Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: AloKtkGDjK7yeRiaFXa95StV0ztBOBkFyrwM7tIKBM0=
Subject key identifier: 4A:6C:20:EA:B6:91:F9:6E:7F:6F:16:4E:67:C9:E1:53:07:C3:5F:86
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 01A1558A6135AEC95CBB6D58D19EE3686D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 1AC4
Signing time: Mon 19 Oct 2026 19:01:34 +0000
Manifest this update: Mon 19 Oct 2026 19:01:34 +0000
Manifest next update: Tue 20 Oct 2026 19:01:34 +0000
Files and hashes: 1: JIuy1yADZ-WZO4oAxQqNA1Wq5AE.roa (hash: Z5LJLNpxBzdsKbIiGUAut0ZaWggo2BNQFiKt/gU6WAI=)
2: W03Nbk16lpsFFFHwZEVyGb3GdCk.roa (hash: 2uorc6ih53DwXRdYsCumZcTs0fUh5iNGE9WcBcj9AO0=)
3: km0TI5gSsaXM0ksLgopKp3QzU78.roa (hash: duTA4ngL0m0KQkmYbp4PQQqGU8slrpfiT+Ukyerp3dc=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: b4fuaszJwtvjPn41r3LniG/Pg7LAx3vYyRU8ISiP3Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:8a:61:35:ae:c9:5c:bb:6d:58:d1:9e:e3:68:6d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Oct 19 19:01:34 2026 GMT
Not After : Oct 20 19:01:34 2026 GMT
Subject: CN=4a6c20eab691f96e7f6f164e67c9e15307c35f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:53:f3:9f:68:99:ea:1e:5f:a1:53:cb:07:
80:a5:5b:8d:76:a8:f5:dd:72:70:4a:91:f3:64:45:
e4:0a:1f:23:59:4a:97:09:50:4e:21:eb:3c:0d:3f:
73:26:93:9b:33:f1:31:35:e9:31:54:e7:19:eb:b5:
7a:c9:ea:92:c4:0d:fb:c1:a6:bb:cf:25:86:2f:d8:
43:98:6b:8c:d5:5e:8a:8b:1a:01:ed:0f:d4:be:18:
4d:e5:ae:a9:b4:4b:43:2c:a9:28:22:b3:91:8b:31:
00:af:a6:73:50:3d:d9:68:92:2f:d0:23:12:e9:43:
86:b2:2b:aa:98:6f:6c:17:0a:9e:ee:c4:d2:80:f4:
ee:5e:cb:f6:00:d8:08:87:ef:aa:b0:6d:75:66:8c:
12:fd:cb:7f:73:c9:18:a9:0b:40:c2:b6:66:1e:9b:
38:ee:76:3a:0f:7f:d0:44:d8:06:60:13:81:85:78:
be:71:d1:a3:9e:8e:54:6c:3a:11:66:1b:25:a8:ba:
8c:95:77:9d:cc:ac:28:e3:44:38:53:69:0d:7d:13:
73:34:0f:be:44:a6:8e:f7:54:d7:f7:94:2d:49:5d:
21:09:c7:32:f9:a5:b8:c2:13:47:ca:c4:4e:0c:e6:
84:1f:c9:69:c9:75:fc:84:ab:eb:33:1e:90:c9:60:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6C:20:EA:B6:91:F9:6E:7F:6F:16:4E:67:C9:E1:53:07:C3:5F:86
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9b:8c:d5:8f:81:60:50:22:05:c6:eb:75:2d:46:6c:9f:9f:
de:79:a2:2b:7c:58:25:c4:55:72:71:82:c0:63:b3:d3:e8:75:
ff:d2:a7:9f:6f:33:7e:d6:af:b4:c9:1c:68:c7:54:81:c8:2c:
a5:0a:4d:7e:b7:81:6f:4c:99:55:fd:4a:49:57:c4:4b:dc:3d:
ef:e8:20:4c:d6:28:af:72:d3:50:3c:76:26:32:4b:0f:5a:c3:
c5:b3:06:bb:86:93:76:3c:46:3a:1d:04:28:b5:64:95:df:44:
53:48:8a:3f:d4:9e:60:ca:74:39:78:0d:3d:6e:83:f5:57:0f:
3a:2a:15:8a:bf:cb:2d:c5:9e:4a:a7:8d:74:8f:72:94:d8:7c:
67:cf:c2:3e:bf:a1:3c:3e:a6:de:ee:87:21:f3:5f:bf:fa:b0:
4c:ed:28:58:fe:1e:d7:b7:00:de:03:e0:8b:e3:8a:62:29:9b:
af:f3:44:bd:2d:3b:b6:88:8e:8a:c3:a6:ab:4b:79:0a:9d:10:
63:a1:ce:d3:93:d3:18:25:e9:57:5e:6d:73:1e:37:af:34:1f:
d9:5d:4b:c1:de:c8:92:4c:ee:6e:da:92:d0:e4:8b:87:08:44:
ec:8a:ec:52:26:47:63:2d:56:de:67:02:f9:8f:10:6a:42:b4:
eb:6f:68:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:56:15 2026 by rpki-client