Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
File: SMHp2hp4jQ511Yp1FeApE37W_o4.mft (raw, json)
Hash identifier: 8+cJPmuT/E4FhC4iahrpjfSF7v2tXAxjc5BBVh0DFac=
Subject key identifier: EE:23:7F:5C:69:DE:CC:28:E1:BE:8F:61:A1:49:8B:82:4D:43:D4:AD
Authority key identifier: 48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
Certificate issuer: /CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Certificate serial: 019F115264E4DC3186CB4335B0AA72DAEB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
Manifest number: 01C2
Signing time: Mon 29 Jun 2026 03:00:40 +0000
Manifest this update: Mon 29 Jun 2026 03:00:40 +0000
Manifest next update: Tue 30 Jun 2026 03:00:40 +0000
Files and hashes: 1: QfXrjLJUb_JZ4_SXYspmGSo1vhU.roa (hash: VbKsZvzC9FvlIfRYrSZ78JLt37iuRlrN1qMCaWZNw9I=)
2: SMHp2hp4jQ511Yp1FeApE37W_o4.crl (hash: eFaCbWuO1KrzC6mBSj+U7WSgU2tTesk8ocD8RYrRwq0=)
3: XvbscRuPqnD44ovHvZ0yezaPks0.asa (hash: uYNvUOr60t3KNGg6ZzvTHqLgdJgE2TTaGqW1+IgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:64:e4:dc:31:86:cb:43:35:b0:aa:72:da:eb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Validity
Not Before: Jun 29 03:00:40 2026 GMT
Not After : Jun 30 03:00:40 2026 GMT
Subject: CN=ee237f5c69decc28e1be8f61a1498b824d43d4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:f8:85:2a:2e:b3:26:07:44:cd:12:15:fe:
3d:34:bd:f4:0a:e9:a9:d5:98:d2:94:36:14:8d:c2:
19:ae:d5:36:2d:6b:16:24:99:d9:1b:cc:f5:c9:6e:
e2:09:c7:35:73:02:82:2c:10:de:51:e4:0b:8a:ea:
a5:b1:be:c6:b2:2f:97:6b:16:df:e6:13:8e:72:27:
cf:25:51:96:35:a4:1a:88:51:27:84:88:5c:37:cc:
9b:cf:b6:7a:36:57:51:23:f6:44:bd:e6:53:65:4d:
77:f1:2f:bc:32:ff:65:96:52:d9:73:fa:b9:49:34:
07:13:dc:b5:4f:2d:42:e4:f3:bd:be:46:a6:b1:3f:
ae:a1:42:39:ec:e6:12:da:17:a8:54:0a:0d:77:d1:
73:9f:20:df:d8:7d:46:c3:2b:43:25:8a:04:eb:ed:
a3:95:2f:64:5a:6e:4a:ca:a4:6f:ad:15:76:a9:51:
93:55:57:4c:ad:8a:f3:e7:b6:71:50:b7:02:79:31:
5a:1f:52:27:2a:61:a8:e1:e3:6a:18:be:39:b6:08:
29:74:07:4e:1e:42:1b:43:fd:4e:fa:7e:d5:7f:aa:
11:b4:04:1e:53:a2:e9:41:d0:ac:d7:98:96:63:f5:
62:39:4d:76:87:60:61:85:78:76:e7:f7:3e:72:43:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:7F:5C:69:DE:CC:28:E1:BE:8F:61:A1:49:8B:82:4D:43:D4:AD
X509v3 Authority Key Identifier:
keyid:48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b5:6b:fe:ce:9f:06:48:1c:19:ee:6c:76:11:c7:c0:71:15:
6b:5f:8e:5e:d3:8e:f2:4d:2f:05:cd:cf:2c:ac:e2:86:f6:28:
b2:ad:e4:d0:ad:e7:87:d0:cb:2d:19:78:fe:6a:b3:cd:21:c8:
66:73:c1:c7:a1:6e:67:25:18:74:68:20:42:e9:39:1a:ca:8a:
97:a9:ea:ff:8e:2f:6e:9d:40:98:e3:2c:5e:2b:7f:1e:9e:fb:
ce:87:c1:5b:04:74:63:56:b3:81:ba:a1:78:7e:34:4c:7d:20:
e0:e5:d7:2b:be:34:90:5a:27:8a:e4:03:f4:69:e2:3e:9f:9e:
1f:78:59:bc:2e:86:24:80:44:91:57:2f:79:9b:d5:87:6c:4e:
af:2b:69:fd:4c:cb:f5:2d:58:71:ed:e6:de:ef:d1:b2:b8:c8:
4e:6d:40:9d:cc:fb:d4:9a:5e:82:c0:db:99:ef:c1:0e:55:b1:
f2:df:54:c5:1d:0f:1b:3c:70:b2:d9:2a:86:00:06:65:09:8a:
f5:fa:d0:dc:44:44:3b:bc:4a:90:12:e9:25:bd:2e:0f:11:9c:
af:f7:87:d8:6e:76:92:f0:e8:cd:51:5d:cf:16:78:7d:b5:40:
b8:37:8e:f5:03:69:2e:6a:10:79:fe:a0:0a:85:de:0b:42:5f:
fe:d3:37:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:53 2026 by rpki-client