Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier: bRuUfzxPE7pVlohrLqhtFyWYT6fCCZE+QvUOEu0fBYk=
Subject key identifier: E7:0F:2B:26:53:23:53:67:EE:80:2B:32:DB:CC:73:D6:36:C8:4C:B6
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial: 019F1340EB2AEC4D42D2A235289256AAEC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number: 191E
Signing time: Mon 29 Jun 2026 12:00:49 +0000
Manifest this update: Mon 29 Jun 2026 12:00:49 +0000
Manifest next update: Tue 30 Jun 2026 12:00:49 +0000
Files and hashes: 1: JA6DG47aKcr2L7Ska7dQW2hz0OQ.roa (hash: SZmqmdymrljO2hpbQb1uMliK1C8iABzhCOgMWLG7xTw=)
2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: lCJvD1sJLc1E3wOIx1S2HiDNNJkb58IGMxNMgb2BDB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:40:eb:2a:ec:4d:42:d2:a2:35:28:92:56:aa:ec:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Validity
Not Before: Jun 29 12:00:49 2026 GMT
Not After : Jun 30 12:00:49 2026 GMT
Subject: CN=e70f2b2653235367ee802b32dbcc73d636c84cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:b4:10:4d:38:aa:4a:f7:c0:77:ef:31:69:
30:40:1c:27:97:55:6a:8a:1e:81:a6:e6:27:46:9b:
62:e7:d1:f9:18:1f:c6:4f:ca:d6:30:d4:7d:4d:48:
5b:70:f5:09:a1:c8:ec:61:25:47:55:ac:23:1d:e0:
de:d9:4a:08:59:69:91:88:81:7f:59:fd:f6:c9:14:
5c:27:8b:04:0d:e8:ed:1c:87:e1:66:c3:f9:86:56:
9e:63:52:a3:b5:3e:48:cb:66:23:c6:f7:2c:22:f4:
09:89:df:25:68:39:fe:48:aa:eb:56:5a:55:a1:47:
b7:7f:7e:ba:39:34:55:94:76:e7:e2:1e:a1:de:28:
76:c9:00:01:33:f0:1c:50:8c:6d:11:1f:16:8b:a6:
57:51:ff:26:9a:b1:22:ad:90:ae:56:41:c7:56:af:
f5:5c:1f:34:3f:40:5e:99:3e:74:75:85:6e:f3:bf:
f5:ad:24:c2:46:a3:76:4e:91:39:98:7e:04:5d:49:
bf:f8:f0:f7:ad:2e:de:88:c5:76:ed:2b:c5:6d:b0:
71:17:e2:2e:af:4d:e4:06:b3:fe:64:9a:71:a0:d8:
c0:ed:6c:12:33:21:43:1f:83:21:c3:6b:d2:d9:ec:
df:63:2b:2e:c7:f6:99:e1:a9:05:fe:a3:a1:68:c1:
90:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0F:2B:26:53:23:53:67:EE:80:2B:32:DB:CC:73:D6:36:C8:4C:B6
X509v3 Authority Key Identifier:
keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:81:ca:6b:91:cf:6e:d3:4f:01:c8:bb:1b:d4:b3:b5:42:5c:
1a:f6:8b:ba:86:74:40:76:fd:ad:d1:3e:eb:fe:ec:34:a2:fc:
4b:45:74:4f:f2:84:c6:7b:61:0a:ba:0a:fc:4a:d0:38:63:15:
fc:58:68:22:c8:33:60:b1:57:d1:87:7a:6b:02:f8:e5:a0:d3:
78:71:07:c6:d4:bd:93:10:97:09:18:01:45:53:ba:d1:2a:a7:
52:ff:bf:b7:27:00:32:52:5c:03:83:f1:4e:85:76:95:da:83:
b4:6e:0a:5d:8c:ae:af:36:fa:58:d3:b0:88:17:b3:1b:10:91:
3e:65:de:95:de:37:0a:04:4b:e9:e3:5d:3c:ca:80:b3:00:cb:
07:5d:4a:49:0b:5a:b1:54:bf:5d:db:e0:cc:d3:8d:90:0d:2d:
87:ac:60:de:72:7b:c6:9d:76:c1:6d:a6:7a:f3:4f:13:de:ee:
82:92:60:a4:d1:19:fc:9e:14:72:95:40:c0:e5:ad:41:b3:c5:
2e:05:da:d8:8f:90:ee:3c:0f:cb:f4:91:a5:c3:69:b5:9e:bd:
f6:b3:43:93:a8:66:db:2e:d2:c7:02:b0:c6:d2:fc:ef:33:2f:
d4:92:0c:51:c9:e6:df:17:13:16:16:80:b0:13:53:af:ab:40:
1e:0d:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:57:47 2026 by rpki-client