Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
File: SMHp2hp4jQ511Yp1FeApE37W_o4.mft (raw, json)
Hash identifier: InxWyRouNkshb1x9qgwtolyJRL9NidU13udZo8oijTM=
Subject key identifier: AF:36:C6:02:FB:4C:B1:57:7E:7F:79:6A:D2:D5:80:12:B6:04:02:60
Authority key identifier: 48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
Certificate issuer: /CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Certificate serial: 01A15853BF645F12284892374E071D3F5CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
Manifest number: 02F0
Signing time: Tue 20 Oct 2026 08:00:45 +0000
Manifest this update: Tue 20 Oct 2026 08:00:45 +0000
Manifest next update: Wed 21 Oct 2026 08:00:45 +0000
Files and hashes: 1: QfXrjLJUb_JZ4_SXYspmGSo1vhU.roa (hash: VbKsZvzC9FvlIfRYrSZ78JLt37iuRlrN1qMCaWZNw9I=)
2: SMHp2hp4jQ511Yp1FeApE37W_o4.crl (hash: gu+xeHM+BzIWz6MmkN5KYk18kHOSMZwzMbRdS5DVf1o=)
3: XvbscRuPqnD44ovHvZ0yezaPks0.asa (hash: uYNvUOr60t3KNGg6ZzvTHqLgdJgE2TTaGqW1+IgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:53:bf:64:5f:12:28:48:92:37:4e:07:1d:3f:5c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Validity
Not Before: Oct 20 08:00:45 2026 GMT
Not After : Oct 21 08:00:45 2026 GMT
Subject: CN=af36c602fb4cb1577e7f796ad2d58012b6040260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:a9:87:fa:e4:73:a1:ea:af:5f:33:7f:57:
19:0f:80:a5:ab:4d:e4:fd:ae:c7:33:9b:2c:c6:1f:
d5:4a:5c:19:e2:74:5e:53:4c:f2:7a:49:66:90:aa:
b6:ac:23:47:e0:63:cd:de:b0:34:c1:9a:06:f4:e3:
55:e6:0c:6f:63:a1:11:39:d9:b6:e9:d2:bb:10:2d:
e0:09:53:dc:e8:27:56:7f:8c:3a:e3:93:6f:14:70:
8a:cc:32:45:6c:8a:3a:e1:66:17:7e:f6:5f:d9:01:
a4:70:63:b3:19:96:d0:26:47:cb:d1:df:06:72:07:
b9:7b:3f:a3:d8:d8:fe:28:88:ec:74:73:94:2b:bf:
4d:24:e5:39:4a:f3:c0:00:3b:ef:90:6b:d9:cc:2f:
42:4e:22:81:cc:9b:32:7b:1d:d8:d6:ea:37:22:49:
2d:40:2d:f1:6a:60:69:85:b3:6e:62:df:9d:55:ed:
c6:98:4a:21:b9:71:fd:77:ae:d2:24:78:2e:f7:ec:
2a:ff:d0:9d:1c:e5:d6:42:65:c8:9b:99:2d:b5:f8:
3b:c4:fe:8e:0b:bc:36:8f:7d:00:47:d2:91:16:35:
00:57:0c:a2:00:ca:da:5f:44:7e:11:42:76:ad:78:
f1:ea:b7:c2:a0:f6:94:9b:c6:cf:c4:17:1b:a9:96:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:36:C6:02:FB:4C:B1:57:7E:7F:79:6A:D2:D5:80:12:B6:04:02:60
X509v3 Authority Key Identifier:
keyid:48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4a:5d:18:92:f9:05:b3:d0:5e:57:18:e6:cb:45:cc:1b:84:
56:c5:01:e8:76:4c:b9:0a:a6:90:07:b5:4a:b2:87:0e:15:e1:
