Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
File: SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json)
Hash identifier: MNdNrNNjjCF9PIqh0JjP0aghHKRN6coEeOjrYm2jgyU=
Subject key identifier: B5:A8:70:7D:D8:79:6E:C5:15:3F:68:9D:99:D5:7B:7F:7B:29:FD:6C
Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Certificate issuer: /CN=4a6376ce92087e4c7ce536686537769e2cc34059
Certificate serial: 019DD79CCEC4899A390610FDB622B0D1F7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
Manifest number: 18E3
Signing time: Wed 29 Apr 2026 05:01:11 +0000
Manifest this update: Wed 29 Apr 2026 05:01:11 +0000
Manifest next update: Thu 30 Apr 2026 05:01:11 +0000
Files and hashes: 1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: Z7P969g3wJwhVnYRBx6ZbLFpFxbI66Zs4q0RPH4iDTU=)
2: b6GatGiUFxM_87xt_5qHFxZqZQ0.roa (hash: aB8H9RSypH5EK63/M5cIx7z9EJKV2WitqNTM48KwyXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d7:9c:ce:c4:89:9a:39:06:10:fd:b6:22:b0:d1:f7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059
Validity
Not Before: Apr 29 05:01:11 2026 GMT
Not After : Apr 30 05:01:11 2026 GMT
Subject: CN=b5a8707dd8796ec5153f689d99d57b7f7b29fd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:35:fd:f2:37:2d:13:b6:f0:3b:97:0f:0f:
2d:4f:34:29:44:05:a8:c1:02:c3:db:ee:c9:4f:ef:
ea:e2:7e:cd:1e:ff:11:c8:31:27:f3:63:94:02:bc:
72:7f:dd:69:14:85:87:43:89:e4:17:ca:32:f4:79:
cd:11:f3:47:31:cc:9c:f2:25:b6:33:37:bc:5f:32:
0c:3d:2f:e1:26:06:24:5a:7d:f3:14:a6:7d:55:cb:
f1:4e:2a:3f:ce:8d:0d:ce:af:4b:2a:6a:0d:de:90:
3c:98:7f:f6:c0:1b:c7:9f:f7:aa:c4:c1:bb:17:6d:
dd:8b:87:0c:a2:11:33:0e:c4:37:15:fb:91:7c:e7:
96:a2:7a:cc:d7:f9:20:f0:96:c4:2d:63:cd:6c:6f:
a4:2a:93:44:28:60:24:5d:e6:81:b4:04:6c:26:10:
8a:3f:0d:b8:81:31:b2:cb:eb:4c:b7:05:2a:37:1f:
d4:5a:6c:5a:e3:4f:93:b1:1a:3b:46:07:fc:1a:13:
cf:f4:d5:44:39:1f:7a:11:29:03:5e:f1:e2:18:01:
8a:ac:99:d5:33:bb:4b:e8:78:83:18:45:ab:8e:4c:
16:fb:41:ad:12:3f:8f:9a:c7:ba:8a:db:a9:d1:3f:
04:75:41:54:a4:c9:f4:bf:b7:58:89:0c:4b:83:bc:
6f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A8:70:7D:D8:79:6E:C5:15:3F:68:9D:99:D5:7B:7F:7B:29:FD:6C
X509v3 Authority Key Identifier:
keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9e:a8:01:34:de:a1:0a:53:8a:dd:ba:ec:88:82:a8:c2:0a:
ee:54:86:24:40:33:1a:7c:5b:10:5b:f2:86:e6:8a:4f:7e:3e:
