Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
File: SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json)
Hash identifier: 9omu0hVbc+FliiuHM+FB85BBTKcWd1QUqC6JKASKHyM=
Subject key identifier: EA:11:8D:3B:6E:5F:62:65:1F:0C:EB:15:D5:F0:55:DE:A8:24:BE:76
Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Certificate issuer: /CN=4a6376ce92087e4c7ce536686537769e2cc34059
Certificate serial: 01A08AFA3B33DA8D2845C86544B74F0BB35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 11:00:49 +0000
Manifest this update: Thu 10 Sep 2026 11:00:49 +0000
Manifest next update: Fri 11 Sep 2026 11:00:49 +0000
Files and hashes: 1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: njyrkWKLd59qtZAbUkALZM0KBeBgK0pXE0n5N2oIwBI=)
2: b6GatGiUFxM_87xt_5qHFxZqZQ0.roa (hash: aB8H9RSypH5EK63/M5cIx7z9EJKV2WitqNTM48KwyXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:3b:33:da:8d:28:45:c8:65:44:b7:4f:0b:b3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059
Validity
Not Before: Sep 10 11:00:49 2026 GMT
Not After : Sep 11 11:00:49 2026 GMT
Subject: CN=ea118d3b6e5f62651f0ceb15d5f055dea824be76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:0f:1d:11:14:3a:7c:8b:8e:75:a4:67:0c:
45:9b:ee:83:6f:5a:68:38:55:ac:e4:fb:94:be:35:
7a:91:35:73:e4:fa:22:9d:9a:af:ac:97:7d:bc:20:
67:d8:02:5f:4c:b3:6f:ab:04:d7:88:b8:ad:87:57:
e0:b6:3f:df:cb:f3:f0:2f:3b:85:2e:dc:f7:02:e1:
f5:9f:c5:43:ee:8f:8d:8c:ed:77:a2:ab:1f:71:96:
4c:cd:fa:d9:91:62:cb:b2:f4:c1:ed:40:f0:1e:58:
31:7f:3f:f6:15:cd:6f:d6:72:95:63:73:81:79:1a:
9c:a2:1a:b3:73:49:53:7f:4f:53:c7:88:15:f0:57:
5d:70:1e:46:e0:a8:29:3d:04:29:db:6e:23:3e:87:
20:71:7f:de:85:28:28:8d:8e:57:72:97:c5:3b:f0:
19:b5:22:23:10:5f:46:42:62:69:cc:9b:48:dc:ab:
f8:91:a6:a1:97:ed:55:42:9f:da:86:ef:31:51:58:
58:6a:7b:d7:c5:50:71:1a:a8:e9:98:9c:1a:79:90:
79:b6:70:d3:6a:bb:9d:22:80:02:da:2f:e9:77:97:
6c:70:4e:d7:4a:99:7a:42:50:a0:b0:08:bc:20:56:
78:a9:40:aa:f7:fd:a4:90:9c:8f:46:0f:a3:6e:7e:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:11:8D:3B:6E:5F:62:65:1F:0C:EB:15:D5:F0:55:DE:A8:24:BE:76
X509v3 Authority Key Identifier:
keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:15:bf:19:fa:42:80:0f:64:20:ec:a5:10:c6:93:41:a5:98:
27:62:51:ff:31:fe:4e:65:64:01:ce:2b:3c:35:ba:90:3b:0d:
3f:2c:70:a3:ce:3b:0b:32:8f:db:21:71:f6:d7:7f:34:82:35:
f2:24:d6:f7:6e:0b:52:67:ea:f6:96:32:3a:07:01:d9:aa:3b:
83:1e:31:c5:09:6b:f6:22:95:00:95:97:07:63:08:52:df:c5:
1d:cf:ef:6b:28:ab:f1:02:b8:78:aa:35:af:9b:f4:48:3f:84:
f5:51:7d:bb:90:f3:24:e4:31:69:d1:d6:48:ca:d0:50:7e:b6:
d3:24:97:88:32:13:17:4a:53:95:26:ad:0b:60:14:9c:90:f5:
d1:fc:b5:ab:d5:9b:c1:dd:07:0a:33:f6:e3:39:3a:bf:ee:4f:
ba:5d:8e:01:84:54:9d:f9:63:5c:84:91:60:bf:27:5d:f5:84:
7a:b2:8d:71:2b:bd:44:23:d2:19:c6:99:e5:58:2e:7b:88:28:
a3:95:8e:3c:88:59:aa:70:4d:fe:79:3e:e5:f9:b6:10:1e:fb:
67:37:76:41:dd:e1:a7:01:c9:06:15:3c:bc:58:0f:01:14:bc:
91:12:12:c6:1f:2c:fc:02:be:65:c9:51:ff:27:80:9e:b1:57:
d1:8c:61:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:07:03 2026 by rpki-client