Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json)
Hash identifier: JE/rrdmvfqZGjRO/MtaGDfqyVc4cWXtnMCNtS0Eb85A=
Subject key identifier: 1F:27:F7:96:14:22:9F:03:24:97:5B:63:96:D0:63:EF:3A:40:8D:50
Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Certificate serial: 019D3940AA8A86F2DAA9ED24F0B1501F492F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:32 +0000
Manifest this update: Sun 29 Mar 2026 11:00:32 +0000
Manifest next update: Mon 30 Mar 2026 11:00:32 +0000
Files and hashes: 1: lep9djwdRRu1s5OqW7QhYt3e1T4.roa (hash: 678VmtvJF0332iEsfIN5ZpinwDwIbKnUYiVrKvGUM/Q=)
2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: Igg1WfhDCvVzIjMUaw8FGiUV7Z2hB2Y/QmpIk9wYGTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:aa:8a:86:f2:da:a9:ed:24:f0:b1:50:1f:49:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Validity
Not Before: Mar 29 11:00:32 2026 GMT
Not After : Mar 30 11:00:32 2026 GMT
Subject: CN=1f27f79614229f0324975b6396d063ef3a408d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:8d:4c:44:65:4b:0f:34:e6:6a:b5:71:93:
82:bc:65:43:9e:76:57:4d:1d:94:ed:ee:37:de:1b:
09:ff:11:41:11:2f:6f:11:30:d3:75:3e:65:5a:23:
c5:6d:cc:72:10:d4:5b:f4:d0:9b:bb:f4:1d:d0:7b:
3e:38:a1:41:e6:06:c3:84:b6:a5:84:3f:ce:bd:83:
d9:6b:f1:0f:d4:4d:07:44:89:03:df:8d:9b:9a:85:
12:67:c0:53:ed:99:59:d8:bd:2f:4b:ad:23:77:b8:
70:3b:9c:7c:17:42:50:88:76:62:55:c0:a0:49:eb:
27:3b:bb:4a:8a:97:5c:6b:6c:c9:73:e2:07:78:b0:
64:fa:9d:44:5d:1b:81:98:e3:e8:a9:e7:52:43:8f:
aa:cb:24:6f:87:d6:3a:12:44:f4:fb:7e:c5:d2:83:
48:80:03:3e:3b:81:de:72:bc:98:ba:fa:c5:57:d9:
4d:e4:72:f3:ce:8f:58:40:c8:7e:b8:68:9f:bd:1f:
7c:7d:20:92:28:26:28:d9:34:f0:34:65:4b:53:8d:
3b:10:a2:a5:a0:96:01:34:9f:fe:1e:4f:60:0b:37:
89:fe:a3:45:f2:14:ff:52:11:f9:68:8d:d0:03:98:
68:bd:1c:61:70:27:ad:d8:b4:b1:75:0c:49:b8:a2:
85:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:27:F7:96:14:22:9F:03:24:97:5B:63:96:D0:63:EF:3A:40:8D:50
X509v3 Authority Key Identifier:
keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5b:f3:33:f1:63:91:4f:de:80:d3:ae:0d:3a:a2:e4:2a:29:
0b:16:89:6d:0d:24:f3:8e:2e:ea:a2:0f:cb:51:65:46:22:3f:
7b:2e:e9:2b:6d:65:ac:79:e4:ba:0c:51:ed:51:db:95:13:c7:
f1:b9:79:02:67:2b:05:8e:10:ff:9c:2b:6c:bf:47:ad:46:4d:
f7:a3:ce:6e:8b:3e:dd:cf:2a:e8:77:b8:fe:13:b6:90:51:ae:
77:5d:fc:aa:c4:fc:03:55:c3:1f:ad:0d:12:7f:78:e2:16:bc:
1f:ec:18:50:f7:68:0b:52:33:48:ed:48:11:4f:9f:b7:87:cf:
c3:41:ef:a9:ff:e8:12:84:e2:de:f9:cb:4e:3d:11:cc:30:15:
0a:8c:c4:84:45:4b:2a:40:e6:4d:56:68:86:b4:1b:60:5d:1b:
7d:21:00:1f:b7:de:cd:76:49:fa:eb:f5:a0:e3:ad:e9:41:49:
cf:08:47:6d:21:b8:3e:67:f6:ef:82:f9:17:22:40:ad:66:f1:
4a:83:8d:d3:6b:5e:9d:79:d0:17:d4:38:6b:8e:0f:ed:4d:69:
31:6f:79:e1:83:c9:44:d9:f6:16:15:e6:89:92:a8:99:08:c0:
24:ee:50:7e:c7:8e:b0:6f:57:6a:66:e8:57:70:5e:c4:64:fe:
01:41:13:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:13 2026 by rpki-client