Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
File: SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft (raw, json)
Hash identifier: Th6J7xEVFmcxUFTwLE0Yx50X/qjLk4XkEZJhxIh06ng=
Subject key identifier: 35:99:44:9E:42:45:B0:35:35:AF:85:AA:2D:99:69:84:53:12:B9:3E
Authority key identifier: 4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
Certificate issuer: /CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Certificate serial: 019D3A541809FCDBA86F731FF230D270804D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
Manifest number: 1083
Signing time: Sun 29 Mar 2026 16:01:22 +0000
Manifest this update: Sun 29 Mar 2026 16:01:22 +0000
Manifest next update: Mon 30 Mar 2026 16:01:22 +0000
Files and hashes: 1: SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl (hash: v0Tve8fHZXeJL4fXWQ+nvulFH94/2AcJmokzwRqxnm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:18:09:fc:db:a8:6f:73:1f:f2:30:d2:70:80:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Validity
Not Before: Mar 29 16:01:22 2026 GMT
Not After : Mar 30 16:01:22 2026 GMT
Subject: CN=3599449e4245b03535af85aa2d9969845312b93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:d3:ef:a1:c9:49:df:1f:3c:b4:38:bb:ad:
61:c6:b9:80:67:e9:54:77:76:d0:4e:94:98:5c:93:
e7:ac:83:6d:a6:6d:40:b0:4b:47:6b:22:ed:8e:af:
44:63:3f:4d:2e:3f:8d:5a:d3:0b:7a:80:47:f1:ad:
72:7c:fb:67:f0:8c:2a:f1:98:7e:af:16:43:95:85:
96:a3:1e:cc:ba:e1:77:93:64:af:a4:65:dd:a5:71:
3e:d3:af:28:75:49:34:45:d0:8d:39:94:52:8f:0f:
1a:c7:ef:5b:dc:c3:3b:f1:e6:c5:5a:f0:37:2c:3f:
f3:a9:00:94:ad:0f:37:62:83:82:49:29:79:39:47:
44:25:b0:2e:a5:73:16:ff:8d:09:89:3f:1b:16:42:
93:6e:23:91:6d:d8:66:ac:22:49:8c:8d:16:c7:9b:
44:c5:0e:06:c9:08:4c:4d:89:4c:c3:5f:48:fa:b0:
32:39:10:80:cf:57:86:e6:58:ea:97:27:b7:f5:14:
cb:72:11:a1:c8:69:1b:a9:fe:0a:72:62:34:a5:67:
56:94:e0:ba:27:49:bf:f9:ae:4b:ba:c0:ab:1e:8d:
e2:71:79:48:e9:48:8e:df:a3:d5:d8:6b:11:f1:38:
80:a5:57:68:9f:f4:86:99:33:6e:db:aa:94:fa:12:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:99:44:9E:42:45:B0:35:35:AF:85:AA:2D:99:69:84:53:12:B9:3E
X509v3 Authority Key Identifier:
keyid:4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b1:3d:f3:a6:b0:3b:70:95:3d:d3:9c:c9:25:eb:1d:0a:50:
d7:6b:91:0a:84:ad:92:ed:ac:e3:c0:f5:56:64:85:e2:7a:b8:
a0:30:df:67:c6:20:fd:86:9f:f2:e1:d0:9d:91:2a:c7:72:ac:
15:ba:6b:e6:26:bf:6c:2c:e1:40:06:5f:58:93:0b:2e:be:81:
89:31:70:81:9a:f1:44:93:ac:3d:14:b4:cf:87:ff:41:26:ab:
74:53:63:91:23:6d:fe:84:a3:9d:49:22:92:fa:02:5b:22:54:
d9:49:91:91:2c:14:bf:15:07:05:7f:b6:92:27:53:03:12:28:
b7:15:24:85:3b:6e:f1:1f:35:2c:7d:59:1a:c2:b2:25:33:62:
22:36:0f:5c:34:b6:a8:ae:ce:56:37:ac:b9:5e:e8:95:cc:2b:
43:a1:30:9a:92:84:26:51:8b:a6:22:bd:1b:7f:e6:ad:b4:39:
b6:a9:75:cc:dc:b3:93:6c:8a:98:c0:6e:94:d2:f8:ad:af:4d:
67:7f:e0:20:29:35:19:6e:ef:09:c4:20:24:07:f3:ce:d9:d5:
3e:39:0b:a6:f7:e2:f1:19:ae:94:60:d0:3d:ca:21:38:6f:b5:
50:b1:bb:e5:56:23:2c:40:3a:84:e0:5a:23:eb:83:ff:c7:a7:
6f:7a:76:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VBgJ/Nuob3Mf8jDScIBNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjBmMzhjZjM2ZmNjOWJjNTEzMjkzNTEyYjQ2YjkxMWVk
ZjVhYzUwHhcNMjYwMzI5MTYwMTIyWhcNMjYwMzMwMTYwMTIyWjAzMTEwLwYDVQQD
EygzNTk5NDQ5ZTQyNDViMDM1MzVhZjg1YWEyZDk5Njk4NDUzMTJiOTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjfT76HJSd8fPLQ4u61hxrmAZ+lU
d3bQTpSYXJPnrINtpm1AsEtHayLtjq9EYz9NLj+NWtMLeoBH8a1yfPtn8Iwq8Zh+
rxZDlYWWox7MuuF3k2SvpGXdpXE+068odUk0RdCNOZRSjw8ax+9b3MM78ebFWvA3
LD/zqQCUrQ83YoOCSSl5OUdEJbAupXMW/40JiT8bFkKTbiORbdhmrCJJjI0Wx5tE
xQ4GyQhMTYlMw19I+rAyORCAz1eG5ljqlye39RTLchGhyGkbqf4KcmI0pWdWlOC6
J0m/+a5LusCrHo3icXlI6UiO36PV2GsR8TiApVdon/SGmTNu26qU+hILCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWZRJ5CRbA1Na+Fqi2ZaYRTErk+MB8GA1UdIwQY
MBaAFEpg84zzb8ybxRMpNRK0a5Ee31rFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21EempQTnZ6SnZGRXlrMUVyUnJrUjdmV3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wZWY2MjItOWMyNy00NjczLTliM2It
ZWEyOWMxYTI4YzVkLzEvU21EempQTnZ6SnZGRXlrMUVyUnJrUjdmV3NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wZWY2MjItOWMyNy00NjczLTliM2ItZWEyOWMxYTI4YzVk
LzEvU21EempQTnZ6SnZGRXlrMUVyUnJrUjdmV3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObE986aw
O3CVPdOcySXrHQpQ12uRCoStku2s48D1VmSF4nq4oDDfZ8Yg/Yaf8uHQnZEqx3Ks
Fbpr5ia/bCzhQAZfWJMLLr6BiTFwgZrxRJOsPRS0z4f/QSardFNjkSNt/oSjnUki
kvoCWyJU2UmRkSwUvxUHBX+2kidTAxIotxUkhTtu8R81LH1ZGsKyJTNiIjYPXDS2
qK7OVjesuV7olcwrQ6EwmpKEJlGLpiK9G3/mrbQ5tql1zNyzk2yKmMBulNL4ra9N
Z3/gICk1GW7vCcQgJAfzztnVPjkLpvfi8RmulGDQPcohOG+1ULG75VYjLEA6hOBa
I+uD/8enb3p27A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:10 2026 by rpki-client