Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
File: SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json)
Hash identifier: 1QI7MMvwbragvtucESjL/F5LPBhnISebG0iBkWR9is4=
Subject key identifier: F1:79:7B:36:31:DD:78:CE:06:E7:A6:1A:EE:E7:CD:2A:62:E1:E4:22
Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Certificate issuer: /CN=4a6376ce92087e4c7ce536686537769e2cc34059
Certificate serial: 01A1DEDE3984A7FDD0B43FFAC67D433390EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 11:01:08 +0000
Manifest this update: Sun 15 Nov 2026 11:01:08 +0000
Manifest next update: Mon 16 Nov 2026 11:01:08 +0000
Files and hashes: 1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: xYNc5o4TCGyJlYyZWRtrwPl3qKAHb0Z2g/u+m3ebaGw=)
2: b6GatGiUFxM_87xt_5qHFxZqZQ0.roa (hash: aB8H9RSypH5EK63/M5cIx7z9EJKV2WitqNTM48KwyXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:39:84:a7:fd:d0:b4:3f:fa:c6:7d:43:33:90:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059
Validity
Not Before: Nov 15 11:01:08 2026 GMT
Not After : Nov 16 11:01:08 2026 GMT
Subject: CN=f1797b3631dd78ce06e7a61aeee7cd2a62e1e422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:46:6d:a2:dc:d2:61:1b:cc:17:c2:ea:8e:5b:
0f:3b:10:e5:d4:f8:be:47:0d:88:72:58:ac:95:50:
da:b9:59:2f:9b:d3:23:02:45:64:e4:19:11:3a:0e:
40:c2:f8:f6:1e:8d:e3:1c:97:08:96:82:64:d6:b1:
a0:98:9a:87:68:58:8c:71:ef:6d:2a:cf:4d:8f:c3:
94:02:c0:1d:41:39:96:ea:39:2b:30:47:5d:ea:ac:
62:12:f9:8c:be:d0:19:72:bd:1d:c6:4e:23:c0:be:
71:29:cd:06:bf:3d:22:bf:d1:d1:8d:16:46:11:d4:
72:ee:33:3e:50:25:a6:23:11:aa:12:62:45:4d:e2:
8e:38:31:a1:a0:22:43:85:1b:34:95:dc:87:df:e6:
33:0d:b5:4c:b3:4c:37:dd:76:c0:8f:d1:5e:ab:98:
0f:19:f9:ca:26:c3:81:35:d1:9c:38:b3:58:7c:55:
82:a3:70:de:34:9d:5c:31:9c:b1:76:14:75:20:89:
fb:20:e4:66:72:d9:d4:c4:5a:70:e0:e9:30:7a:0d:
3c:71:de:de:32:8d:87:15:30:e3:57:35:80:b2:f8:
b2:5e:46:c7:61:2a:a7:84:92:03:91:b4:d7:25:a9:
f5:8f:82:8d:a7:6e:45:b7:f8:e2:b5:07:3f:a1:42:
fa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:79:7B:36:31:DD:78:CE:06:E7:A6:1A:EE:E7:CD:2A:62:E1:E4:22
X509v3 Authority Key Identifier:
keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:39:8c:0a:5c:9a:90:2e:e1:24:b5:de:49:85:bb:4f:64:c1:
37:fe:67:5f:36:53:35:42:34:ab:c3:02:ba:00:22:b4:3a:28:
7e:bb:18:ce:af:9e:e9:fa:e6:38:ba:fd:13:ce:52:16:04:c7:
04:ae:88:75:e5:91:3f:08:00:4d:25:b3:82:33:76:d0:1b:b2:
76:f2:a5:50:a9:5f:93:3a:49:2b:cd:53:f9:a4:99:6d:38:f8:
cb:33:3e:db:4c:e4:05:f4:a7:bf:27:24:99:da:b6:9d:11:e7:
1a:56:3e:88:9e:68:d4:75:6b:88:e2:41:7a:42:e1:47:54:20:
de:26:72:3f:de:69:ee:27:8c:a1:77:67:da:40:1d:d6:88:19:
c4:eb:f1:21:79:5f:0c:b3:cf:fc:d6:79:3c:c8:22:91:91:45:
a4:df:73:59:9e:8f:31:0c:9d:ef:c6:a2:04:67:0e:2f:1c:f6:
4a:39:fd:e6:71:d0:1e:ac:bd:b5:a2:3f:f1:f8:cc:13:7f:13:
49:e7:17:44:c5:26:17:47:52:64:df:9e:b8:98:49:36:14:06:
16:ce:51:02:ba:3f:25:c7:29:04:8d:80:c0:e1:d1:c1:48:6f:
17:67:8b:1a:46:88:1a:22:95:88:d1:bb:17:64:49:12:47:ae:
4e:cc:d8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:48:00 2026 by rpki-client