Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
File: smbm5NXff4olZUFEdV172ZLnNTk.mft (raw, json)
Hash identifier: zs6ZzkA+m+NDC6vs5P90dVzn1kzv36VgOZrAsP9YNmk=
Subject key identifier: 26:C4:5E:DC:4F:1E:28:2E:E0:EA:05:82:E9:22:71:8D:EC:FE:DA:1B
Authority key identifier: B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
Certificate issuer: /CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Certificate serial: 019FFA2441F671E2D712FCD4FE0827969457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
Manifest number: 0D06
Signing time: Thu 13 Aug 2026 08:01:47 +0000
Manifest this update: Thu 13 Aug 2026 08:01:47 +0000
Manifest next update: Fri 14 Aug 2026 08:01:47 +0000
Files and hashes: 1: JlEL__d65JQ_tfOKiJmQEWtDYCM.roa (hash: GgRAVhQTIpXTw8lHuxPoRTh/pEuAXi31/QuDq0oYfZA=)
2: smbm5NXff4olZUFEdV172ZLnNTk.crl (hash: R4zK8fL9QjCBl/de2p1e0Td0dzWZB0UksKs8pLuiGAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 08:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:24:41:f6:71:e2:d7:12:fc:d4:fe:08:27:96:94:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Validity
Not Before: Aug 13 08:01:47 2026 GMT
Not After : Aug 14 08:01:47 2026 GMT
Subject: CN=26c45edc4f1e282ee0ea0582e922718decfeda1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:71:5b:9f:87:16:b9:15:2c:6a:2f:a8:6d:
23:bc:4c:e7:0c:3f:3f:a2:04:d5:ca:e3:2d:3a:ce:
f9:6a:4a:25:e6:23:a3:87:1a:82:32:80:8c:33:8c:
4f:d5:6f:6f:58:4b:cc:b4:88:f8:90:3a:41:7d:9e:
c4:ce:e0:f8:ae:ea:56:30:09:37:ed:f8:61:88:24:
c2:db:02:95:4c:37:37:48:51:ca:c2:24:22:7d:10:
e0:b1:f6:9c:97:9c:72:09:6c:da:56:10:1f:40:b7:
23:5d:d3:ea:78:b4:e4:71:39:6b:2e:cf:b4:82:73:
c8:e3:75:5b:4f:b5:97:70:1a:a9:76:19:b7:20:93:
2e:12:30:bc:bc:80:16:4a:c9:55:3a:35:84:8b:76:
c1:0a:06:6e:c2:76:2e:6e:f2:c5:61:ce:43:50:6e:
7a:69:d8:ff:ba:ce:32:8c:da:42:9b:fa:09:93:7a:
46:28:90:99:bb:82:8b:f6:4c:aa:82:6c:c0:96:1a:
2d:69:ec:fa:9e:c0:6d:92:ca:9b:de:87:7c:26:6e:
bb:2c:97:a7:3e:ff:43:de:42:29:47:c5:e8:4f:3c:
60:a0:97:9c:91:26:39:a3:86:a6:c9:e0:5e:0b:7e:
00:04:2e:96:3a:02:30:2d:d1:41:4b:64:ab:07:f3:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C4:5E:DC:4F:1E:28:2E:E0:EA:05:82:E9:22:71:8D:EC:FE:DA:1B
X509v3 Authority Key Identifier:
keyid:B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:51:44:90:41:dc:d5:e7:ef:78:0d:c7:6b:08:8f:69:d8:5d:
dc:c4:97:54:28:44:63:33:cf:ce:c1:7c:a5:df:40:b6:ad:ed:
b8:7f:f0:f2:3e:7b:b6:fe:b4:ff:4e:72:e3:ee:33:32:4c:1f:
13:bc:35:9c:c6:a4:b6:c3:d0:0f:8a:0a:3a:07:de:ab:3b:b3:
e1:89:f3:0e:02:99:ea:96:fd:de:b2:5b:78:4a:ee:de:6a:89:
d2:57:11:d0:27:37:e3:66:f6:87:79:2b:9e:7c:70:c6:4d:df:
a1:55:8b:97:9f:ad:0a:44:db:b1:af:1c:71:97:5a:ae:d8:c3:
26:20:80:90:6a:12:86:7b:97:94:3e:fd:53:58:d8:4b:48:67:
f3:ab:9b:0e:1a:ff:24:81:f0:a3:a9:9b:19:8e:b3:71:e9:20:
6e:a0:04:54:57:6b:19:ea:68:a0:59:ee:0d:ea:e5:d2:c4:0e:
da:8c:a4:c5:ac:fc:0d:b9:18:a0:f7:62:10:99:d8:db:03:8f:
fd:1f:3a:ee:f6:f5:c3:c9:23:9b:40:e9:36:de:49:7a:ff:7a:
8b:74:a5:da:a0:34:df:39:ac:74:d3:a9:ea:c3:4d:f0:8d:d0:
be:a2:00:54:ae:3c:e2:af:5a:c4:db:f4:f3:84:a2:b4:13:d8:
36:04:54:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:42:37 2026 by rpki-client