Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
File: sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json)
Hash identifier: DOSlZACD08zPG+ucGJ/HItTuMBUq8apVN6AblUWfQxk=
Subject key identifier: 79:7F:7C:BB:26:7A:AC:AB:3A:EF:60:E0:16:AF:EA:D9:9A:65:10:F7
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Certificate issuer: /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial: 019D371B9B27F16BB88458BDADD7CC83B97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
Manifest number: 0F20
Signing time: Sun 29 Mar 2026 01:00:48 +0000
Manifest this update: Sun 29 Mar 2026 01:00:48 +0000
Manifest next update: Mon 30 Mar 2026 01:00:48 +0000
Files and hashes: 1: CFu9oBncqnpNmNRX4mjTnLjrg88.roa (hash: B2878+aNIHIe1LVscKgla2xHXSTcQOkvuEd8azDazoE=)
2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: Jdi8fFktXrQcBeqPmn0eDgsob4Im2PVRs6ctYGKWi+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:9b:27:f1:6b:b8:84:58:bd:ad:d7:cc:83:b9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Validity
Not Before: Mar 29 01:00:48 2026 GMT
Not After : Mar 30 01:00:48 2026 GMT
Subject: CN=797f7cbb267aacab3aef60e016afead99a6510f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:12:10:79:9b:12:3b:46:6e:29:6a:0b:2b:
17:c8:fa:cb:c8:0a:68:da:06:e3:9c:44:cf:93:70:
01:43:21:f0:b3:d8:fa:3c:b0:34:be:9d:eb:5f:94:
ab:3b:c9:76:22:4d:49:98:f4:71:e5:af:dd:84:ec:
78:b9:40:bb:67:55:1f:73:f3:41:d6:90:62:67:3d:
bf:35:f8:1e:cf:e8:df:d7:8f:20:79:42:9f:a3:9b:
60:16:92:b8:81:53:f1:3a:be:f5:c0:e0:f3:01:49:
65:f6:dd:e0:39:ad:c4:12:3d:3a:2c:c4:d5:08:f9:
25:fb:3d:3d:a7:bb:15:62:81:cb:03:35:bf:df:c6:
80:0e:e2:5c:18:39:1b:b3:ac:e4:12:c0:c0:04:78:
66:88:d0:77:a4:d9:6f:a0:61:d4:24:d3:e2:5c:d5:
56:9f:db:8e:2c:83:f3:bf:b3:ac:3f:2b:ad:83:83:
62:9f:53:49:4c:37:1f:a1:d9:a0:c6:1f:02:fc:5a:
f5:58:5c:4a:72:13:84:a2:95:f6:07:57:d1:c6:9f:
90:1e:37:18:33:a3:f1:61:ad:a7:35:32:0d:af:8b:
f6:a1:a8:88:cf:7b:1d:87:59:4e:c1:6d:62:10:32:
8b:17:b8:7e:f6:38:d4:2f:fe:aa:17:09:00:91:96:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7F:7C:BB:26:7A:AC:AB:3A:EF:60:E0:16:AF:EA:D9:9A:65:10:F7
X509v3 Authority Key Identifier:
keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7f:d1:48:67:e3:09:0a:18:58:1b:e7:92:eb:02:34:65:c7:
e1:a9:08:8d:03:af:ef:87:32:07:19:56:33:27:eb:05:15:cb:
b3:3f:1d:f7:43:0c:fa:8b:f9:cf:86:2b:cb:87:14:aa:c0:24:
fe:3b:c9:ec:b7:be:52:06:76:98:0b:d8:e4:76:54:c9:41:77:
b2:4c:55:01:bc:76:54:fb:91:6d:3e:3e:ee:05:be:2c:ff:6e:
5d:9a:7d:ff:00:f6:8b:f4:8b:d7:a9:58:07:8b:f8:ff:94:08:
d7:81:34:07:c6:5d:b3:f7:96:dd:49:28:2a:3f:ab:4e:bf:ae:
5d:f9:f8:16:79:89:e9:b1:17:ea:8b:8f:4f:9e:ae:7d:5d:26:
26:20:d1:5b:3d:a0:7c:f8:5b:20:07:fb:68:7c:d2:e9:c0:91:
fd:dc:0f:2b:46:53:ff:03:1c:2e:f9:fe:2b:e0:ac:2b:e7:ba:
7c:b0:78:be:08:a2:fc:7f:cd:80:38:d9:ee:bb:32:59:fc:43:
79:39:e3:c1:cf:1f:97:40:7c:93:ef:d9:52:c3:27:43:ba:bb:
f6:e6:8d:b5:24:b6:f3:67:38:df:43:46:33:4f:ff:93:0e:f7:
e5:05:ff:5a:d5:c3:c1:1c:77:88:e0:2c:f1:a6:07:10:82:c3:
65:fc:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:05 2026 by rpki-client