Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: N1N81c1Ru1QmAhaPak3v3EI4F0L3ZgBM9QZh9uKQ6Gg=
Subject key identifier: 5D:7F:FD:44:7A:2D:6F:04:4A:23:60:D2:F7:3E:AC:6D:12:D1:11:12
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 01A15778BAB09440C2D94181AB6085A0DF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 1AC5
Signing time: Tue 20 Oct 2026 04:01:32 +0000
Manifest this update: Tue 20 Oct 2026 04:01:32 +0000
Manifest next update: Wed 21 Oct 2026 04:01:32 +0000
Files and hashes: 1: JIuy1yADZ-WZO4oAxQqNA1Wq5AE.roa (hash: Z5LJLNpxBzdsKbIiGUAut0ZaWggo2BNQFiKt/gU6WAI=)
2: W03Nbk16lpsFFFHwZEVyGb3GdCk.roa (hash: 2uorc6ih53DwXRdYsCumZcTs0fUh5iNGE9WcBcj9AO0=)
3: km0TI5gSsaXM0ksLgopKp3QzU78.roa (hash: duTA4ngL0m0KQkmYbp4PQQqGU8slrpfiT+Ukyerp3dc=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: 57ZYbz3OLhW2RdrZ3QL/fnOp3dx+0hFR2w279kun+/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:78:ba:b0:94:40:c2:d9:41:81:ab:60:85:a0:df:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Oct 20 04:01:32 2026 GMT
Not After : Oct 21 04:01:32 2026 GMT
Subject: CN=5d7ffd447a2d6f044a2360d2f73eac6d12d11112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b3:3a:c3:ec:d9:34:cc:2d:4f:6d:9c:b5:f7:
c7:92:51:d6:b4:4f:4b:80:0b:a1:a9:66:23:b3:76:
a1:7b:29:a1:e3:08:3c:41:87:d4:5b:63:2e:a9:35:
02:59:01:d0:2e:e8:98:26:4d:fb:74:53:cb:d5:58:
48:37:88:4f:c3:57:f7:90:42:9e:8f:e3:c3:8a:8f:
31:f6:58:49:7b:2f:41:4e:7d:74:6f:25:c1:3c:0e:
4b:da:60:c3:8f:c6:c5:18:d0:7f:f3:2e:1c:90:ad:
a0:da:7d:54:13:e5:71:68:c1:28:17:a2:a5:cf:57:
b3:6a:bb:aa:98:8f:4f:ac:5a:74:85:06:1c:07:1c:
ed:97:6a:57:3e:8f:93:d5:88:7f:0e:1b:26:1a:ce:
75:48:06:fe:2b:90:b8:3a:db:de:aa:d8:c8:72:dc:
c6:0e:93:6d:e1:0a:c6:1b:76:a3:0f:36:a7:44:09:
a2:fa:f3:ee:6a:cf:7e:e2:c8:0b:b5:eb:5f:27:90:
6a:23:36:e3:78:d9:6a:62:c1:bd:30:8f:8e:c8:31:
50:83:95:1b:ae:c9:ce:b4:42:e8:2b:8e:cb:c2:67:
6e:78:8f:08:45:aa:d4:ca:8b:06:61:9b:36:46:02:
a3:7c:8a:f0:a3:04:1e:55:67:14:1d:89:e7:a0:b1:
90:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7F:FD:44:7A:2D:6F:04:4A:23:60:D2:F7:3E:AC:6D:12:D1:11:12
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fa:58:b5:08:10:64:d8:5e:dd:fa:98:f3:1b:b1:1f:41:86:
cb:c8:c5:da:de:91:25:fc:35:7b:0c:16:2b:f0:0b:93:73:51:
83:20:52:0a:af:85:ed:4c:f0:3c:c0:5b:2d:24:e2:6f:2b:35:
5b:a9:51:d4:75:19:d8:2e:22:ff:76:24:40:be:24:49:e5:66:
07:8a:7f:81:a1:f6:40:cb:5e:1d:b4:2b:db:fb:32:18:bc:be:
af:33:f2:14:db:7e:53:eb:01:ad:61:b5:04:b9:10:ed:7a:45:
a2:97:1b:1e:f0:6a:5b:30:d4:6d:6d:7e:ba:d9:ef:c5:6c:b6:
06:34:f9:3a:66:38:3d:54:98:7b:0f:23:aa:b5:5d:6a:6e:56:
0a:fe:03:f5:96:a3:04:eb:01:86:08:f0:5e:7d:b1:d2:ab:be:
eb:5f:d0:74:bf:18:fa:45:45:85:6e:46:40:13:a7:16:39:8e:
d7:18:ae:67:74:c5:95:e4:32:17:75:81:36:2d:ff:f2:e4:a9:
94:29:75:8b:21:56:1c:34:f5:99:f3:1d:48:2d:a8:3a:bd:bd:
c7:ca:c0:4e:a0:62:88:5f:d5:d2:31:a0:85:1a:3c:32:74:d8:
4b:8c:73:0d:89:d9:42:1c:8f:e1:dc:50:6c:40:d0:be:3c:b2:
36:6c:52:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 10:02:56 2026 by rpki-client