c6:b1:c4:23:94:e0:11:d6:cf:b8:cc:57:08:1b:aa:9b:71:e5:
53:26:fb:ef:70:3a:96:b8:74:e3:05:0c:79:94:71:6f:3b:a9:
3b:98:10:87:ec:76:ab:3c:8f:4f:03:49:cc:20:e6:07:84:3c:
7e:5e:5c:17:6f:60:95:44:9c:49:06:39:53:be:71:ca:4d:55:
d6:c0:96:06:35:36:2b:ea:59:1e:c8:00:bd:e3:a6:d8:5d:d7:
b3:2f:94:55:b2:8b:ed:46:04:ef:e3:b3:89:9a:db:d0:17:15:
9e:75:45:06:85:d8:e8:17:6b:30:ee:f1:b5:73:3f:58:13:23:
f4:a9:39:a9:eb:68:1f:9f:ee:77:4d:dc:83:86:32:43:da:ba:
24:fc:e0:46:8d:e8:2f:8a:8e:15:c4:af:96:ec:0f:7f:1d:a7:
a7:7e:48:94:34:59:9f:90:d6:eb:37:6c:e7:2b:6c:6d:7d:6b:
f6:ae:ed:48:02:ae:70:e8:10:0b:56:ba:73:99:94:8a:61:66:
41:db:83:9b:f1:ce:ad:d0:d0:0d:eb:1a:69:95:67:b5:2b:ac:
ac:1d:cf:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3XnM7EiZo5BhD9tiKw0ffcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjM3NmNlOTIwODdlNGM3Y2U1MzY2ODY1Mzc3NjllMmNj
MzQwNTkwHhcNMjYwNDI5MDUwMTExWhcNMjYwNDMwMDUwMTExWjAzMTEwLwYDVQQD
EyhiNWE4NzA3ZGQ4Nzk2ZWM1MTUzZjY4OWQ5OWQ1N2I3ZjdiMjlmZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0E1/fI3LRO28DuXDw8tTzQpRAWo
wQLD2+7JT+/q4n7NHv8RyDEn82OUArxyf91pFIWHQ4nkF8oy9HnNEfNHMcyc8iW2
Mze8XzIMPS/hJgYkWn3zFKZ9VcvxTio/zo0Nzq9LKmoN3pA8mH/2wBvHn/eqxMG7
F23di4cMohEzDsQ3FfuRfOeWonrM1/kg8JbELWPNbG+kKpNEKGAkXeaBtARsJhCK
Pw24gTGyy+tMtwUqNx/UWmxa40+TsRo7Rgf8GhPP9NVEOR96ESkDXvHiGAGKrJnV
M7tL6HiDGEWrjkwW+0GtEj+Pmse6itup0T8EdUFUpMn0v7dYiQxLg7xvOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWocH3YeW7FFT9onZnVe397Kf1sMB8GA1UdIwQY
MBaAFEpjds6SCH5MfOU2aGU3dp4sw0BZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21OMnpwSUlma3g4NVRab1pUZDJuaXpEUUZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83Y2Y0MmUtMmFlOC00ZjEzLWEwYzQt
NGUxZmI3NmM4NDdhLzEvU21OMnpwSUlma3g4NVRab1pUZDJuaXpEUUZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83Y2Y0MmUtMmFlOC00ZjEzLWEwYzQtNGUxZmI3NmM4NDdh
LzEvU21OMnpwSUlma3g4NVRab1pUZDJuaXpEUUZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnp6oATTe
oQpTit267IiCqMIK7lSGJEAzGnxbEFvyhuaKT34+xrHEI5TgEdbPuMxXCBuqm3Hl
Uyb773A6lrh04wUMeZRxbzupO5gQh+x2qzyPTwNJzCDmB4Q8fl5cF29glUScSQY5
U75xyk1V1sCWBjU2K+pZHsgAveOm2F3Xsy+UVbKL7UYE7+OziZrb0BcVnnVFBoXY
6BdrMO7xtXM/WBMj9Kk5qetoH5/ud03cg4YyQ9q6JPzgRo3oL4qOFcSvluwPfx2n
p35IlDRZn5DW6zds5ytsbX1r9q7tSAKucOgQC1a6c5mUimFmQduDm/HOrdDQDesa
aZVntSusrB3Prg==
-----END CERTIFICATE-----
Generated at Wed Apr 29 08:19:41 2026 by rpki-client