Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
File: SMHp2hp4jQ511Yp1FeApE37W_o4.mft (raw, json)
Hash identifier: /R6duGln1hG3x7iLOEDWjGUb+NKVLnLuWXuJKJXVZO4=
Subject key identifier: 6E:FE:30:48:54:7B:43:07:46:89:7B:C8:0B:CD:D4:42:92:FA:90:15
Authority key identifier: 48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
Certificate issuer: /CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Certificate serial: 019D382E42E57F0A94AA2682F75982FC5109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
Manifest number: CD
Signing time: Sun 29 Mar 2026 06:00:49 +0000
Manifest this update: Sun 29 Mar 2026 06:00:49 +0000
Manifest next update: Mon 30 Mar 2026 06:00:49 +0000
Files and hashes: 1: QfXrjLJUb_JZ4_SXYspmGSo1vhU.roa (hash: VbKsZvzC9FvlIfRYrSZ78JLt37iuRlrN1qMCaWZNw9I=)
2: SMHp2hp4jQ511Yp1FeApE37W_o4.crl (hash: 6pGt7CLehoGjR4pQHUD7BzResxs05FvlRONyjz0ER6I=)
3: XvbscRuPqnD44ovHvZ0yezaPks0.asa (hash: uYNvUOr60t3KNGg6ZzvTHqLgdJgE2TTaGqW1+IgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:42:e5:7f:0a:94:aa:26:82:f7:59:82:fc:51:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Validity
Not Before: Mar 29 06:00:49 2026 GMT
Not After : Mar 30 06:00:49 2026 GMT
Subject: CN=6efe3048547b430746897bc80bcdd44292fa9015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:20:a0:61:52:f1:12:ef:3a:eb:cc:4f:60:
b6:1e:cc:fe:72:9d:4d:8d:25:d7:b1:a8:af:ff:9a:
78:ad:47:ad:b7:27:4d:8e:fc:5a:07:e7:77:77:49:
b3:43:2c:e7:ab:3e:2b:50:e3:e6:67:af:c8:55:b8:
28:22:65:10:e6:7f:c7:a5:2c:bb:0d:a4:f5:dd:5e:
69:fe:58:6f:9d:51:43:10:e9:4d:06:3d:f0:85:0e:
c6:dc:12:dd:3b:2d:9f:06:44:6a:16:11:f4:4d:e9:
30:ec:9f:01:ca:69:79:71:0a:01:48:20:55:78:29:
58:0b:e8:01:28:af:a8:3d:54:54:c0:fc:77:a2:6c:
19:ff:c3:5e:9f:73:1b:f8:74:d1:62:37:6c:02:d9:
b4:d2:f1:ea:16:19:d3:c6:98:32:5d:77:80:08:8f:
fb:4a:38:68:21:0e:ec:44:66:6f:23:d7:a2:47:e6:
78:a3:cd:a0:95:06:01:55:9c:0c:8d:04:b4:bb:b7:
4f:37:c4:c0:92:39:1b:f4:66:86:13:0a:f9:27:50:
e3:96:9b:3f:1a:43:54:5f:7a:d0:05:bd:ca:4c:03:
49:a7:09:6d:d8:8f:0c:47:f0:ca:56:b4:14:ea:3c:
62:3f:db:ad:72:23:9a:77:35:86:53:92:5f:df:5a:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FE:30:48:54:7B:43:07:46:89:7B:C8:0B:CD:D4:42:92:FA:90:15
X509v3 Authority Key Identifier:
keyid:48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:e6:a6:1c:72:0a:a2:47:89:20:0b:76:d2:6c:c8:d5:c2:b7:
c5:95:9e:cf:d1:dc:42:98:ba:bd:73:ba:e9:9b:96:b3:36:aa:
40:7e:f6:1e:96:d7:eb:82:35:b6:74:60:63:a8:58:ff:8f:9f:
14:3b:bc:bb:44:09:86:64:f8:eb:ab:23:28:8f:57:90:2f:55:
59:f4:33:13:26:cb:c0:1e:ca:05:59:a6:22:14:0e:ac:97:47:
16:99:8b:cb:d1:a8:4e:c0:b1:b8:a9:31:e9:d6:3f:91:9e:4b:
b0:37:16:97:fe:1e:01:15:e2:da:e1:22:b4:02:28:2d:25:de:
94:2b:6c:9d:20:21:dd:9b:0e:82:cc:83:7d:e7:5f:9d:36:7c:
47:2e:1e:12:6a:06:ef:49:45:06:8b:f6:89:40:82:0d:13:2c:
b5:43:59:b4:77:6a:ae:82:39:e0:68:a6:d5:b2:53:75:f2:0f:
6a:a1:49:ac:6e:b2:56:49:f8:72:71:03:ba:18:fd:51:65:45:
06:78:ae:bf:61:b2:a3:90:c2:05:8f:ef:58:28:3f:29:83:cd:
ac:59:24:1b:be:e7:f4:16:dc:d3:9f:4d:ad:0a:73:8c:28:f9:
ea:c0:c5:53:09:22:47:c3:4a:8c:d2:a2:d0:ce:77:1b:8f:aa:
42:98:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:19 2026 by rpki-client