Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: GV6C3CYUYdaOeKk9QEbQyqxtpL6wgmrienWW0ScBBB0=
Subject key identifier: D7:14:0D:43:82:F1:80:7B:EF:01:D5:3B:BB:50:0D:CE:4A:2F:6E:39
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 019CE4109D182A9B7C937DB0975FF0408C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 1877
Signing time: Thu 12 Mar 2026 22:00:19 +0000
Manifest this update: Thu 12 Mar 2026 22:00:19 +0000
Manifest next update: Fri 13 Mar 2026 22:00:19 +0000
Files and hashes: 1: JIuy1yADZ-WZO4oAxQqNA1Wq5AE.roa (hash: Z5LJLNpxBzdsKbIiGUAut0ZaWggo2BNQFiKt/gU6WAI=)
2: W03Nbk16lpsFFFHwZEVyGb3GdCk.roa (hash: 2uorc6ih53DwXRdYsCumZcTs0fUh5iNGE9WcBcj9AO0=)
3: km0TI5gSsaXM0ksLgopKp3QzU78.roa (hash: duTA4ngL0m0KQkmYbp4PQQqGU8slrpfiT+Ukyerp3dc=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: cdrq/Wi5TeJkisxoMq9eqThYWOZg20HhKvNFVVAExqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:9d:18:2a:9b:7c:93:7d:b0:97:5f:f0:40:8c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Mar 12 22:00:19 2026 GMT
Not After : Mar 13 22:00:19 2026 GMT
Subject: CN=d7140d4382f1807bef01d53bbb500dce4a2f6e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:c9:aa:bc:dc:77:d7:a1:35:46:e7:ea:9a:
4b:2e:04:a6:fc:cb:64:3f:20:6a:41:7b:f5:04:6b:
29:cb:97:33:48:10:c7:fc:6b:d4:e3:45:7c:94:3c:
76:52:92:b0:d6:a7:c2:33:38:cf:53:40:4e:3c:72:
19:70:23:42:96:eb:bd:c1:e9:3b:3d:53:7f:8b:83:
d6:1f:d1:8b:c6:74:c6:04:3d:7d:f9:af:49:81:31:
7a:af:bb:c0:af:a9:23:ac:c0:30:1d:83:98:f8:a4:
1e:e8:d8:f9:2b:ec:ca:a9:82:8e:79:b7:66:c7:2a:
9f:86:f6:91:b9:8c:2e:59:83:e9:19:c9:14:6d:ed:
ad:4e:47:55:01:72:70:e9:de:31:38:e6:dc:f3:9c:
b7:59:07:6e:78:7b:55:e6:93:e8:d1:3c:cd:2e:74:
9e:b8:4d:7a:a3:bf:93:b6:d8:86:de:93:ab:69:dd:
d6:42:01:ab:a5:d6:2f:54:f7:ba:13:f8:bf:1c:06:
6a:34:ea:22:14:36:b4:d5:ea:82:e2:28:14:85:5d:
c9:8a:27:5f:35:3b:c5:bd:83:e3:7d:07:5c:5b:55:
56:cc:c1:e7:6d:70:17:47:9c:f1:3d:69:1e:94:b1:
9f:6f:9b:14:f7:3d:57:2c:40:3d:d2:29:26:57:9c:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:14:0D:43:82:F1:80:7B:EF:01:D5:3B:BB:50:0D:CE:4A:2F:6E:39
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:62:16:60:d5:ce:b6:ee:c3:b3:52:71:38:6a:81:cb:26:99:
53:a7:19:53:20:4f:cb:2b:0e:29:59:16:c1:22:dc:eb:b4:20:
bb:f3:56:30:3d:52:3f:e9:8b:c5:80:22:da:2b:32:c0:89:d6:
e8:f5:06:03:d2:ee:8a:51:ee:cb:0a:98:a0:3b:22:70:6e:cc:
64:10:9a:7f:e7:24:11:13:95:ce:47:e6:95:9d:90:3f:90:a7:
70:f3:11:67:b2:e5:33:2a:35:69:7e:e1:43:48:3e:6c:6c:e2:
d7:d8:95:86:2f:22:a1:8b:ea:d4:79:e6:fc:89:ce:af:6c:f9:
e0:13:44:7b:78:df:2c:14:c3:ad:64:e9:25:d6:fb:65:72:03:
9b:68:a3:4b:30:9e:8d:29:06:18:1f:3c:24:66:5c:f2:e8:03:
99:d7:a4:7b:66:65:b8:f2:b3:7c:e2:f1:b2:f6:4e:ab:78:09:
8a:24:59:c4:20:a1:d3:d8:04:3e:e2:a9:fb:7d:65:00:21:2f:
e1:2d:50:5a:41:00:7f:ff:1e:4f:85:bf:c0:c2:65:f2:ea:3e:
53:5b:55:6d:08:64:be:2c:8a:e3:bb:4a:d1:d7:35:f3:33:10:
d5:30:44:39:cb:72:75:32:ba:a7:46:32:ed:c8:08:49:59:12:
ed:e6:4f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:19:53 2026 by rpki-client