Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: 8VvV8FGQM3uIuvnc8kTxnOFRZTF5deZ1AWOIpVbWYK0=
Subject key identifier: 9A:BD:30:B0:DB:87:8E:C0:78:B3:29:68:6C:48:DD:04:DF:89:4B:6E
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 019DCFAC11F1C9EBB6C42D5A5B677F220176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 18F1
Signing time: Mon 27 Apr 2026 16:00:53 +0000
Manifest this update: Mon 27 Apr 2026 16:00:53 +0000
Manifest next update: Tue 28 Apr 2026 16:00:53 +0000
Files and hashes: 1: JIuy1yADZ-WZO4oAxQqNA1Wq5AE.roa (hash: Z5LJLNpxBzdsKbIiGUAut0ZaWggo2BNQFiKt/gU6WAI=)
2: W03Nbk16lpsFFFHwZEVyGb3GdCk.roa (hash: 2uorc6ih53DwXRdYsCumZcTs0fUh5iNGE9WcBcj9AO0=)
3: km0TI5gSsaXM0ksLgopKp3QzU78.roa (hash: duTA4ngL0m0KQkmYbp4PQQqGU8slrpfiT+Ukyerp3dc=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: FeYHo0QRlABuQJHGh7WSIrHUlKU6KGvYR+uS6Aenv9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:11:f1:c9:eb:b6:c4:2d:5a:5b:67:7f:22:01:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Apr 27 16:00:53 2026 GMT
Not After : Apr 28 16:00:53 2026 GMT
Subject: CN=9abd30b0db878ec078b329686c48dd04df894b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:c8:4b:25:ed:02:2a:1b:1c:ac:38:94:55:
3d:b8:3a:d0:a8:8c:ee:ac:7d:ca:1a:84:d9:c6:33:
f3:66:e3:d7:d2:1b:0f:88:39:4e:28:3a:67:ea:34:
a7:ba:09:35:6a:e2:a7:34:f1:53:a0:25:aa:f2:62:
03:53:b0:e1:60:bc:2a:89:c9:4e:28:33:7b:b2:b7:
2e:04:39:1a:da:a9:d1:b5:52:2f:5a:56:5c:c7:0c:
c4:67:fe:88:c4:8c:0e:94:a7:b3:96:ad:09:4b:c6:
c7:10:ca:ff:49:7f:b7:9c:cc:32:b7:ba:a9:fd:6c:
95:7d:10:85:fd:81:c1:f1:08:8d:c6:9e:1a:69:3e:
91:9a:bd:45:a4:ae:80:e4:b9:7f:0a:49:90:c1:e2:
7f:64:54:e9:57:5f:90:04:52:79:b7:b9:fa:8e:89:
6c:19:d4:66:0e:fe:eb:54:6a:77:f9:d2:b3:2d:bb:
7f:fe:97:56:39:be:1f:3f:11:b4:c6:66:56:6e:4f:
bc:28:17:69:f8:a6:13:42:f2:6e:72:b6:f8:d4:7b:
51:93:fa:b3:35:38:e3:12:26:e6:7c:84:8e:b1:d7:
e5:21:15:34:fc:36:6b:e2:a7:cd:e8:69:37:16:68:
b7:79:34:08:b0:20:74:7a:23:4c:68:39:88:36:77:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BD:30:B0:DB:87:8E:C0:78:B3:29:68:6C:48:DD:04:DF:89:4B:6E
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:73:2e:bd:da:c9:8a:40:e3:97:4f:4e:47:62:a5:70:03:3d:
4a:40:61:04:1c:c4:3f:79:25:de:12:16:2a:e2:fc:8c:dd:8e:
b5:3d:17:5c:99:99:36:aa:3a:8f:cd:79:f5:47:5a:c2:25:21:
9b:16:b6:1a:ec:df:01:77:30:3f:57:6a:f8:96:6d:1d:52:c3:
a0:fd:29:57:25:9d:fb:e7:7e:51:09:41:e3:0d:e4:33:4a:c9:
91:c0:9d:b1:8d:f5:bd:33:0a:6e:e7:0c:c6:98:e3:b4:bf:cc:
d5:61:86:9b:7e:da:b3:80:fc:5b:61:ca:f9:b5:8f:30:38:a5:
9a:60:ba:47:8e:6e:82:0e:8f:37:2b:fa:34:21:fe:a0:55:cc:
da:8d:33:56:23:7e:50:8a:e4:67:cf:e8:3b:97:b7:13:69:45:
61:11:a5:90:96:56:d5:76:41:09:7e:54:ef:c8:ef:97:e2:d3:
16:13:50:47:d0:23:60:36:79:da:ba:bb:64:4a:30:21:f2:81:
6b:03:e1:f9:96:ac:bc:e4:88:19:e6:83:73:90:d2:5f:9d:96:
ae:db:43:58:c5:32:a6:bb:c5:63:4a:b1:f6:76:57:88:91:bc:
77:b2:96:eb:a2:45:eb:78:0b:05:bf:86:7b:c2:23:ae:a1:c3:
8b:5f:53:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:43:34 2026 by rpki-client