Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
File: smK_Id5ROFhZQWxMYIAB4gJaXSU.mft (raw, json)
Hash identifier: NCo+TUd0MJJNRO0K2WJe32FzN1lbOk29yfPdJUYRGsU=
Subject key identifier: A0:04:51:8E:11:57:5E:4F:43:5C:96:7D:19:82:69:BE:5A:00:2C:1A
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Certificate issuer: /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial: 01A181872DE9FD904F5A07B79ACB01EFE94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
Manifest number: 1351
Signing time: Wed 28 Oct 2026 08:01:22 +0000
Manifest this update: Wed 28 Oct 2026 08:01:22 +0000
Manifest next update: Thu 29 Oct 2026 08:01:22 +0000
Files and hashes: 1: 1-WZ68pg0HMraeC1byIxs93xW_wk.roa (hash: hh4UtDOrrr3oi4KiUtbWr/EMIQFLsOpxNDn+Sc5RHOM=)
2: YC9W-iVv9dOJhfbZw9HftS1KxPY.roa (hash: XcqcrEVWbFX4rVC3SqcfN+w6BqsgeWQjFifYF0iAu7k=)
3: smK_Id5ROFhZQWxMYIAB4gJaXSU.crl (hash: CINZWHfyiX9mj5ohuFm9/KHzZCaJem9aplROB5rqtA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:87:2d:e9:fd:90:4f:5a:07:b7:9a:cb:01:ef:e9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
Validity
Not Before: Oct 28 08:01:22 2026 GMT
Not After : Oct 29 08:01:22 2026 GMT
Subject: CN=a004518e11575e4f435c967d198269be5a002c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:ed:d2:19:67:36:0c:06:30:2c:e2:9a:06:
e1:80:73:0c:ad:cb:91:f1:4e:86:42:1d:99:a1:f2:
64:b1:76:09:2a:9e:03:f0:d6:0d:b5:02:8d:af:22:
ec:4b:bb:39:13:8f:df:57:4b:fb:16:10:df:d9:e0:
7d:79:86:10:88:56:45:b7:ab:98:e7:d6:11:ff:fe:
9d:1e:9e:ac:e4:eb:5b:0b:8d:e8:c2:8d:82:98:0c:
d9:31:52:3d:f3:1a:88:72:d8:2e:7a:76:5b:ff:16:
3f:fa:55:66:a0:7b:57:50:38:c8:4d:62:f9:23:d5:
62:74:b0:16:41:1e:c6:fb:ba:fe:9d:6f:d3:84:88:
d2:c5:3f:9d:b9:57:b6:c2:4e:e5:95:14:75:3e:25:
85:d0:c1:02:f4:7c:63:b1:5e:39:88:83:4a:cc:97:
54:70:9f:5b:59:29:b6:1e:ef:d2:5c:7f:e5:0e:23:
70:17:e7:ec:70:7d:e2:67:2c:33:66:1c:f9:22:13:
33:ec:7b:78:a7:8e:5b:19:6d:06:83:f7:76:0d:c3:
4e:26:c6:96:8e:56:d5:6a:f3:c6:ba:fb:fe:b6:55:
0c:cd:3c:7b:42:a7:09:34:19:96:45:7e:78:55:1b:
25:a4:92:72:c5:22:e6:e8:ef:b7:08:be:25:c1:70:
22:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:04:51:8E:11:57:5E:4F:43:5C:96:7D:19:82:69:BE:5A:00:2C:1A
X509v3 Authority Key Identifier:
keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b0:a2:c2:d4:bd:ce:32:6b:4a:ab:41:70:a3:3f:3a:5c:e5:
c8:dd:8f:e1:21:77:71:19:76:29:67:b3:4f:50:8a:16:8f:dd:
24:a9:a2:6c:92:cb:dd:e2:05:1f:52:8e:cb:80:4f:27:65:33:
e7:ff:53:0f:98:70:39:b7:6a:76:e4:29:23:6b:02:c5:ac:6f:
13:d8:fd:93:e0:35:51:43:92:2e:7f:f4:07:26:e1:5b:ac:e0:
4e:df:7a:86:50:6b:2e:3a:67:53:c0:5f:b2:56:fe:e6:09:bd:
ad:65:e2:1a:1c:4c:ee:92:9b:a4:28:43:54:2f:76:bc:61:8b:
23:c2:65:73:7c:4d:b8:78:69:cf:e8:3c:29:1f:de:8a:0c:de:
f6:85:83:8c:4d:98:47:dd:0c:7b:cf:16:6d:7b:27:ee:aa:5d:
0b:71:c7:f9:d8:d3:eb:50:11:ef:15:61:ff:41:04:ad:52:cc:
92:43:fa:96:fb:c5:84:cf:58:c8:08:54:11:59:91:26:33:c3:
e1:ec:ba:b0:d1:bb:18:03:7b:d6:c7:ea:24:91:f0:b3:33:f1:
12:24:af:ad:17:63:ee:ec:bc:1a:7d:22:26:23:17:43:5e:b7:
7e:73:8b:d7:3c:c0:c2:93:72:2b:7f:6e:57:ec:cd:31:40:49:
2b:45:7f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:01:41 2026 by rpki-client