Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: Ki1NB0gqfApcRvBldRxj/uOr8F10TBAuiG5LCiD3jmg=
Subject key identifier: 70:3C:7A:2A:9A:B6:4D:8D:6F:9F:D6:EE:D2:EF:E5:4F:70:61:6A:9E
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 019D2996C859747E1AD05E89DF8E31D87F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 189B
Signing time: Thu 26 Mar 2026 10:00:40 +0000
Manifest this update: Thu 26 Mar 2026 10:00:40 +0000
Manifest next update: Fri 27 Mar 2026 10:00:40 +0000
Files and hashes: 1: JIuy1yADZ-WZO4oAxQqNA1Wq5AE.roa (hash: Z5LJLNpxBzdsKbIiGUAut0ZaWggo2BNQFiKt/gU6WAI=)
2: W03Nbk16lpsFFFHwZEVyGb3GdCk.roa (hash: 2uorc6ih53DwXRdYsCumZcTs0fUh5iNGE9WcBcj9AO0=)
3: km0TI5gSsaXM0ksLgopKp3QzU78.roa (hash: duTA4ngL0m0KQkmYbp4PQQqGU8slrpfiT+Ukyerp3dc=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: +ul+WIaRqA4wY8d3ym5UTXHuGAKtsuJV2bB6fhdJMTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:c8:59:74:7e:1a:d0:5e:89:df:8e:31:d8:7f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Mar 26 10:00:40 2026 GMT
Not After : Mar 27 10:00:40 2026 GMT
Subject: CN=703c7a2a9ab64d8d6f9fd6eed2efe54f70616a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:7f:cb:91:46:e0:da:62:0f:6c:13:b3:d4:
bc:e0:82:f9:2f:8c:88:37:d7:4c:06:ae:c1:9d:c5:
f7:e8:02:5a:3b:c9:bf:f3:41:a2:0b:f9:31:ca:8d:
2b:a3:ef:49:0c:87:5a:45:f3:8a:0c:d5:a5:8d:14:
e9:22:41:16:3f:8f:9b:e7:b0:68:9b:a6:ef:86:19:
2f:d1:05:33:cd:5a:1a:b5:16:af:18:3f:35:69:c1:
a2:0b:81:fa:e9:99:e6:55:8c:43:63:bc:1b:97:06:
6e:73:18:50:f2:33:15:af:28:5a:46:b3:80:16:c5:
d7:e0:f6:2d:2f:63:ce:e9:11:31:22:f7:21:7d:a1:
19:60:5e:29:9c:00:80:88:ea:40:79:88:a5:e2:60:
00:85:bb:93:00:b4:96:37:b6:c4:60:94:10:91:6e:
31:02:62:02:3c:17:80:85:75:43:cf:72:a1:40:49:
2d:21:83:ed:6e:de:82:73:91:1d:3d:41:6a:bd:bc:
3d:23:85:56:5d:7c:22:ce:32:a8:63:24:64:e7:71:
fc:3b:8f:7d:66:b3:19:be:63:8d:53:cd:81:13:3d:
2b:50:30:60:6c:7f:00:d0:38:6b:b4:a7:20:e8:b2:
29:89:d6:39:c5:93:99:2e:26:a6:c8:e1:fb:d3:e4:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3C:7A:2A:9A:B6:4D:8D:6F:9F:D6:EE:D2:EF:E5:4F:70:61:6A:9E
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:43:e6:52:79:d8:89:70:22:1f:32:4e:63:10:e0:91:27:6b:
74:f0:d6:aa:f8:4f:2a:ad:c9:5d:be:36:b0:21:68:9b:09:27:
ec:ef:01:35:4b:3a:1d:ec:62:a2:13:d1:e0:70:06:17:1e:58:
e8:d4:f7:34:03:bf:17:26:ba:c1:6c:12:5c:fb:72:8b:f8:17:
23:8f:db:99:73:eb:1f:6b:3d:44:cc:9d:fa:6f:cf:5f:59:5c:
c5:c6:a3:27:38:a9:45:84:33:7f:0e:61:0a:34:73:ac:b6:10:
41:36:cf:04:7c:05:97:2c:76:26:cf:0b:ec:b1:b6:22:f2:4a:
ce:10:18:d4:7d:0e:01:d4:0e:f3:5e:b9:56:30:e5:9c:d9:1f:
ad:3a:33:27:40:96:32:a8:5e:27:12:43:ce:e7:f8:ec:45:d5:
16:07:17:89:fd:9a:c9:ed:04:5c:a1:00:23:4c:d0:af:bf:d6:
64:3d:36:0b:11:88:fb:af:ec:df:b4:6e:63:51:82:5e:0f:29:
53:0d:81:40:5e:ab:07:88:f5:21:3f:45:76:bd:a3:63:c9:b0:
82:ef:17:a5:7a:fb:da:97:4c:03:39:3f:51:c8:2e:8f:90:00:
ed:5f:ef:81:69:c0:73:07:7e:05:8e:aa:80:74:6c:6e:18:5d:
a3:4a:38:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:26:29 2026 by rpki-client