Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: 8L29svEVU/mAoV/CUxeRdVNea5kO/pUerHNoKsZFT28=
Subject key identifier: 4A:F8:97:EA:16:1D:9A:0C:A8:00:1F:BB:C7:CF:D3:FC:FF:12:7C:76
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 01A0E964FB4166B8FBBFACD166F9373F4122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 1A8C
Signing time: Mon 28 Sep 2026 19:01:44 +0000
Manifest this update: Mon 28 Sep 2026 19:01:44 +0000
Manifest next update: Tue 29 Sep 2026 19:01:44 +0000
Files and hashes: 1: JIuy1yADZ-WZO4oAxQqNA1Wq5AE.roa (hash: Z5LJLNpxBzdsKbIiGUAut0ZaWggo2BNQFiKt/gU6WAI=)
2: W03Nbk16lpsFFFHwZEVyGb3GdCk.roa (hash: 2uorc6ih53DwXRdYsCumZcTs0fUh5iNGE9WcBcj9AO0=)
3: km0TI5gSsaXM0ksLgopKp3QzU78.roa (hash: duTA4ngL0m0KQkmYbp4PQQqGU8slrpfiT+Ukyerp3dc=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: 0+CKJPmgSlJp5t2F73yeRUdoAxdBe0IG/YywXCjFck4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:64:fb:41:66:b8:fb:bf:ac:d1:66:f9:37:3f:41:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Sep 28 19:01:44 2026 GMT
Not After : Sep 29 19:01:44 2026 GMT
Subject: CN=4af897ea161d9a0ca8001fbbc7cfd3fcff127c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:72:67:43:2f:d8:3b:18:06:ef:03:48:06:
b1:96:16:01:0a:14:17:ce:59:7a:c6:80:12:57:98:
d7:26:3f:35:3e:fc:c6:fa:cb:a3:be:46:0c:db:7d:
a7:b3:95:53:f8:b1:96:5d:2b:49:0b:5b:a2:47:28:
a3:f3:75:ac:1b:19:74:e0:2f:bc:c7:83:9a:2b:47:
5e:6b:97:f5:c5:c3:73:03:40:a0:4e:a4:4d:e2:4c:
37:ec:d8:f1:d2:1a:00:24:03:34:db:56:52:f8:54:
6f:57:92:ec:0d:ae:90:b6:2f:b4:c9:1e:98:3a:3f:
29:a6:1f:90:5b:35:ce:29:a8:94:99:94:6e:3a:67:
73:09:8d:d6:0d:35:7a:e0:4b:92:62:e1:24:61:c7:
2c:c1:c1:6c:c3:df:ec:e4:aa:63:4e:bf:2e:b9:f9:
01:02:b1:cc:2d:22:14:e7:15:7a:27:a9:fc:29:89:
f2:46:cc:71:74:6f:05:d4:45:9c:ea:f5:bb:c4:21:
79:e8:ae:d4:6a:74:92:2f:c4:86:4d:35:36:7c:bb:
70:0b:f9:f0:3a:bf:3b:a3:e9:ff:3b:2e:79:46:4b:
88:7a:5d:8c:04:ce:50:35:de:de:bc:db:2d:ea:49:
d3:6e:3f:b8:7a:4d:cc:15:b2:94:e9:14:ab:1a:ae:
84:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F8:97:EA:16:1D:9A:0C:A8:00:1F:BB:C7:CF:D3:FC:FF:12:7C:76
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:36:b5:9d:5d:60:a9:f8:2e:53:31:8c:95:0c:4f:22:59:64:
6f:a9:63:04:86:37:f7:52:34:46:da:1d:8e:73:45:5c:0e:de:
c3:14:83:bc:d5:66:3b:0e:62:42:f0:ce:4e:6c:ca:b1:07:2d:
e5:67:80:a3:cc:d9:6b:f1:b7:eb:61:92:c3:d4:09:c4:cd:0c:
58:69:39:00:c3:f1:a5:9c:6a:bc:51:17:be:d5:ae:1a:9f:8b:
24:1e:66:28:a2:28:5a:e0:b8:82:54:e4:be:24:68:23:ef:0d:
cc:8c:b7:0d:0a:a2:03:fc:ea:ab:07:58:e6:52:1b:a9:02:0e:
0a:85:0d:f6:fc:24:a2:6d:30:b8:98:38:5d:03:61:a8:71:ea:
e6:18:d1:35:ce:ac:2d:b8:9b:13:ca:56:4f:07:61:45:7c:d0:
01:be:db:09:6b:5e:01:28:c2:e3:41:ec:f8:e2:78:88:2e:18:
91:04:d7:3a:2e:7a:8f:c5:ee:1c:d4:71:3b:93:62:f1:d3:52:
c7:13:af:c8:50:3f:df:af:b2:04:d4:da:fd:b6:2d:97:83:7a:
6b:b2:ae:e5:1c:bc:99:4d:17:d6:5b:d6:08:c3:00:9b:5e:5e:
82:20:35:b7:f1:6c:3d:e6:98:d9:f0:12:97:23:e2:bd:d9:67:
f4:e7:ff:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:41:04 2026 by rpki-client