53:e3:d7:aa:be:d8:a4:eb:f8:5a:9c:43:e1:08:d4:45:a2:eb:
87:05:39:d7:7a:98:41:b1:d1:4e:29:8f:91:1b:95:50:ca:da:
17:cd:da:6b:be:46:0f:5c:c4:9d:ff:51:18:98:03:62:c8:ef:
3f:2a:c7:30:fd:d5:67:e9:30:14:14:60:73:57:fc:55:f2:75:
42:87:7e:30:2f:f5:ee:5d:0a:1b:88:39:fd:ef:14:7a:63:5a:
50:78:78:2a:39:b3:07:33:b1:68:9e:41:8d:27:1b:e7:72:4f:
80:36:c6:60:49:56:bb:ab:1d:0d:4d:a5:1b:6b:98:ca:32:5d:
af:c3:b3:c8:84:f5:b6:8d:73:0f:3c:9a:fc:0e:a4:d0:da:92:
cf:10:d5:d8:8f:e1:4c:50:a5:ca:ed:48:7f:d5:cf:df:05:cc:
a1:0f:49:0e:30:cf:d7:f7:18:a1:0d:f2:b6:98:32:40:9f:1f:
51:60:a1:d5:c4:57:0e:e0:d8:86:62:93:e6:cc:58:a1:2b:a4:
41:fd:e0:67:48:93:b0:71:f3:65:41:1e:db:af:01:25:11:e5:
5f:9a:a6:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFYU79kXxIoSJI3TgcdP1zXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YzFlOWRhMWE3ODhkMGU3NWQ1OGE3NTE1ZTAyOTEzN2Vk
NmZlOGUwHhcNMjYxMDIwMDgwMDQ1WhcNMjYxMDIxMDgwMDQ1WjAzMTEwLwYDVQQD
EyhhZjM2YzYwMmZiNGNiMTU3N2U3Zjc5NmFkMmQ1ODAxMmI2MDQwMjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApySph/rkc6Hqr18zf1cZD4Clq03k
/a7HM5ssxh/VSlwZ4nReU0zyeklmkKq2rCNH4GPN3rA0wZoG9ONV5gxvY6EROdm2
6dK7EC3gCVPc6CdWf4w645NvFHCKzDJFbIo64WYXfvZf2QGkcGOzGZbQJkfL0d8G
cge5ez+j2Nj+KIjsdHOUK79NJOU5SvPAADvvkGvZzC9CTiKBzJsyex3Y1uo3Ikkt
QC3xamBphbNuYt+dVe3GmEohuXH9d67SJHgu9+wq/9CdHOXWQmXIm5kttfg7xP6O
C7w2j30AR9KRFjUAVwyiAMraX0R+EUJ2rXjx6rfCoPaUm8bPxBcbqZaS5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK82xgL7TLFXfn95atLVgBK2BAJgMB8GA1UdIwQY
MBaAFEjB6doaeI0OddWKdRXgKRN+1v6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU01IcDJocDRqUTUxMVlwMUZlQXBFMzdXX280LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kOGU3ZjUtM2I3Zi00MTBlLWE2ZDct
ZDliNWNjMmEwOTZmLzEvU01IcDJocDRqUTUxMVlwMUZlQXBFMzdXX280Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9kOGU3ZjUtM2I3Zi00MTBlLWE2ZDctZDliNWNjMmEwOTZm
LzEvU01IcDJocDRqUTUxMVlwMUZlQXBFMzdXX280LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekpdGJL5
BbPQXlcY5stFzBuEVsUB6HZMuQqmkAe1SrKHDhXhU+PXqr7YpOv4WpxD4QjURaLr
hwU513qYQbHRTimPkRuVUMraF83aa75GD1zEnf9RGJgDYsjvPyrHMP3VZ+kwFBRg
c1f8VfJ1Qod+MC/17l0KG4g5/e8UemNaUHh4KjmzBzOxaJ5BjScb53JPgDbGYElW
u6sdDU2lG2uYyjJdr8OzyIT1to1zDzya/A6k0NqSzxDV2I/hTFClyu1If9XP3wXM
oQ9JDjDP1/cYoQ3ytpgyQJ8fUWCh1cRXDuDYhmKT5sxYoSukQf3gZ0iTsHHzZUEe
268BJRHlX5qmug==
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:00:20 2026 by rpki-client