Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
File: smu0Mz7-nhTEgxsFghQW5cVb30I.mft (raw, json)
Hash identifier: k9wvQ/GQWeguAmw8Ry9qi7r9NYamrRpmptXfBK9P2kw=
Subject key identifier: E0:9A:6F:BE:29:3B:04:E3:CE:C1:13:86:F5:DF:7C:F7:03:31:C8:51
Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
Certificate issuer: /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Certificate serial: 01A025E9AE24457FB8D3E006183563130A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
Manifest number: 14CC
Signing time: Fri 21 Aug 2026 20:01:06 +0000
Manifest this update: Fri 21 Aug 2026 20:01:06 +0000
Manifest next update: Sat 22 Aug 2026 20:01:06 +0000
Files and hashes: 1: K3--tSHrK6jHY5tkxG0drJwKCRw.roa (hash: FEwiaAI6iVYZhO3Y0U4cLdmpsBfhF+ZTk9nAW/Qd0gc=)
2: smu0Mz7-nhTEgxsFghQW5cVb30I.crl (hash: 5L4qN2pi6mDDXA+xTjo8MWtc3cbwnu/OdxQ/aO516WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:e9:ae:24:45:7f:b8:d3:e0:06:18:35:63:13:0a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Validity
Not Before: Aug 21 20:01:06 2026 GMT
Not After : Aug 22 20:01:06 2026 GMT
Subject: CN=e09a6fbe293b04e3cec11386f5df7cf70331c851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:fc:71:93:e2:c4:2e:4c:0e:9f:24:14:30:
ce:1d:2d:51:7c:9b:ed:da:ad:c0:c8:d9:4a:a3:3d:
5b:d8:03:10:4f:a1:ee:67:9e:bc:90:c2:cb:f1:a6:
fe:02:e0:f7:cb:4b:af:0d:00:2c:96:4b:ec:98:ed:
22:32:49:59:49:0c:5c:34:65:f1:48:1b:91:ef:bb:
95:18:c5:8e:2a:58:8f:d3:ee:80:ed:1d:14:10:d2:
0e:e3:a4:e0:bd:85:6b:90:7c:aa:b8:61:d5:02:5f:
16:d5:34:25:05:ab:51:12:a9:bc:f7:b9:99:75:21:
1e:a6:cc:b7:4a:6a:50:b8:de:5e:42:1f:d8:e6:31:
d9:0a:96:61:99:c9:e6:b3:b8:78:24:97:76:4b:5d:
65:d4:91:32:0f:ec:34:bd:e9:4b:90:2c:1a:d8:ee:
c7:5a:17:9c:ff:f9:be:c6:6c:39:83:6f:ca:5b:b0:
a8:9c:74:6c:73:f6:af:23:df:55:9f:9f:21:cc:4c:
1c:01:35:49:4e:21:30:7e:df:d0:2a:44:e0:59:45:
de:15:19:8d:8e:0c:2a:ca:c1:03:4b:ab:71:8d:96:
eb:82:0e:5f:17:4d:e9:d5:48:77:af:b8:a3:8f:7b:
a2:48:99:8c:ad:40:98:35:71:9a:3a:40:42:10:3b:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9A:6F:BE:29:3B:04:E3:CE:C1:13:86:F5:DF:7C:F7:03:31:C8:51
X509v3 Authority Key Identifier:
keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:69:a4:3d:55:de:ff:f3:6f:6e:3d:a7:17:6f:bd:93:a6:ed:
8a:52:16:b9:68:fd:73:3d:57:df:6c:25:d9:be:94:ee:3a:8e:
24:2b:c4:03:4c:9b:92:a1:85:6d:bc:a5:16:f6:ff:28:ad:48:
ac:59:7d:54:9f:3b:e9:a2:99:07:dd:ba:93:25:18:6b:ea:9c:
c5:28:3a:69:2b:fa:86:36:6a:9d:77:03:4c:f9:f5:66:ee:23:
44:00:72:8d:d1:28:2f:e6:be:97:1b:56:ef:0d:7f:5d:c6:24:
a5:4b:c7:11:0e:0f:5d:99:52:cd:a6:96:06:e1:8d:0c:21:4e:
f8:6d:e0:f5:88:d3:2d:8d:d1:89:6e:1f:71:02:6b:61:d2:04:
38:3f:8f:b8:20:5c:d6:9c:c0:2d:b2:1d:8a:20:e1:b2:c5:bc:
18:bc:5f:96:f9:7b:7b:84:80:00:26:a1:9c:f6:b2:07:2c:1d:
7a:9c:83:82:19:99:40:61:83:2a:d8:6a:fb:ec:d4:59:a6:78:
f6:c8:0f:36:4a:f1:75:60:bd:74:ca:53:22:6f:05:81:ce:f7:
a8:b4:15:3f:ce:58:8b:d4:b7:a6:56:ef:a8:4a:07:ab:7e:6e:
60:de:28:ec:d8:3a:f1:ca:26:20:73:e4:7b:7c:32:40:ca:99:
17:3d:da:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:11:26 2026 by rpki-client