Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
File: SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json)
Hash identifier: Kf635amYYh/ygaqx33fYA1fH/nBLYQ7i2u5yya2TNSM=
Subject key identifier: F6:CB:E2:B4:0E:BA:AF:68:A7:A8:20:5E:47:B9:A0:32:16:60:E4:F1
Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Certificate issuer: /CN=4a6376ce92087e4c7ce536686537769e2cc34059
Certificate serial: 019FAAF6339064A4890354E9EF4E4A5F881F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 23:01:29 +0000
Manifest this update: Tue 28 Jul 2026 23:01:29 +0000
Manifest next update: Wed 29 Jul 2026 23:01:29 +0000
Files and hashes: 1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: JtMK0sUrrYcsb+e0tdYhbA8l7ITYJ2qIXJsY87tmRPU=)
2: b6GatGiUFxM_87xt_5qHFxZqZQ0.roa (hash: aB8H9RSypH5EK63/M5cIx7z9EJKV2WitqNTM48KwyXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:33:90:64:a4:89:03:54:e9:ef:4e:4a:5f:88:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059
Validity
Not Before: Jul 28 23:01:29 2026 GMT
Not After : Jul 29 23:01:29 2026 GMT
Subject: CN=f6cbe2b40ebaaf68a7a8205e47b9a0321660e4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:40:d0:ee:55:74:a9:a2:e6:46:8b:3a:24:
56:c4:0a:d8:ad:e3:1f:a2:1b:2b:e9:b5:ec:03:94:
eb:22:54:3f:2a:5a:2c:a9:46:a3:3a:16:99:2d:ef:
9b:7f:c3:30:43:26:f9:c6:59:27:4b:91:a9:d7:eb:
8f:70:61:19:54:64:8f:b6:05:76:ed:dc:07:05:07:
f9:99:1d:9b:99:1b:2e:08:cf:de:8f:57:51:9b:92:
cc:74:35:7d:5e:06:b1:c6:7d:ad:d4:6f:7e:05:ca:
3f:7f:c7:44:57:fa:fa:d0:d3:e6:e0:31:84:6b:0a:
0d:d5:4b:5d:b7:4c:56:3d:c8:da:ef:38:14:97:68:
0a:1d:a7:51:d0:5a:e4:fa:9d:b6:d9:64:10:69:88:
b3:d2:96:50:1a:30:f2:c4:5a:a3:1e:0d:0b:3a:29:
6c:27:6e:96:c7:3a:9e:95:09:c5:f6:23:26:6a:ab:
b4:22:ff:66:2c:f5:f2:bd:70:39:4b:cd:24:0f:95:
2c:08:f6:d7:e9:3b:61:a5:04:4c:cf:08:5e:a7:d5:
8a:ff:b0:c0:95:18:15:09:bb:9b:38:a4:1f:8a:74:
d2:3d:56:a4:bc:fc:01:25:ac:99:ca:f5:c5:8a:2b:
c8:4f:da:ef:11:2b:60:d1:0e:7a:6d:bd:4b:c0:2b:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CB:E2:B4:0E:BA:AF:68:A7:A8:20:5E:47:B9:A0:32:16:60:E4:F1
X509v3 Authority Key Identifier:
keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1d:bb:37:44:32:92:e1:fd:f2:32:bc:36:cb:28:21:d1:3a:
ab:b1:76:3a:d9:1b:bc:5e:66:89:15:eb:ff:e2:da:b6:60:62:
30:14:4d:db:60:a7:84:5a:e7:8b:f6:c1:08:2e:f3:90:47:44:
6d:e2:27:dc:07:60:22:d5:e5:e8:c3:b7:3b:f2:03:14:89:69:
93:2f:a6:20:09:a5:fb:76:8c:e7:8b:29:91:14:2c:84:d2:fe:
5f:96:f7:cd:f8:30:68:a0:66:1e:67:4c:99:11:d7:8e:ab:a0:
66:ce:ea:f0:dd:7a:63:15:5d:38:53:9a:ee:3c:ef:82:58:2d:
47:bf:c5:89:80:1e:28:48:7c:f6:9b:5e:b0:04:b8:5a:c9:6c:
cb:00:fa:60:7b:69:ab:cb:69:0f:70:58:d7:9b:2b:7e:a7:b8:
fc:7d:b3:18:fd:c7:9b:92:70:88:69:36:7d:e4:93:bb:0b:5b:
03:53:70:c9:c9:fb:de:fc:f0:0a:d7:36:4e:0e:d2:54:5d:76:
c1:85:21:2b:1b:1a:0b:f4:fc:60:67:28:95:c8:b6:17:3b:b1:
c9:7a:2d:9b:4f:a4:6d:41:35:90:13:83:41:76:fe:ff:83:be:
96:c3:70:00:6b:e0:e6:20:22:16:21:87:ec:93:1b:28:c9:69:
ac:7e:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:25:59 2026 by rpki-client