Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
File: SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json)
Hash identifier: 6FgGr0bAFsz0SynHN5k35b9n2AqHWcFB/65NX8MbHMM=
Subject key identifier: 4D:55:75:E6:6E:A8:D0:40:2F:0A:29:EC:AE:75:DD:18:CC:97:B7:19
Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Certificate issuer: /CN=4a6376ce92087e4c7ce536686537769e2cc34059
Certificate serial: 01A0C4E95D69840C376757DB17200851A185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 17:00:23 +0000
Manifest this update: Mon 21 Sep 2026 17:00:23 +0000
Manifest next update: Tue 22 Sep 2026 17:00:23 +0000
Files and hashes: 1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: 1F9mvO5uyL9csqiPK1JrtIlldzAZXiWm4oWt8wbQ0as=)
2: b6GatGiUFxM_87xt_5qHFxZqZQ0.roa (hash: aB8H9RSypH5EK63/M5cIx7z9EJKV2WitqNTM48KwyXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:5d:69:84:0c:37:67:57:db:17:20:08:51:a1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059
Validity
Not Before: Sep 21 17:00:23 2026 GMT
Not After : Sep 22 17:00:23 2026 GMT
Subject: CN=4d5575e66ea8d0402f0a29ecae75dd18cc97b719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:69:f5:c7:bb:1d:d1:37:6e:c3:6d:b3:8c:
a0:67:12:c7:76:44:ed:4d:51:29:0a:90:7c:b1:01:
c9:0a:42:b6:38:c1:62:8d:89:58:77:37:d6:78:3f:
06:bf:86:21:33:16:a5:70:c0:e5:ff:4e:1b:a8:75:
cb:cf:eb:39:17:54:f8:25:e7:3b:27:2c:d3:d6:b7:
a4:7f:2a:2b:0c:08:e4:f4:de:63:0b:37:9a:0a:e3:
f2:73:04:63:6a:53:73:53:c8:19:d2:77:a3:f3:7e:
75:12:9c:86:62:f7:16:fd:5f:c1:6a:ec:05:7f:85:
17:5e:1b:31:ad:f5:1d:43:68:fb:b2:d6:3f:ee:77:
65:a8:f3:40:ba:89:44:28:40:be:65:4f:d1:7a:d4:
2a:4c:e3:d9:5c:40:5b:d9:92:a3:ae:c7:eb:7a:23:
3b:f7:d7:6d:f7:ab:d7:fe:6f:56:23:bf:82:94:62:
aa:8f:91:44:2a:dc:03:82:23:ab:01:0b:fb:bb:5a:
4c:ba:e1:e6:af:b9:f1:01:20:05:82:e8:77:67:85:
41:c6:21:f6:cd:37:e0:fd:93:e0:31:f3:aa:d5:11:
ca:fa:ef:32:44:4d:d6:7c:e5:38:ff:7b:ca:2a:d0:
e2:a7:81:d4:45:5e:67:3c:e9:bf:d4:bd:4c:08:6b:
12:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:55:75:E6:6E:A8:D0:40:2F:0A:29:EC:AE:75:DD:18:CC:97:B7:19
X509v3 Authority Key Identifier:
keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:26:fd:09:4d:3e:01:81:0b:77:ce:e2:00:0d:71:9c:86:4c:
5e:9f:3a:e4:bd:a4:17:c9:51:3c:3c:79:62:42:3a:a3:f5:c9:
66:b1:8c:d3:3d:7d:6a:c3:7b:af:f2:5d:84:8f:b9:a9:bd:f4:
71:d8:54:42:d0:ee:3b:0e:19:de:58:42:be:1d:86:47:e6:92:
bd:be:8d:2f:3c:73:cd:aa:6b:1b:39:bd:52:62:3c:f4:36:da:
41:17:90:0a:74:2c:14:28:25:6c:2b:6d:b0:df:42:77:d9:09:
2b:fc:c2:a2:77:0b:e4:4e:08:7d:b8:9a:e6:e8:16:8c:df:ef:
0e:f8:5f:80:66:09:38:df:b1:b7:8d:a6:44:6f:b4:6d:0f:b2:
74:fc:96:24:ab:01:8b:fa:6a:7d:10:be:ba:68:18:04:b1:68:
9a:4e:b7:15:63:3c:79:af:44:15:fd:2d:91:51:77:9d:7c:2d:
9a:e1:73:db:62:8e:33:65:99:ce:1d:19:ab:25:a8:f0:7f:4e:
7d:58:b1:4c:e6:63:08:29:5e:64:38:e2:7a:49:c5:1b:20:de:
93:13:18:5d:5b:c1:c3:b0:eb:bc:e1:4f:2c:cd:66:6c:b5:9d:
44:1d:54:18:7f:a7:2c:7a:6a:54:b3:76:e7:14:66:29:d6:60:
10:08:d2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:09:10 2026 by rpki-client