Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
File: sMeY09W2CWzTnliSWiihffthznU.mft (raw, json)
Hash identifier: AZnwZzfi0oNCPEF9Av5u6LxmVxWlnq63ZI/LPfuUYdI=
Subject key identifier: 99:CE:31:F6:55:E2:52:A7:BA:C8:A6:DB:65:FE:D3:88:97:2E:A0:F4
Authority key identifier: B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
Certificate issuer: /CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Certificate serial: 019D38D3B7BD9B88B3C80941E979BD508193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
Manifest number: 0DE9
Signing time: Sun 29 Mar 2026 09:01:32 +0000
Manifest this update: Sun 29 Mar 2026 09:01:32 +0000
Manifest next update: Mon 30 Mar 2026 09:01:32 +0000
Files and hashes: 1: oTQStwFSuI2Q1W08FZTLs7BXO5k.roa (hash: C8X1J1aYpfCLBdtwgg3h+C2d55+qHBalin4zkQ6E7f4=)
2: sMeY09W2CWzTnliSWiihffthznU.crl (hash: g1f8KlG80INC5TxIcXzElv5zrD69J97waxddBoc9+X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b7:bd:9b:88:b3:c8:09:41:e9:79:bd:50:81:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Validity
Not Before: Mar 29 09:01:32 2026 GMT
Not After : Mar 30 09:01:32 2026 GMT
Subject: CN=99ce31f655e252a7bac8a6db65fed388972ea0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:5d:d6:be:9f:b8:c6:63:18:b6:d4:0b:c7:
07:ab:b6:bb:bc:f2:eb:79:6f:5e:a0:80:87:e7:dd:
68:2d:10:ce:d1:da:d5:32:27:fc:02:86:a3:3b:6f:
40:f6:3f:f7:88:b0:c3:b0:ce:a5:27:2a:23:df:c7:
62:c8:a3:93:d6:6d:70:18:a3:08:56:04:4d:05:6f:
d8:a3:83:56:05:58:8c:9d:47:2e:be:10:73:1a:94:
7c:52:dc:a8:74:92:45:09:cd:ea:fb:b7:f7:10:2a:
b1:ee:32:98:b8:af:e6:a1:c0:05:0d:0b:57:91:4b:
38:f8:f4:cc:5d:17:70:58:fd:41:1d:da:10:45:18:
88:88:0b:0e:cb:35:f3:ba:f9:36:e4:8b:73:11:f4:
f8:c3:ea:4d:f8:75:fe:be:37:5c:d2:58:91:dd:d1:
b3:ed:37:c3:47:11:e9:93:b5:83:0a:93:2f:d3:ad:
f9:e8:94:83:fd:ae:87:0e:f6:01:0a:02:e8:82:96:
df:7d:db:6d:5c:fe:58:ea:1e:5d:ab:f2:10:91:3b:
a3:cc:b2:e1:a9:62:5f:b5:bf:a0:ce:69:ee:99:f4:
3c:58:b5:07:d0:ad:18:61:67:64:46:1e:0b:f8:49:
c4:cc:b3:e1:6c:ff:34:87:13:32:5b:1d:28:c9:a0:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CE:31:F6:55:E2:52:A7:BA:C8:A6:DB:65:FE:D3:88:97:2E:A0:F4
X509v3 Authority Key Identifier:
keyid:B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:34:5c:d3:d0:73:68:36:58:c6:d0:51:84:30:39:28:95:41:
a5:0a:1f:f8:9d:2c:b0:79:23:37:2f:07:d3:29:f6:58:66:05:
80:6b:08:9b:bb:f1:6e:c9:cb:9c:4f:eb:c9:66:56:ba:4c:06:
5f:50:0d:bb:58:83:b5:83:2b:b9:64:a2:bf:15:5e:af:81:f8:
55:6d:3b:10:2c:1f:d6:f7:99:60:40:6f:e4:89:5c:a9:56:17:
10:99:0c:f5:9b:0b:71:b5:bc:25:56:ad:ff:13:92:40:0b:41:
b9:84:3e:a1:93:a7:e7:18:b9:4d:d7:3e:d9:39:54:48:1c:76:
69:d9:e9:be:07:43:21:d4:12:fb:43:7e:c1:4c:aa:de:b8:e8:
a6:d6:40:cc:d7:3a:6c:d8:88:1f:87:4f:dc:89:c6:c0:28:ce:
14:35:17:80:8b:2a:6b:6f:93:31:d5:62:da:16:a1:97:66:f0:
28:79:c1:a0:6d:07:b0:75:84:32:72:e0:59:20:c8:e7:cb:c0:
09:c3:7e:51:73:87:9b:90:77:7b:41:bf:72:dc:6c:84:98:2b:
ba:d2:90:f2:02:a6:77:1c:a4:19:29:eb:1e:ec:02:90:9c:64:
7a:93:4e:5e:c8:91:9b:7e:86:a3:8b:41:99:f0:ef:fb:90:fa:
c5:eb:72:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:56 2026 by rpki-client