Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
File: SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json)
Hash identifier: EUwMq2NHNQoqxpgHp/ODeTN4YWLdsVotKOGZOOFzsNo=
Subject key identifier: F5:9B:4A:8B:C8:F9:67:3B:89:69:56:5F:D0:93:12:56:3F:85:A6:D1
Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Certificate issuer: /CN=48c311ede28b92f5c61a912be06039498b23422a
Certificate serial: 019D36E4D7E5E30764E7ED97D8F2A4708F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
Manifest number: 0978
Signing time: Sun 29 Mar 2026 00:01:00 +0000
Manifest this update: Sun 29 Mar 2026 00:01:00 +0000
Manifest next update: Mon 30 Mar 2026 00:01:00 +0000
Files and hashes: 1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: YleGqqp2OGcx93cIc6Gi1DZOO2E+qpvqELg+J8mhC9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:d7:e5:e3:07:64:e7:ed:97:d8:f2:a4:70:8f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a
Validity
Not Before: Mar 29 00:01:00 2026 GMT
Not After : Mar 30 00:01:00 2026 GMT
Subject: CN=f59b4a8bc8f9673b8969565fd09312563f85a6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:08:7c:a8:01:2e:79:c7:b0:21:89:62:2e:
b0:3c:fa:ab:44:fe:d3:ab:1b:31:30:8f:fb:1d:9b:
93:af:97:bb:a0:09:9e:cd:b6:a0:75:eb:32:ed:d5:
d2:63:a8:45:d9:84:9c:cf:d4:3c:71:fd:13:2e:5b:
64:06:3d:16:e5:87:bc:aa:81:3c:db:91:03:2e:d4:
cf:49:18:18:5f:0c:17:7f:d9:93:0d:8a:80:ef:e0:
54:2e:53:63:eb:71:7b:2a:6f:54:4f:94:5c:af:47:
a9:1f:b7:8b:e8:72:da:0d:df:f1:5f:11:af:d8:fa:
06:c9:e8:27:5b:84:b2:6a:b4:b7:06:8f:22:f6:96:
c3:8b:04:d0:ae:7d:85:7d:b9:e7:8a:97:20:2e:7b:
3f:15:0d:26:79:29:e0:ca:1a:2f:53:c7:25:05:1f:
ea:24:6f:e7:54:5e:48:da:3b:23:98:13:eb:66:ae:
43:7c:45:21:c2:f3:de:dd:f3:85:e2:36:0d:43:e1:
fa:8c:6d:f9:4d:90:8c:80:f5:be:ce:cb:e5:b1:0e:
ca:86:b6:3d:0d:26:54:b6:ab:30:60:70:81:d2:3a:
b9:dc:52:98:8d:7f:e5:05:d9:f4:c1:72:bb:a6:6f:
c7:bd:73:13:0d:8d:79:e7:4d:2e:6c:8a:20:b9:ee:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9B:4A:8B:C8:F9:67:3B:89:69:56:5F:D0:93:12:56:3F:85:A6:D1
X509v3 Authority Key Identifier:
keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:85:db:5f:fe:b1:28:77:e8:b2:6f:42:62:02:e9:32:85:88:
02:44:d1:d6:9d:74:b5:74:53:9f:ad:b8:6c:ea:47:6f:d8:9d:
d9:41:12:cb:2f:68:0e:c8:73:84:32:23:9f:49:3f:b3:56:cc:
90:60:43:0e:59:96:18:93:cb:1c:66:43:f1:0f:3b:8d:87:d2:
97:d3:75:21:26:92:97:ac:42:36:ef:c7:92:cf:66:93:94:45:
e1:08:17:38:f4:67:cd:31:74:c3:ba:8e:da:6f:eb:58:8c:fa:
86:2e:41:c3:24:88:54:50:40:3a:23:18:7c:e5:31:3d:5b:5c:
d9:fe:56:fd:ea:a9:7d:91:b6:a0:d0:d2:22:f2:f8:9b:41:cb:
74:f4:45:45:5e:53:c7:fa:d9:e8:fd:f5:fb:6e:d7:ee:60:d3:
1a:77:0d:ff:b1:72:65:cd:b6:44:8f:e3:5b:af:3e:b7:42:9b:
69:3e:01:39:1a:3c:75:30:87:e3:2e:c5:f5:88:20:6f:42:6c:
8b:e0:fe:81:86:8e:0c:d2:a3:98:ea:6e:f2:48:5d:9d:70:3f:
f3:9f:6a:3d:11:0c:6e:d5:d6:d7:4f:92:d0:cf:06:3a:6f:d2:
32:76:96:32:d8:ee:96:3c:26:b2:54:2e:48:c1:60:30:15:e9:
ac:3d:00:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:58 2026 by rpki-client