Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json)
Hash identifier: c8sgu2noShuIU2ybI35gBnpfIGnavmOwzu2boLjaQGs=
Subject key identifier: EE:A9:68:B1:E5:36:E1:B8:A9:AB:90:43:5E:6B:81:D3:2D:85:78:43
Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Certificate serial: 019D27DFDF2C7FE6CB5DDC093FE83E266518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:16 +0000
Manifest this update: Thu 26 Mar 2026 02:01:16 +0000
Manifest next update: Fri 27 Mar 2026 02:01:16 +0000
Files and hashes: 1: lep9djwdRRu1s5OqW7QhYt3e1T4.roa (hash: 678VmtvJF0332iEsfIN5ZpinwDwIbKnUYiVrKvGUM/Q=)
2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: XKURlplbtmddjVWX/IejFB6b9bOkkmvFiAkMNjFz8zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:df:2c:7f:e6:cb:5d:dc:09:3f:e8:3e:26:65:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Validity
Not Before: Mar 26 02:01:16 2026 GMT
Not After : Mar 27 02:01:16 2026 GMT
Subject: CN=eea968b1e536e1b8a9ab90435e6b81d32d857843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:4c:bc:8f:70:78:e3:9b:57:f7:28:9f:72:
91:88:8c:84:10:1e:89:98:dd:97:32:8a:98:f3:4b:
03:d9:b2:d2:69:c1:75:fa:06:86:b0:13:b9:00:57:
17:12:85:f8:4d:b2:20:71:55:1f:41:2e:d3:3e:f5:
27:3f:65:fa:3b:88:30:13:32:40:49:d3:27:f4:ab:
95:dd:c4:4a:e4:99:fc:2e:0e:00:75:f8:2b:d5:4e:
f2:43:6f:e2:e0:06:f2:57:8c:39:2c:27:57:4e:8e:
62:ba:e3:65:94:b2:72:0a:16:6c:20:70:88:48:ae:
72:63:e0:5b:07:ff:4d:e9:22:88:1c:42:68:6f:67:
ea:d9:dd:a5:4d:0e:07:18:a3:10:b7:d4:98:24:46:
f7:88:01:d7:a3:08:fa:64:3c:97:9c:e8:88:1e:5c:
c8:b0:b5:ba:04:7b:4d:50:0b:49:f7:4a:5b:c4:2a:
8c:1d:da:be:15:c6:ad:a4:30:f1:db:de:c9:61:16:
1b:72:25:d6:b7:8b:4c:d9:0b:d3:7d:ce:6d:16:5c:
a6:45:07:21:da:71:65:1c:b8:ba:1e:37:f1:a6:ab:
28:5c:a2:7e:94:df:1b:52:e5:ff:00:4e:59:34:a0:
65:a6:05:52:cd:6d:3c:6c:42:c1:15:a6:db:e6:65:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A9:68:B1:E5:36:E1:B8:A9:AB:90:43:5E:6B:81:D3:2D:85:78:43
X509v3 Authority Key Identifier:
keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ef:39:72:83:c6:d1:ec:83:a3:66:db:f4:cf:55:b1:18:34:
ed:e1:1a:d5:de:cb:1c:26:4d:e3:9c:6c:30:4d:ca:75:9a:4b:
41:3f:fb:91:19:59:90:93:ac:35:a7:ec:44:a1:04:cb:83:90:
4f:9d:c2:de:0d:8e:d2:c2:95:4c:b5:d9:02:f7:be:f2:09:20:
fb:a4:cb:dd:00:0f:77:bc:5e:bb:4b:d6:86:27:b3:eb:11:6e:
ab:dd:98:4e:77:8f:7b:52:f8:85:a2:b4:36:a6:71:5d:05:17:
91:c1:7a:ce:7e:9b:4e:d5:c8:5e:a2:e0:63:ca:8e:fb:d1:58:
ba:65:fc:da:e5:a6:fe:42:22:eb:f2:a7:14:b7:cd:0f:e1:18:
42:5c:5a:7a:34:58:39:4c:61:2f:40:52:e6:52:f4:32:ea:c0:
56:2a:7a:56:a7:dc:ac:12:9c:07:4f:c6:c6:28:6d:5e:92:10:
a0:19:da:6f:f1:9d:32:36:10:3b:bb:69:2b:06:3c:14:46:79:
e5:b6:48:60:1e:77:12:c1:b0:2b:67:bb:c4:20:e5:05:0f:05:
68:84:d5:8c:a8:a8:2f:29:ad:47:7e:f0:db:ff:32:4f:5e:0e:
02:aa:da:97:f9:d5:bd:68:79:16:ee:8b:71:4e:ec:f0:c9:30:
0e:7c:8c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:25 2026 by rpki-client