Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: nk5eMS/hoUbK9tjEZfc/3p8bhBIjDT6oMY2JRBZ3REo=
Subject key identifier: 25:DF:09:13:41:3B:09:B3:86:06:9A:2D:D1:42:2C:D6:1E:56:47:04
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 019F91A3DF3F1E2A3853B067173F22D87677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 19DA
Signing time: Fri 24 Jul 2026 01:01:03 +0000
Manifest this update: Fri 24 Jul 2026 01:01:03 +0000
Manifest next update: Sat 25 Jul 2026 01:01:03 +0000
Files and hashes: 1: JIuy1yADZ-WZO4oAxQqNA1Wq5AE.roa (hash: Z5LJLNpxBzdsKbIiGUAut0ZaWggo2BNQFiKt/gU6WAI=)
2: W03Nbk16lpsFFFHwZEVyGb3GdCk.roa (hash: 2uorc6ih53DwXRdYsCumZcTs0fUh5iNGE9WcBcj9AO0=)
3: km0TI5gSsaXM0ksLgopKp3QzU78.roa (hash: duTA4ngL0m0KQkmYbp4PQQqGU8slrpfiT+Ukyerp3dc=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: WKTpTofdG2puvltpNQJQIuCEQNuxi2uHQbjdfnmEpvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:df:3f:1e:2a:38:53:b0:67:17:3f:22:d8:76:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Jul 24 01:01:03 2026 GMT
Not After : Jul 25 01:01:03 2026 GMT
Subject: CN=25df0913413b09b386069a2dd1422cd61e564704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:48:b1:b2:29:ab:7f:50:a2:40:79:b3:0f:
62:12:98:92:b0:ae:a7:69:30:e5:e2:5c:3b:dc:c6:
50:55:b2:a5:a8:a2:17:47:fa:17:f5:f2:95:af:1a:
0f:93:b4:c1:84:6c:7c:7a:4d:9b:2c:e6:51:c2:85:
bc:e2:00:46:7d:4a:50:d5:1d:e8:a8:57:cf:7d:17:
ec:b9:de:4c:8a:f3:06:93:ae:67:80:76:a6:38:92:
72:aa:27:93:a8:5d:49:9a:de:bc:f3:de:97:34:5c:
10:15:89:60:e1:4e:aa:c9:34:0d:79:80:38:40:0c:
5d:fe:47:46:77:f8:b6:1d:6e:11:19:15:e3:e3:9c:
cf:f9:95:b6:f7:4a:2c:10:77:68:16:91:ae:2f:65:
59:bb:5f:c7:ec:03:92:ff:0b:7a:75:a7:6f:b1:3f:
cc:de:ee:40:a1:be:84:74:60:89:ce:fb:cf:5d:56:
09:25:ca:2b:d3:4a:cf:97:9f:0b:ad:c2:c2:95:3b:
94:0c:a6:b1:89:e2:2c:30:5b:45:5c:9e:ef:65:68:
55:42:ba:29:c4:1a:6e:97:7a:78:06:09:d8:93:52:
88:8b:d0:00:4d:05:f3:cd:61:05:63:f1:f5:69:8c:
e7:5b:19:62:bc:6c:aa:b9:12:36:90:8f:51:3b:bf:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DF:09:13:41:3B:09:B3:86:06:9A:2D:D1:42:2C:D6:1E:56:47:04
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:43:d1:f0:b7:e2:60:4b:64:78:8a:bd:3b:50:af:75:f4:8f:
87:6d:ae:ac:54:87:0f:57:fb:be:35:02:00:e9:1e:9f:a4:a9:
29:6c:a8:d9:8b:42:bf:cf:88:30:8a:d3:88:c7:7a:29:1f:3b:
e0:f6:ee:2c:8d:b7:64:53:50:8d:8a:27:eb:43:4d:20:fa:d9:
46:dc:b2:19:92:f7:e2:9d:9f:98:45:ec:dc:8f:42:69:d6:b6:
e3:b4:51:4f:5d:28:2b:8a:61:12:1c:6b:d7:f5:1a:79:16:70:
29:49:58:95:38:0e:9e:ed:d5:fe:c2:44:f8:f5:07:d3:91:7f:
b2:ea:45:8d:b2:0e:f9:34:ef:45:5c:83:2f:f2:95:13:9a:2b:
bc:df:fd:a6:b7:44:d2:37:44:1b:21:ea:8a:e4:96:52:4d:97:
76:f7:c3:f4:ce:05:c7:5e:f8:5e:77:79:52:f8:37:e0:9b:1e:
97:ff:82:12:d5:74:cb:fc:27:63:a3:73:c4:a0:e8:0b:c9:25:
98:ca:10:ba:8d:00:ec:81:b7:89:40:51:fa:09:92:97:6d:4f:
cf:da:27:a2:a9:d9:c7:e1:ca:77:18:0a:a1:15:b3:ac:23:36:
de:4b:e6:98:78:88:23:0e:1a:b8:f2:35:f6:44:f0:fd:9a:1f:
5f:42:4a:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro98/Hio4U7BnFz8i2HZ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTRhNjAxY2EzNWM2YzgzNzZiODlhYWY0NDNiNjNlYTQz
OWNkYjgwHhcNMjYwNzI0MDEwMTAzWhcNMjYwNzI1MDEwMTAzWjAzMTEwLwYDVQQD
EygyNWRmMDkxMzQxM2IwOWIzODYwNjlhMmRkMTQyMmNkNjFlNTY0NzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdVIsbIpq39QokB5sw9iEpiSsK6n
aTDl4lw73MZQVbKlqKIXR/oX9fKVrxoPk7TBhGx8ek2bLOZRwoW84gBGfUpQ1R3o
qFfPfRfsud5MivMGk65ngHamOJJyqieTqF1Jmt68896XNFwQFYlg4U6qyTQNeYA4
QAxd/kdGd/i2HW4RGRXj45zP+ZW290osEHdoFpGuL2VZu1/H7AOS/wt6dadvsT/M
3u5Aob6EdGCJzvvPXVYJJcor00rPl58LrcLClTuUDKaxieIsMFtFXJ7vZWhVQrop
xBpul3p4BgnYk1KIi9AATQXzzWEFY/H1aYznWxlivGyquRI2kI9RO7+/wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXfCRNBOwmzhgaaLdFCLNYeVkcEMB8GA1UdIwQY
MBaAFLGkpgHKNcbIN2uJqvRDtj6kOc24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAt
M2E1NjI4Y2M4MWQ5LzEvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAtM2E1NjI4Y2M4MWQ5
LzEvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkPR8Lfi
YEtkeIq9O1CvdfSPh22urFSHD1f7vjUCAOken6SpKWyo2YtCv8+IMIrTiMd6KR87
4PbuLI23ZFNQjYon60NNIPrZRtyyGZL34p2fmEXs3I9Cada247RRT10oK4phEhxr
1/UaeRZwKUlYlTgOnu3V/sJE+PUH05F/supFjbIO+TTvRVyDL/KVE5orvN/9prdE
0jdEGyHqiuSWUk2XdvfD9M4Fx174Xnd5Uvg34Jsel/+CEtV0y/wnY6NzxKDoC8kl
mMoQuo0A7IG3iUBR+gmSl21Pz9onoqnZx+HKdxgKoRWzrCM23kvmmHiIIw4auPI1
9kTw/ZofX0JK/w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:46:26 2026 by rpki-client