Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier: X1VWzkejsxW2ubHAfp6iYqlsRHLGLw+ZobmpCU4XGhM=
Subject key identifier: 28:9E:63:1B:6B:57:40:E1:06:06:53:CA:D0:EA:DB:F7:72:60:87:4E
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial: 019D32634EDB8ABC1FBEA9331EFBDEAFF299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number: 1825
Signing time: Sat 28 Mar 2026 03:01:02 +0000
Manifest this update: Sat 28 Mar 2026 03:01:02 +0000
Manifest next update: Sun 29 Mar 2026 03:01:02 +0000
Files and hashes: 1: JA6DG47aKcr2L7Ska7dQW2hz0OQ.roa (hash: SZmqmdymrljO2hpbQb1uMliK1C8iABzhCOgMWLG7xTw=)
2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: 4aaLexZoke688/j5w2qJKfXYdxTsQrJ+KxXkFYG8gu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:4e:db:8a:bc:1f:be:a9:33:1e:fb:de:af:f2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Validity
Not Before: Mar 28 03:01:02 2026 GMT
Not After : Mar 29 03:01:02 2026 GMT
Subject: CN=289e631b6b5740e1060653cad0eadbf77260874e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:58:41:31:ef:45:ab:d6:17:8a:cd:17:95:
7d:0e:65:10:27:d6:81:3e:2f:90:5e:c1:af:4a:1c:
19:c1:4d:91:ce:eb:13:51:73:92:90:09:83:81:a3:
c1:cc:b7:16:f2:42:94:7d:29:0a:cb:a2:0b:9f:a8:
a0:fe:4a:68:64:86:11:08:5c:6f:4a:25:70:95:83:
ca:b9:28:1a:cd:0e:ba:20:7d:1b:14:b9:f5:e3:7d:
10:a7:08:d2:13:be:0a:c3:b4:03:49:df:91:9a:6d:
31:71:e7:22:fc:83:4c:75:12:21:37:1d:b9:be:4f:
56:a6:c9:3e:08:99:e1:31:97:e3:45:10:85:7b:06:
03:d1:9c:58:15:50:4a:bd:1b:1b:a0:c3:60:f3:4e:
ff:30:8d:20:e0:50:fe:bb:54:4a:c3:8e:a1:8e:5d:
c5:3c:64:80:43:8b:65:da:c1:42:fb:9a:5e:20:2c:
15:30:be:3f:f8:98:1d:5f:0b:f8:0d:50:ac:4b:ec:
ab:34:7a:c8:bd:0a:cc:fc:70:c8:63:13:5f:9e:56:
24:77:5f:6e:a7:65:a4:00:cf:f2:ac:49:c7:8b:a5:
30:e7:b9:d4:82:44:b5:b7:83:70:e1:ba:57:bd:89:
b3:02:b9:a7:36:f0:8b:68:08:21:f0:ac:0f:05:82:
65:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9E:63:1B:6B:57:40:E1:06:06:53:CA:D0:EA:DB:F7:72:60:87:4E
X509v3 Authority Key Identifier:
keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ed:20:54:50:6f:35:c2:8c:7a:e2:59:22:cd:73:81:aa:64:
5d:f6:37:39:9f:8f:ef:fb:28:dc:39:81:93:43:b8:e3:c9:ed:
a9:15:6d:10:ef:f7:1d:39:2a:4e:90:c4:f4:02:ba:14:77:21:
d7:4c:b0:c9:5a:fc:dc:e8:ce:c6:d5:ff:8c:79:48:98:e2:64:
b1:21:75:83:37:65:3e:6d:42:48:03:38:7a:fb:f5:6c:f7:fb:
33:9b:01:d4:3e:33:65:25:25:83:5a:ce:c8:70:4b:92:27:4d:
d5:38:8c:27:c4:f3:24:8a:a5:bb:b8:96:48:54:e4:8c:b4:2b:
4d:ad:b5:d1:6f:2c:f2:9c:d5:bf:a6:ae:9a:5c:ef:5f:e8:bb:
2f:e3:3f:74:a3:0d:59:60:52:42:fe:7f:25:47:69:d9:06:87:
e4:f6:b8:0f:ea:b8:f7:98:92:52:0d:a6:1c:95:b1:0e:48:ec:
1e:13:48:ad:07:e5:57:69:ed:28:f5:9f:fb:29:ee:e2:ea:ab:
96:16:96:52:6a:1d:9b:6a:7b:84:e3:d2:2b:cc:f2:bb:1f:bb:
6c:f1:de:ad:6b:60:6c:84:5d:6a:4c:a8:52:63:86:56:1b:99:
03:14:b0:5f:13:42:d2:68:42:38:97:02:72:ce:b7:ae:b9:2c:
71:63:48:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:49:50 2026 by rpki-client