Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier: wBZMoVPRN23RD6g1qG/RZcKt50EwGuuvck3Gi+FBVQc=
Subject key identifier: 3C:B8:75:F1:A3:59:AD:46:13:01:10:82:24:59:5E:EB:51:B3:9A:4E
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial: 01A0E2BDD325ED447E8927419D97C871538A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number: 1A0E
Signing time: Sun 27 Sep 2026 12:01:26 +0000
Manifest this update: Sun 27 Sep 2026 12:01:26 +0000
Manifest next update: Mon 28 Sep 2026 12:01:26 +0000
Files and hashes: 1: JA6DG47aKcr2L7Ska7dQW2hz0OQ.roa (hash: SZmqmdymrljO2hpbQb1uMliK1C8iABzhCOgMWLG7xTw=)
2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: ofuuVVFAVVcKqsO88i05DYMCh8nER5a1XF4DMIFrTTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:d3:25:ed:44:7e:89:27:41:9d:97:c8:71:53:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Validity
Not Before: Sep 27 12:01:26 2026 GMT
Not After : Sep 28 12:01:26 2026 GMT
Subject: CN=3cb875f1a359ad461301108224595eeb51b39a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:1a:dd:1d:c0:4e:2f:16:77:ca:5f:2f:36:
f1:bb:2b:6b:66:c0:d9:5d:90:19:5f:6e:0d:36:8d:
2c:af:b1:74:32:d3:4a:cd:98:c2:83:ef:77:20:4d:
44:d9:b9:f7:69:fd:7a:e3:b8:33:e1:d1:5a:74:6c:
b4:f3:00:c0:68:d4:ac:46:1e:45:d1:52:7b:b0:90:
0e:84:a6:c3:b5:8e:7f:58:5c:db:ed:07:6c:ef:4e:
85:c4:c4:4f:d0:11:6b:fd:90:c2:f0:f7:95:8a:79:
bd:e3:a9:4b:9a:45:6e:e2:8f:19:2b:dc:d7:c4:3d:
e7:9a:62:cc:e3:b5:4d:ef:8c:a3:a0:17:6c:c8:1f:
2d:62:26:d9:6d:7d:dd:0f:b8:b3:7a:3e:b1:44:b5:
48:25:6d:08:6b:5b:f3:23:e4:44:55:23:b7:17:a2:
ca:7e:5f:5b:d1:f0:5d:96:ea:45:92:b6:5d:e5:4b:
0d:ba:7a:6c:95:7e:03:8f:f8:5d:df:0b:50:21:87:
c8:1c:7f:86:a9:d1:17:ff:13:32:a8:47:e5:f4:1a:
ff:ed:ca:ff:70:a7:2f:f9:92:a6:6b:50:2f:33:d3:
87:cc:81:9f:20:80:6a:cc:e5:7d:6e:49:e2:49:13:
df:33:c3:09:a3:d2:c1:a1:10:5b:e3:0e:2f:56:54:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B8:75:F1:A3:59:AD:46:13:01:10:82:24:59:5E:EB:51:B3:9A:4E
X509v3 Authority Key Identifier:
keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f9:4e:11:1d:7c:2b:13:c6:1a:a1:7a:7b:0a:8f:59:ea:c8:
89:3e:a3:0e:99:11:f5:b1:1d:5e:a6:f8:a0:c8:bf:b5:a3:ae:
8b:6d:18:45:db:35:fb:06:11:91:71:20:6c:36:34:51:12:b4:
9b:1d:1a:1a:8b:43:2c:9b:58:c3:97:97:5e:dd:8f:fb:85:6b:
b8:02:5d:f5:b4:2c:58:54:6e:ef:f4:9e:27:00:38:9a:b0:0e:
bd:75:fb:84:21:0d:7f:c1:e4:b6:40:e5:25:5a:4d:5c:f8:90:
d1:11:cd:07:69:2b:2c:ac:1e:ab:f7:e9:01:13:c4:15:a7:fd:
7e:e0:78:66:59:43:c3:65:fd:c5:92:7c:e3:af:d7:50:8e:e2:
8e:ec:2b:37:a9:e6:7f:3a:e1:f1:41:8e:2f:7b:72:51:bf:8f:
64:00:d6:f8:fd:d8:7d:8d:bd:4b:55:67:85:01:69:50:0a:38:
18:5d:58:fc:bf:d5:42:8a:74:b8:43:ae:0a:db:d4:ba:6b:81:
a8:83:a3:14:59:0d:1c:de:d0:53:e8:84:bc:e0:b3:2b:94:9b:
19:16:5c:5c:de:d8:40:2c:eb:da:e6:ac:6b:ff:18:24:57:ab:
ba:ba:d6:75:d5:64:28:e7:51:88:06:d7:08:f8:ba:a8:2f:9b:
02:08:da:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:17:55 2026 by rpki-client