Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier: /DoDSAfAMAOwvXOxBRS2S9x6S94WaJsdPRAFXre+Zmc=
Subject key identifier: 9A:7E:6D:68:5B:03:4E:56:8A:74:E0:13:5D:4F:80:84:00:3B:94:1B
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial: 019FFAFFB0690035B9DC3A7A9636D384CDB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number: 1996
Signing time: Thu 13 Aug 2026 12:01:28 +0000
Manifest this update: Thu 13 Aug 2026 12:01:28 +0000
Manifest next update: Fri 14 Aug 2026 12:01:28 +0000
Files and hashes: 1: JA6DG47aKcr2L7Ska7dQW2hz0OQ.roa (hash: SZmqmdymrljO2hpbQb1uMliK1C8iABzhCOgMWLG7xTw=)
2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: v5JEadC0lUGnuarYb1c1K21qwZGH5LpD7xsP/1M1oU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:ff:b0:69:00:35:b9:dc:3a:7a:96:36:d3:84:cd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Validity
Not Before: Aug 13 12:01:28 2026 GMT
Not After : Aug 14 12:01:28 2026 GMT
Subject: CN=9a7e6d685b034e568a74e0135d4f8084003b941b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3e:86:e9:e1:b1:58:6a:9f:be:13:23:0f:9a:
dd:e9:c7:cb:62:b7:b5:95:71:d2:9a:c0:a4:5b:b4:
17:72:87:4a:ec:1c:98:66:25:7d:72:01:1b:56:6a:
e6:ae:5e:d8:56:e5:22:fa:b5:a3:08:94:af:ac:eb:
7f:5b:90:58:db:ab:b4:c7:0b:4b:a1:39:c9:5f:02:
a5:a4:c4:71:56:dc:7b:28:36:6c:76:4b:da:1f:b3:
9b:37:4d:83:3a:f6:49:85:f8:78:07:47:bd:06:a6:
f1:b1:a0:de:eb:6e:a7:a1:f7:2b:8a:56:b5:62:99:
a4:a5:37:ba:88:4f:27:b3:92:7f:b0:6f:df:f0:1e:
40:45:05:92:f0:14:42:b3:fa:09:f8:7e:67:26:2b:
f9:96:18:b5:82:74:3d:7d:af:22:18:a5:bf:94:31:
d8:89:94:e8:a1:a5:43:28:fa:b5:07:bb:90:98:96:
0a:ba:45:1b:82:43:58:18:f8:d2:69:30:4b:e0:84:
44:df:49:7d:e1:09:c2:c0:7d:30:75:8f:3c:2e:22:
27:7c:44:e3:fa:07:22:50:66:75:b7:bd:59:02:64:
bb:04:66:68:13:4f:d6:b9:74:7f:62:63:89:e0:1e:
19:11:f3:89:b4:6c:06:83:9f:17:7d:d2:ca:7c:f5:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7E:6D:68:5B:03:4E:56:8A:74:E0:13:5D:4F:80:84:00:3B:94:1B
X509v3 Authority Key Identifier:
keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0f:7a:14:9f:f8:67:8a:7d:aa:43:59:fa:fd:39:79:96:4f:
3e:e8:a2:96:26:57:f6:08:60:ad:a1:e9:66:9c:64:f9:2d:f7:
35:e5:ff:26:7d:51:f1:bc:dc:f0:5a:42:6b:4b:8a:c7:36:ce:
9a:b5:b8:5d:d3:f9:6f:b9:92:0a:60:2f:38:27:3f:40:bc:1c:
1b:89:66:b8:61:3b:12:38:19:d3:4e:a2:46:65:84:22:a1:ef:
1f:17:7e:e3:2a:3a:49:d8:09:78:3b:0c:e8:9c:c0:72:db:c3:
e1:2f:48:9d:c5:41:f1:f6:d3:8d:56:f9:f8:8e:c4:d3:00:b9:
50:16:f8:3a:4f:7e:10:fa:99:17:1f:e4:51:b4:61:fd:ca:82:
9f:fc:11:fd:3c:21:a2:04:10:2c:cc:a8:1c:88:3e:b8:3b:09:
d0:4b:ef:74:4a:8c:f9:2b:e8:4f:a8:84:0b:29:28:34:a0:d0:
4a:98:64:8c:d3:c0:83:0c:00:15:b7:0b:53:1c:16:1c:2f:10:
5f:b7:ab:7d:be:08:83:0f:72:8d:61:fc:dc:28:eb:4a:62:30:
de:b3:18:24:08:f8:4b:bf:d8:fd:3e:71:ad:4e:42:55:7f:e8:
ac:0f:1a:7d:d1:c8:91:cd:da:17:21:ad:a5:3d:7b:a2:fe:46:
a4:ae:50:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 20:56:49 2026 by rpki-client