Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
File: sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json)
Hash identifier: Jpdy9K0XeOJH0CxapQyf+H08ANwO882BTGX79jR82fk=
Subject key identifier: B1:D3:7A:6B:17:D5:BF:91:48:A6:6B:55:BD:AD:0D:7A:A7:58:DD:FC
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Certificate issuer: /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial: 019CAC0FAD52D17E7DFE6762F2CFDDF5C4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
Manifest number: 0ED8
Signing time: Mon 02 Mar 2026 01:00:34 +0000
Manifest this update: Mon 02 Mar 2026 01:00:34 +0000
Manifest next update: Tue 03 Mar 2026 01:00:34 +0000
Files and hashes: 1: CFu9oBncqnpNmNRX4mjTnLjrg88.roa (hash: B2878+aNIHIe1LVscKgla2xHXSTcQOkvuEd8azDazoE=)
2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: hQADwGzQPpX0jBwHiP4OrOGVeHtP14FCkIBnOXlp04A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ad:52:d1:7e:7d:fe:67:62:f2:cf:dd:f5:c4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Validity
Not Before: Mar 2 01:00:34 2026 GMT
Not After : Mar 3 01:00:34 2026 GMT
Subject: CN=b1d37a6b17d5bf9148a66b55bdad0d7aa758ddfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:3c:aa:3d:8b:f2:4d:69:9a:da:74:ff:da:
43:d6:84:70:cf:5e:bd:91:ff:35:ee:02:fb:08:59:
7b:e9:08:00:77:28:23:37:46:93:fe:f8:87:ac:ea:
29:1c:8a:c7:9c:c2:a2:4d:69:a7:ad:9d:3e:e9:48:
cf:7b:54:4a:48:55:fd:17:ee:61:6b:d6:ef:4a:75:
8e:d9:5d:ea:77:ef:c9:73:94:19:3a:21:e3:5f:73:
ba:69:25:bb:7c:19:7c:28:c9:e0:25:9c:51:a1:57:
ea:48:0d:11:81:77:f3:34:09:9e:19:79:e0:e2:d6:
49:d2:3e:5f:ff:1a:06:e9:a2:52:ef:7b:c5:97:c4:
fd:60:d7:de:16:4c:46:4a:db:47:8e:b5:1c:40:19:
fe:b1:4e:9d:df:42:cc:4c:a9:92:a1:bf:e5:5f:2a:
66:cc:db:79:fe:40:51:09:6b:04:32:e3:ed:bb:6a:
38:08:15:7f:f9:e5:f6:5f:6a:92:97:d8:2d:fd:7e:
55:66:ac:2e:52:cd:ae:da:7c:df:a9:a7:84:e9:f1:
12:4f:cd:21:1f:07:e5:fa:2f:6e:ea:e6:8b:b6:ac:
84:87:45:20:b0:b6:c5:22:d1:66:c9:24:7f:4d:11:
a8:d5:9e:64:6b:14:aa:ab:03:91:16:df:30:e9:60:
98:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D3:7A:6B:17:D5:BF:91:48:A6:6B:55:BD:AD:0D:7A:A7:58:DD:FC
X509v3 Authority Key Identifier:
keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:da:39:de:7b:ab:50:7d:31:f5:7c:03:ac:fc:82:b1:d6:45:
30:65:c9:1e:8e:38:a5:3f:a1:c7:ad:8a:db:96:bd:01:fd:14:
3e:41:9b:09:2a:53:f4:af:fc:38:c1:ca:5d:d7:7b:b1:0e:b2:
f6:bc:92:fb:4c:4c:bd:b8:4c:fe:b8:5d:07:ce:91:fe:e6:98:
15:a4:2a:04:5d:a2:cc:8f:07:13:55:92:76:af:4c:f7:8c:28:
9a:fd:c0:23:94:8e:09:f3:4b:c2:7f:f9:64:bd:e0:2c:e4:d1:
e5:52:af:5b:59:eb:8b:31:da:f4:ca:34:e6:1c:19:8b:0a:16:
5d:e8:37:31:32:fa:8f:ec:f9:85:42:ae:24:65:ec:f8:03:aa:
21:9a:19:8d:e6:ab:0d:95:01:78:63:cd:de:a6:1c:5f:58:17:
30:f1:50:28:99:ca:2e:08:12:d7:f6:16:25:e9:b4:d5:d9:1f:
99:02:4b:3b:c1:04:03:97:d1:f3:f7:4d:ed:ef:bc:19:2f:80:
ce:94:44:ed:1f:99:b2:a1:eb:a4:6d:c0:39:a3:42:c4:bf:44:
9e:78:ac:0a:68:91:e5:df:25:44:3c:82:7f:76:53:fc:34:88:
5a:d1:8b:fd:83:2b:f6:aa:87:ca:85:3b:f8:78:03:96:56:ad:
47:85:4a:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD61S0X59/mdi8s/d9cT+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzk5Yjk1MWM2YTZmNmFkY2M4NjhkODg1YTk0MGFkZjAw
NTFhMTkwHhcNMjYwMzAyMDEwMDM0WhcNMjYwMzAzMDEwMDM0WjAzMTEwLwYDVQQD
EyhiMWQzN2E2YjE3ZDViZjkxNDhhNjZiNTViZGFkMGQ3YWE3NThkZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty08qj2L8k1pmtp0/9pD1oRwz169
kf817gL7CFl76QgAdygjN0aT/viHrOopHIrHnMKiTWmnrZ0+6UjPe1RKSFX9F+5h
a9bvSnWO2V3qd+/Jc5QZOiHjX3O6aSW7fBl8KMngJZxRoVfqSA0RgXfzNAmeGXng
4tZJ0j5f/xoG6aJS73vFl8T9YNfeFkxGSttHjrUcQBn+sU6d30LMTKmSob/lXypm
zNt5/kBRCWsEMuPtu2o4CBV/+eX2X2qSl9gt/X5VZqwuUs2u2nzfqaeE6fEST80h
Hwfl+i9u6uaLtqyEh0UgsLbFItFmySR/TRGo1Z5kaxSqqwORFt8w6WCYFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHTemsX1b+RSKZrVb2tDXqnWN38MB8GA1UdIwQY
MBaAFLDJm5Ucam9q3Mho2IWpQK3wBRoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMt
M2U2OTU2ZWQyYzZhLzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMtM2U2OTU2ZWQyYzZh
LzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNo53nur
UH0x9XwDrPyCsdZFMGXJHo44pT+hx62K25a9Af0UPkGbCSpT9K/8OMHKXdd7sQ6y
9ryS+0xMvbhM/rhdB86R/uaYFaQqBF2izI8HE1WSdq9M94womv3AI5SOCfNLwn/5
ZL3gLOTR5VKvW1nrizHa9Mo05hwZiwoWXeg3MTL6j+z5hUKuJGXs+AOqIZoZjear
DZUBeGPN3qYcX1gXMPFQKJnKLggS1/YWJem01dkfmQJLO8EEA5fR8/dN7e+8GS+A
zpRE7R+ZsqHrpG3AOaNCxL9EnnisCmiR5d8lRDyCf3ZT/DSIWtGL/YMr9qqHyoU7
+HgDllatR4VK8g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:32 2026 by rpki-client