14:93:eb:b8:c3:
6f:10:3e:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDi9FfYJAhmnvrbf3xvqbR+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmYxZTAxYWYyNGQ3OTI0OTdkNzdlZDFmNzk5MGFlM2E2
MTI5MGQwHhcNMjYwOTI3MTMwMDU5WhcNMjYwOTI4MTMwMDU5WjAzMTEwLwYDVQQD
EyhjMzI2ZDkzYWMxYzA2YjQyZjYwZGY4OThmNjM3MGYxNTk3MTg4NzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZB9g9xsSONXFgO1hPeFVCDvR1TZ
0+LHjvc4dXGnBFzEVAtTKBn+p473pALPbpYooyVX8DfC096Bp0UEVfK1JyiZgto5
GN7KQ0crZAS1T9WBCqaFr4s/W0YDs+XWnPhwJPZwzeDxx/UMJUwOels8ZHBNwY9v
Gbcl0voeSDOx4sXRt7fiOBGuOvrUA0BFibyBnChGzHtKVeFs7CRsf1lwVBuslUod
eXAfxEWdpDgt3jM2iNDvpVyc86R62r6P7jmGb9OfZ7WIbHvuM4YD+GbIkO4BRkQu
c9UBF+C1rRd8Dhv0GekkBDCksXoxIqhpRmBATuMqhpGUGH6q4MQ9Exn+bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMm2TrBwGtC9g34mPY3DxWXGIdvMB8GA1UdIwQY
MBaAFEpvHgGvJNeSSX137R95kK46YSkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mYzFhZGMtY2NkOC00YWE2LWI1NGQt
MDRkMzYyYTI4NThkLzEvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mYzFhZGMtY2NkOC00YWE2LWI1NGQtMDRkMzYyYTI4NThk
LzEvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMw0C/31n
QyTdukwdO/vneS05+MefgXZ3DUtumHipcKkWgMkeIa7+i7DgIFiA8cz6R6h7esDz
JzkTp0NWQsbbNDYUSQM4Ybk51v76rnrTHw+mGTnwkPveyAdYyuu+vlJ7fQdpSten
sc4IsXQ6ocarZmBdhpjyXUy0njWLB1ui07gb79NImyTFRHFdq0n55vykLhaOJxDD
hiBErTrewDxeJqsLX20DLr2xZGwtllsnsk/CuP6K5K/gDWhrG6hiLNOfog1DXzMF
0zvh6OGttvWZbMcQYIXmqD/7vxTsMWrviCJP/wopozmDvVeP8g7vmDj5ZtAvTbil
RhST67jDbxA+wQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:17:40 2026 by rpki-client