Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
File: SMHp2hp4jQ511Yp1FeApE37W_o4.mft (raw, json)
Hash identifier: 8+ZyJOeirlZnvWijRurThxA2VaHzsnOlOpxghbP/Vww=
Subject key identifier: 91:7C:43:D3:A4:01:21:D2:0D:F9:A5:94:A6:27:60:3C:66:C4:2C:90
Authority key identifier: 48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
Certificate issuer: /CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Certificate serial: 01A03E5F98B7F082CB8470E5BDABD80F6C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
Manifest number: 025E
Signing time: Wed 26 Aug 2026 14:00:47 +0000
Manifest this update: Wed 26 Aug 2026 14:00:47 +0000
Manifest next update: Thu 27 Aug 2026 14:00:47 +0000
Files and hashes: 1: QfXrjLJUb_JZ4_SXYspmGSo1vhU.roa (hash: VbKsZvzC9FvlIfRYrSZ78JLt37iuRlrN1qMCaWZNw9I=)
2: SMHp2hp4jQ511Yp1FeApE37W_o4.crl (hash: 9r0rcyEdaCFdqwoe9G0f6PJ2gYW6yLMmGCZdORJtUTo=)
3: XvbscRuPqnD44ovHvZ0yezaPks0.asa (hash: uYNvUOr60t3KNGg6ZzvTHqLgdJgE2TTaGqW1+IgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:98:b7:f0:82:cb:84:70:e5:bd:ab:d8:0f:6c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Validity
Not Before: Aug 26 14:00:47 2026 GMT
Not After : Aug 27 14:00:47 2026 GMT
Subject: CN=917c43d3a40121d20df9a594a627603c66c42c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:68:b1:ea:75:1a:26:df:88:2a:54:cd:84:
e9:79:c4:d2:9e:24:ce:6b:9a:98:15:4d:e4:4d:0e:
40:46:c6:7a:f5:f5:1f:62:a2:81:df:b3:fb:a5:92:
0c:2b:d8:08:a8:75:50:d7:16:07:8f:04:a0:52:76:
b1:ea:72:ba:8e:bf:0f:91:7d:ad:64:25:11:a2:5a:
7c:77:4a:23:75:80:fc:5b:08:cf:44:bd:50:ea:05:
62:f0:aa:a2:ad:f4:52:e9:00:ed:01:19:2a:7f:ce:
37:f7:7b:13:39:07:39:05:90:7c:88:96:3b:03:d9:
84:3f:3b:86:bd:da:21:38:b5:76:58:07:54:d5:78:
91:3a:f1:27:b6:f0:e2:c7:6b:4f:f8:b9:da:9b:bc:
60:f7:04:10:da:7c:f3:42:d6:cb:86:a7:73:64:f8:
37:97:7b:43:5c:74:a5:47:df:1f:c2:3a:ef:e4:15:
7c:4c:ec:9b:81:8e:24:1e:65:c4:c4:ef:2b:a2:84:
21:73:36:30:0a:c7:66:dd:f7:e9:83:78:97:b8:42:
cf:76:c5:86:94:04:4d:af:9c:0d:16:73:5d:02:f3:
36:e4:81:52:cb:9b:88:34:25:33:73:90:0e:90:f0:
4f:18:bf:06:d9:f1:08:5a:12:aa:10:49:f4:83:b0:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7C:43:D3:A4:01:21:D2:0D:F9:A5:94:A6:27:60:3C:66:C4:2C:90
X509v3 Authority Key Identifier:
keyid:48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:93:7a:36:15:ab:78:29:26:44:fa:21:19:e0:b1:41:25:7b:
af:38:80:48:bd:88:d5:47:2a:4c:a4:59:fb:f0:4f:0d:08:85:
bc:30:5f:55:f3:05:3d:da:28:6d:ec:9d:e7:9a:2e:90:a1:51:
0e:57:93:21:2e:7b:41:5c:72:bb:66:c8:f5:57:fe:57:2e:57:
c6:44:b9:64:c9:54:53:a0:5c:1c:f0:77:35:c5:3f:70:e9:5c:
a7:28:c3:f2:d0:4f:24:ab:62:7e:fe:ea:66:1f:32:8e:1b:75:
37:91:c4:3b:5a:ae:44:34:a4:13:db:e6:75:22:d9:06:46:b7:
00:84:3b:9e:d8:3b:38:d3:db:56:10:4e:be:c0:b5:ae:fc:c3:
25:31:65:7d:07:fd:e5:83:8f:f1:0d:63:40:5e:98:e7:5e:16:
fe:f2:8f:23:a0:f1:2e:bb:e5:20:f6:bd:9f:ec:af:48:74:a1:
72:c8:6c:4c:bd:b2:78:10:24:85:7f:a5:0d:08:d7:b4:5e:92:
0a:d3:4f:55:3b:92:fd:d4:5b:94:4b:d7:8d:02:3d:94:6f:5e:
66:73:90:bb:3e:6d:cd:75:4a:fb:68:4c:06:3f:90:d4:4c:09:
59:0b:51:d3:f6:69:47:df:63:c8:6d:c0:2f:ba:20:fb:22:c2:
c4:2b:76:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:19:00 2026 by rpki-client