Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier: KbPE3ubqZQWzewVD4IpLE8tWGDAnnV4/F1c+0iVV93g=
Subject key identifier: 0A:E7:14:5B:3B:C0:6D:8B:96:95:D9:68:B0:0F:F1:02:E2:44:13:6B
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial: 019F92B63D540DD98089E2DD1F47D59FE3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number: 1960
Signing time: Fri 24 Jul 2026 06:00:44 +0000
Manifest this update: Fri 24 Jul 2026 06:00:44 +0000
Manifest next update: Sat 25 Jul 2026 06:00:44 +0000
Files and hashes: 1: JA6DG47aKcr2L7Ska7dQW2hz0OQ.roa (hash: SZmqmdymrljO2hpbQb1uMliK1C8iABzhCOgMWLG7xTw=)
2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: A7N2tl2wccz5EBi6p72YevepKfism7A6Mi4BG35dxUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:3d:54:0d:d9:80:89:e2:dd:1f:47:d5:9f:e3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Validity
Not Before: Jul 24 06:00:44 2026 GMT
Not After : Jul 25 06:00:44 2026 GMT
Subject: CN=0ae7145b3bc06d8b9695d968b00ff102e244136b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:f4:45:74:35:87:79:62:d8:0c:3a:c8:ba:
43:b7:0f:88:03:22:5b:91:f0:67:ab:4f:72:77:ae:
18:98:fb:f9:54:ee:5b:ac:93:b2:39:8f:e9:16:bc:
77:dd:c3:4c:76:02:fe:9d:78:cf:d9:66:df:5c:a5:
6d:57:fe:ec:41:16:4a:2c:2d:59:1f:b0:95:2c:33:
25:86:c6:4f:d2:ca:51:6e:16:18:66:30:9d:cc:10:
eb:09:18:2f:0d:e3:65:8b:90:68:83:d6:20:81:1b:
4b:74:3e:62:fc:de:ff:0d:00:d9:e6:c6:9d:95:3a:
a1:a2:ee:07:07:1a:61:61:a6:13:1b:8b:44:77:f8:
7d:42:d5:59:70:52:a5:e3:a7:3c:b2:55:d4:23:b4:
63:c6:d1:ad:3d:26:2c:12:d7:e5:03:93:7d:19:75:
5b:49:05:6b:48:46:89:bd:10:e4:e2:d9:4d:99:0d:
eb:87:b6:0e:0f:35:60:34:1d:69:00:d5:e0:8b:e8:
6f:f7:52:e6:0c:16:be:52:2a:bd:ab:69:f9:d3:cd:
30:75:ac:de:b3:58:ab:f0:ba:91:9c:22:e9:b5:27:
90:4f:04:c3:b6:31:e6:17:37:88:b1:29:f0:1b:7d:
c0:b3:88:10:9a:f2:9c:6f:d7:55:65:d4:4c:aa:c3:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E7:14:5B:3B:C0:6D:8B:96:95:D9:68:B0:0F:F1:02:E2:44:13:6B
X509v3 Authority Key Identifier:
keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7f:b5:e7:fe:48:e1:da:00:02:8d:35:e7:d8:88:db:32:df:
cc:61:7b:2c:27:92:61:db:4b:e4:9f:1a:91:90:84:55:a4:44:
db:ea:58:e1:e1:43:f7:76:69:29:79:a2:26:30:c3:50:6b:c7:
ca:93:be:5c:de:e1:a7:f7:a0:2a:8c:96:d6:d1:d9:f7:d5:2b:
f4:96:88:27:d5:91:28:2f:59:01:3e:cf:63:39:b5:ac:20:ac:
f1:26:c2:ad:5e:f4:d9:86:d5:a5:df:78:08:00:9f:2a:23:8e:
5e:d2:e7:52:0a:f6:0a:00:6e:60:1c:0f:b6:f2:fb:91:5c:94:
83:b2:b1:2f:1a:19:0b:1d:28:93:57:a9:4c:50:ee:0c:6f:0e:
7b:d7:d4:fe:44:5a:d5:1e:b5:0c:e6:09:94:d4:47:c0:9c:a3:
35:5b:1f:25:17:ec:80:cd:c4:c6:51:c7:a4:4f:14:c2:d5:00:
f1:6a:61:b7:b5:68:63:1a:54:af:32:e5:5b:b2:32:5f:15:bf:
89:31:57:26:f1:ad:3e:66:54:4b:aa:17:46:a1:50:07:b6:0f:
48:2c:a2:96:01:b3:9f:9b:27:c6:7e:93:67:b9:26:ab:97:cc:
26:35:d8:40:00:94:61:7b:38:3e:e5:ee:33:a7:e2:44:40:93:
1b:31:fa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:05 2026 by rpki-client