Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
File: SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json)
Hash identifier: LW9c7d229CQWIH2wuGedMWH1lGgjpe5g4q9pg1jyjCc=
Subject key identifier: D5:1F:AA:8D:FA:30:86:D8:18:FE:A0:BC:93:6A:78:8F:EA:2A:57:E2
Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Certificate issuer: /CN=4a6376ce92087e4c7ce536686537769e2cc34059
Certificate serial: 01A17A71E620410D8ACB2DC244FC3E364DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 23:00:47 +0000
Manifest this update: Mon 26 Oct 2026 23:00:47 +0000
Manifest next update: Tue 27 Oct 2026 23:00:47 +0000
Files and hashes: 1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: YloEnZDPUdWRU8LRIBVCFkUrf+39isqqtsQzCjLLb6Y=)
2: b6GatGiUFxM_87xt_5qHFxZqZQ0.roa (hash: aB8H9RSypH5EK63/M5cIx7z9EJKV2WitqNTM48KwyXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:e6:20:41:0d:8a:cb:2d:c2:44:fc:3e:36:4d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059
Validity
Not Before: Oct 26 23:00:47 2026 GMT
Not After : Oct 27 23:00:47 2026 GMT
Subject: CN=d51faa8dfa3086d818fea0bc936a788fea2a57e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:f4:79:27:53:9b:cb:3c:5a:41:97:f9:18:
a8:b7:cb:9b:15:0b:76:ae:e1:f2:af:5b:7f:7d:7d:
60:7c:a5:fd:a2:88:c2:56:a5:02:cc:f3:da:3d:3d:
53:aa:81:69:a3:97:c1:ea:a3:4a:ec:b9:6d:c4:a2:
a1:8c:76:71:22:39:09:25:ba:ed:2b:39:c9:3a:90:
ae:df:c1:9b:c2:3b:4c:a8:63:ad:ab:5a:93:a6:ee:
55:26:3e:99:90:53:18:34:12:ed:86:ed:3d:60:e0:
c8:af:2a:7d:9d:05:fd:c6:62:7b:ba:24:fb:64:85:
5a:c6:25:11:35:e5:b5:34:fb:d4:71:65:8b:61:df:
9d:8c:96:90:41:f8:a1:fb:b0:29:fd:3e:d8:95:bb:
d1:f9:da:91:bf:4a:78:d7:2c:e1:6d:f4:f4:cd:c8:
fd:dd:82:6a:f7:94:d0:fc:7c:e7:08:24:45:b4:0d:
24:05:f1:1d:8b:c9:ce:c3:09:b4:72:76:df:6f:84:
1b:09:59:0f:f0:67:1e:eb:8d:57:af:49:34:b6:ec:
db:68:76:b3:9a:c8:b8:d0:38:87:cf:0f:4b:75:a7:
f7:80:24:9a:7c:10:77:2e:9c:83:a6:19:e1:a1:4d:
a4:a6:71:be:a0:a3:cc:32:d7:ec:86:cf:04:da:57:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1F:AA:8D:FA:30:86:D8:18:FE:A0:BC:93:6A:78:8F:EA:2A:57:E2
X509v3 Authority Key Identifier:
keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:38:29:ab:65:17:ca:62:54:e1:9b:fe:bd:f4:87:15:eb:bd:
88:7e:fe:bb:25:35:c9:97:46:e7:1e:03:d2:79:b4:70:25:cd:
4e:33:68:d6:3d:7f:56:a2:24:1e:68:48:3c:d4:4b:94:3d:a6:
e2:64:70:b6:fa:84:cb:0a:ba:b0:48:3d:83:50:4d:b2:fd:72:
d2:43:d4:a9:db:78:5f:57:fc:67:ff:82:f5:9b:12:b1:dd:eb:
cb:d4:49:29:47:c3:a2:e1:83:c6:39:29:75:df:9d:3f:89:67:
0d:da:10:bb:24:92:85:f9:06:ec:0e:b1:42:dd:b6:4b:e2:7b:
95:89:a6:32:02:55:67:e6:9a:a6:15:18:c7:b8:2c:f7:9d:49:
26:8f:49:95:b3:c6:ed:b2:49:c3:39:af:61:39:01:7f:aa:79:
0f:ed:76:f8:ce:84:95:c0:42:7c:2d:72:4d:7f:0f:2a:8c:e9:
1b:08:42:ef:5c:44:4f:46:66:ae:6e:3e:90:95:cc:c0:0c:0e:
7f:11:60:e3:de:17:3b:02:27:7e:50:b1:99:6c:70:e8:27:aa:
30:a7:b2:5a:e0:18:a6:2e:3e:98:4b:ec:b6:9a:a7:44:14:a2:
f2:e7:05:0b:30:0d:82:bf:51:47:6c:7e:af:90:d5:ee:76:6e:
dc:c9:6d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:12:32 2026 by rpki-client