Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: MVzdhS3mXDX60TPw9dXwm04W9lWjLCOT/wE2NaBNkxM=
Subject key identifier: 86:A8:46:F6:58:B5:44:8B:D1:75:D6:87:B3:E6:85:F2:1B:DA:5C:81
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 01A001A5B878A161B5A1F5CF8761CB39CBD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 1A14
Signing time: Fri 14 Aug 2026 19:00:32 +0000
Manifest this update: Fri 14 Aug 2026 19:00:32 +0000
Manifest next update: Sat 15 Aug 2026 19:00:32 +0000
Files and hashes: 1: JIuy1yADZ-WZO4oAxQqNA1Wq5AE.roa (hash: Z5LJLNpxBzdsKbIiGUAut0ZaWggo2BNQFiKt/gU6WAI=)
2: W03Nbk16lpsFFFHwZEVyGb3GdCk.roa (hash: 2uorc6ih53DwXRdYsCumZcTs0fUh5iNGE9WcBcj9AO0=)
3: km0TI5gSsaXM0ksLgopKp3QzU78.roa (hash: duTA4ngL0m0KQkmYbp4PQQqGU8slrpfiT+Ukyerp3dc=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: UiTuYDGQxNKGe6rNV9MiF3DvhiiAwUbB5/dK1xZBeQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:b8:78:a1:61:b5:a1:f5:cf:87:61:cb:39:cb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Aug 14 19:00:32 2026 GMT
Not After : Aug 15 19:00:32 2026 GMT
Subject: CN=86a846f658b5448bd175d687b3e685f21bda5c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:ed:51:a6:49:92:22:13:c7:a0:a7:ff:2b:
3e:e8:3b:f9:47:f8:bd:0f:30:ec:dd:d6:51:80:30:
a4:b1:a7:e4:6e:81:13:48:18:c8:82:a9:0d:9a:f7:
01:52:30:ee:15:bb:ed:3b:9c:9a:89:3f:ab:b9:46:
eb:2d:26:ab:9e:24:62:5a:8d:e3:e7:4f:17:7c:01:
ef:87:13:93:6d:73:67:47:79:5f:a9:5b:f6:18:97:
0c:81:d9:e6:3b:d4:9f:82:9d:b8:24:85:7c:fd:35:
a8:14:8d:9d:34:26:9c:65:20:74:24:a0:b3:fa:44:
45:58:2d:62:23:08:bf:be:0a:71:66:24:e8:c8:70:
36:d5:b6:9c:38:ee:dd:8f:0c:97:74:85:a6:cd:10:
86:76:e2:05:6a:11:93:d7:17:0c:86:d1:be:de:66:
9c:90:e3:c0:30:10:4c:5f:2c:ea:1f:ee:0f:90:96:
83:fe:af:52:a2:2b:37:5f:5b:8d:d2:53:23:02:fc:
f7:17:48:b3:2b:7c:40:e9:a1:fe:cd:7c:ca:cc:ac:
30:e7:f5:0c:b7:5d:93:97:b8:da:80:81:7c:15:e2:
7f:bb:4b:d6:b5:13:f3:d4:5a:31:f3:99:33:99:47:
f8:31:20:6f:1a:c4:7c:7b:fb:df:4b:d2:20:22:31:
ca:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A8:46:F6:58:B5:44:8B:D1:75:D6:87:B3:E6:85:F2:1B:DA:5C:81
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c9:ae:8a:0e:88:f4:a3:e2:fd:fb:38:60:c5:0b:e0:19:01:
c2:7f:4a:36:8a:23:7d:c1:44:f8:1d:f4:83:4d:10:04:85:ed:
6b:a6:37:3a:64:a0:16:88:fe:74:3a:56:55:e1:65:88:43:c5:
8d:74:bf:3f:e4:7d:f4:ea:08:ad:cd:66:d9:58:71:f9:53:ed:
6f:da:19:27:88:e3:10:25:7b:f8:01:92:2a:85:32:6d:91:0c:
c9:12:d7:d9:8a:38:2e:75:79:1e:81:0a:2b:b3:47:5e:09:ae:
0e:f7:33:94:86:88:1c:82:04:e1:7f:b8:b4:ca:f1:44:4b:79:
74:02:e2:57:75:5a:ea:b5:8e:2e:d2:1d:e1:94:bb:13:24:74:
48:7d:81:76:9b:16:de:c1:32:23:b8:c0:43:0e:ee:80:d1:3f:
c5:b3:dd:63:9f:dd:5f:d8:7c:de:87:1c:63:31:c2:ea:1f:a9:
94:83:46:f3:b5:6e:a8:b0:4b:19:02:3d:f8:5e:16:fc:df:df:
21:5c:52:69:04:8e:df:55:8b:68:e9:78:9c:d7:19:ac:4b:a8:
dc:c2:97:f5:06:ab:82:34:4d:a2:d4:5f:9f:9c:92:4e:12:fb:
2d:c9:ee:f4:e7:de:9f:80:5f:6d:57:6a:62:4e:14:2e:df:f3:
97:c4:7c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:16:51 2026 by rpki-client