Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
File: SMOd4l_6fq8CsqbYws9uLOtWK_M.mft (raw, json)
Hash identifier: RDnzBom8LKa+RrJ2BYgUcQduAed1gkUV8gNzlj+EANg=
Subject key identifier: E7:94:D5:9F:8A:0D:D6:06:9A:3C:CA:D3:05:F2:3D:03:A7:9E:94:83
Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
Certificate issuer: /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Certificate serial: 019D2884C52B3A3A9A5E58F362E506CA0008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
Manifest number: 14E4
Signing time: Thu 26 Mar 2026 05:01:22 +0000
Manifest this update: Thu 26 Mar 2026 05:01:22 +0000
Manifest next update: Fri 27 Mar 2026 05:01:22 +0000
Files and hashes: 1: RO5Y64erMnkGFS_q7s72Hi1r0FU.roa (hash: AsPEDTURfYi6VUtt4C3gZ0GGPtUCjtWSs6d5iV6qUCg=)
2: SMOd4l_6fq8CsqbYws9uLOtWK_M.crl (hash: MtgYP49BMta778IxPz3x254deNm2spuIvc+GUjI2igM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c5:2b:3a:3a:9a:5e:58:f3:62:e5:06:ca:00:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Validity
Not Before: Mar 26 05:01:22 2026 GMT
Not After : Mar 27 05:01:22 2026 GMT
Subject: CN=e794d59f8a0dd6069a3ccad305f23d03a79e9483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:19:29:10:48:6d:6d:c5:a0:f7:9d:81:ac:
f9:67:55:84:42:d3:0a:21:50:aa:5b:de:47:1a:ec:
5f:94:1d:d1:32:d2:a2:7f:ac:ab:b9:bc:3f:8a:33:
1f:41:a2:f5:8e:53:1c:ca:00:bd:d0:cc:69:11:e0:
06:5c:fb:f7:32:c8:3a:04:b4:40:9e:94:87:83:0f:
27:36:98:40:ff:4f:12:b1:ef:be:b4:d7:cc:30:00:
c2:d4:1d:3a:ab:63:dc:69:38:b1:17:32:74:8a:73:
44:dc:38:c4:86:18:6d:cd:a2:6a:bb:74:25:aa:7e:
e3:a5:89:05:f0:4f:12:b3:8c:13:40:ab:ff:c9:f0:
73:f4:f7:74:6b:a7:1e:13:95:87:43:3a:cc:59:b7:
3d:55:90:e7:d5:41:e5:db:cb:aa:8a:05:7e:d4:b1:
12:4e:00:ee:d9:80:c3:94:17:87:7b:9b:d0:c7:df:
4c:5a:82:ab:9a:ba:68:81:99:9f:0a:b8:f2:c1:7a:
d5:24:86:2e:db:b5:43:a8:33:e7:e1:14:cb:c1:51:
07:2f:4e:6b:91:b0:af:68:fd:3e:e8:f8:73:ad:d7:
68:97:6e:63:0f:77:5f:b0:9d:59:9d:1a:fb:87:8a:
40:5f:57:c2:2d:27:7e:46:96:eb:16:7a:aa:e5:79:
bf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:94:D5:9F:8A:0D:D6:06:9A:3C:CA:D3:05:F2:3D:03:A7:9E:94:83
X509v3 Authority Key Identifier:
keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:78:dc:b8:10:4b:28:93:ed:a2:e0:3e:ec:58:5b:57:a0:1c:
2c:64:d9:f2:61:5a:c1:a3:b9:cf:56:34:78:e4:e3:e9:79:f7:
8d:ee:51:6e:da:05:eb:28:50:0d:e3:28:66:8f:5e:61:2d:49:
d3:f0:57:94:f9:47:02:a9:cb:c9:53:78:65:be:7e:32:a3:23:
bc:a7:af:76:75:4d:e7:12:2c:12:87:32:c8:ac:68:77:21:d2:
70:52:8a:d9:32:4d:56:79:b9:4e:86:31:f2:fc:52:f6:48:94:
42:d4:83:d4:37:a8:5a:79:67:f0:81:1a:b4:36:a4:d7:61:74:
d6:86:16:53:78:c3:19:dd:b9:55:5c:b4:40:50:95:b9:e5:07:
14:b7:1b:1d:b1:65:63:19:90:84:8f:f8:2e:b7:74:09:e7:32:
97:60:80:9f:81:6a:51:77:0c:a2:af:03:a8:f9:61:65:e0:67:
97:31:03:83:ba:cd:46:f0:58:73:30:1a:4a:a1:5d:64:10:e4:
af:be:49:a3:e8:27:41:fd:81:6e:fc:59:ce:a7:3f:9c:fe:66:
b2:0a:56:26:4a:b9:18:fb:cc:37:d0:e9:7d:dd:b1:95:56:47:
e4:8e:52:76:e0:38:e3:30:85:13:35:c4:cf:6c:aa:29:d3:1a:
09:85:50:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:27 2026 by rpki-client