Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
File: SMHp2hp4jQ511Yp1FeApE37W_o4.mft (raw, json)
Hash identifier: pcfio9zAD44GC5ripmqkW8JKsn9hOveMX6FutHqCIII=
Subject key identifier: C6:F5:E3:5A:DD:A9:37:19:39:8E:D5:EA:A4:FD:91:A3:49:B8:AA:D1
Authority key identifier: 48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
Certificate issuer: /CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Certificate serial: 019FA9AC574294B0FB755F87D277C7A9AFE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
Manifest number: 0211
Signing time: Tue 28 Jul 2026 17:01:11 +0000
Manifest this update: Tue 28 Jul 2026 17:01:11 +0000
Manifest next update: Wed 29 Jul 2026 17:01:11 +0000
Files and hashes: 1: QfXrjLJUb_JZ4_SXYspmGSo1vhU.roa (hash: VbKsZvzC9FvlIfRYrSZ78JLt37iuRlrN1qMCaWZNw9I=)
2: SMHp2hp4jQ511Yp1FeApE37W_o4.crl (hash: LWwlgNSZ3PDRpmRJIu9lyt1pVNH8nYsRbwaQEDcMBx4=)
3: XvbscRuPqnD44ovHvZ0yezaPks0.asa (hash: uYNvUOr60t3KNGg6ZzvTHqLgdJgE2TTaGqW1+IgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:57:42:94:b0:fb:75:5f:87:d2:77:c7:a9:af:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Validity
Not Before: Jul 28 17:01:11 2026 GMT
Not After : Jul 29 17:01:11 2026 GMT
Subject: CN=c6f5e35adda93719398ed5eaa4fd91a349b8aad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:59:2c:6b:b8:d3:3d:74:43:2b:70:62:2c:
7d:5b:a1:8d:d5:ae:9b:b3:9b:6e:ed:e1:6c:e5:58:
0c:cf:d7:98:d8:ae:d6:5d:0c:66:6a:13:28:70:0c:
93:0e:03:aa:2e:76:de:f7:de:12:1b:34:0b:d4:11:
20:bd:8f:81:19:75:c8:f5:e0:74:11:b9:a0:b3:c7:
21:cc:d2:b6:8f:32:ab:60:ea:fa:2c:86:94:30:fa:
a6:dc:1a:cb:35:58:77:c2:7e:9a:09:2b:f9:6b:2f:
1b:1f:da:d1:8a:eb:fc:f1:f8:85:59:07:3c:06:1b:
f6:88:9f:97:3f:dc:da:14:94:2f:e2:34:c2:9c:13:
f3:af:13:32:88:b0:17:11:a5:a1:42:61:67:ad:70:
39:e8:5c:52:67:9f:dd:fb:31:4a:f3:50:27:f6:6a:
94:1d:05:0c:b6:f2:55:85:4e:14:8a:cf:af:27:a9:
5e:8e:91:96:65:7c:3f:b3:78:7a:74:76:0c:28:48:
d3:19:89:f1:b4:19:4a:15:42:e5:30:d5:d7:04:4a:
ab:ad:f2:f0:e8:f1:58:cc:ae:f7:8b:f1:51:47:72:
a4:62:18:e5:56:25:72:db:57:e0:44:86:c9:48:c9:
e4:5b:89:9b:ee:05:3a:32:d9:33:df:3a:d9:5a:92:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F5:E3:5A:DD:A9:37:19:39:8E:D5:EA:A4:FD:91:A3:49:B8:AA:D1
X509v3 Authority Key Identifier:
keyid:48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:08:9c:02:d4:b6:32:ec:d2:e9:0c:62:2c:71:f6:02:96:e6:
52:8d:8b:1e:94:c5:f6:99:03:b2:11:d0:a5:7a:6e:cb:45:50:
5c:86:6b:16:6a:22:05:73:05:61:a9:10:20:ee:3b:93:bb:50:
7f:d4:05:8f:db:5f:e1:4e:26:c0:66:78:b9:db:26:31:68:12:
df:b9:c5:56:e4:2f:de:5a:6e:d2:32:f2:04:4b:62:c4:a0:88:
5b:ca:66:20:d9:35:36:04:f9:3a:3b:87:b8:31:22:8f:47:ad:
e3:d9:d3:23:80:4d:1e:10:1f:2f:33:9b:d3:f3:ec:76:cf:5f:
9a:4c:b7:62:2f:1e:b5:2d:3f:96:09:8e:81:22:53:96:ff:da:
2d:42:b9:5a:f5:13:0c:90:b2:11:7d:e4:1a:67:a8:e6:6a:22:
d2:6e:ff:30:f7:22:b8:3b:3d:b1:de:d2:40:3b:d3:7c:55:c4:
11:e8:48:ae:52:ee:33:8d:65:f6:61:50:63:ce:9c:ba:2f:92:
20:99:0e:67:e5:12:a6:40:39:c2:e0:03:84:0b:30:bf:5f:90:
da:d0:61:98:e0:41:f0:f2:44:b4:8f:3a:c1:40:a5:10:0b:dc:
67:93:00:f7:71:79:99:49:20:3d:3d:59:39:f4:bd:21:01:29:
24:a2:de:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:52 2026 by rpki-client