Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
File: SMHp2hp4jQ511Yp1FeApE37W_o4.mft (raw, json)
Hash identifier: plaht/J7aZjLhqg987P+Akel8PjGPENeAYAEyt8+56A=
Subject key identifier: A6:7A:D4:E7:43:83:A7:55:7A:D6:6F:EC:68:70:B5:A3:05:16:DC:F0
Authority key identifier: 48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
Certificate issuer: /CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Certificate serial: 01A0C58E454C3E0A7FFC08D9F67639E938F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
Manifest number: 02A4
Signing time: Mon 21 Sep 2026 20:00:30 +0000
Manifest this update: Mon 21 Sep 2026 20:00:30 +0000
Manifest next update: Tue 22 Sep 2026 20:00:30 +0000
Files and hashes: 1: QfXrjLJUb_JZ4_SXYspmGSo1vhU.roa (hash: VbKsZvzC9FvlIfRYrSZ78JLt37iuRlrN1qMCaWZNw9I=)
2: SMHp2hp4jQ511Yp1FeApE37W_o4.crl (hash: wNivFtNnwj1kLrmXpc69GzyWmCTuAMvv7795YMi02Vo=)
3: XvbscRuPqnD44ovHvZ0yezaPks0.asa (hash: uYNvUOr60t3KNGg6ZzvTHqLgdJgE2TTaGqW1+IgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:45:4c:3e:0a:7f:fc:08:d9:f6:76:39:e9:38:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Validity
Not Before: Sep 21 20:00:30 2026 GMT
Not After : Sep 22 20:00:30 2026 GMT
Subject: CN=a67ad4e74383a7557ad66fec6870b5a30516dcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:40:33:7c:72:b8:60:7f:e8:4e:5a:2e:0c:af:
5d:cf:01:9d:8b:03:27:65:02:ff:1e:a1:36:f8:fd:
83:19:f7:b4:0a:72:cb:a4:ae:ef:5b:90:27:ca:5c:
90:66:48:e0:43:61:41:75:45:a0:bb:d4:d4:d6:f2:
c9:07:98:b8:33:37:27:ba:99:9c:22:de:04:c4:4c:
a2:71:df:fc:c1:94:37:69:2a:0b:72:9b:bd:ed:d1:
4e:ed:01:c6:d5:9e:08:62:37:d4:73:0e:15:0f:76:
1b:2e:2f:cc:75:4a:93:a9:c9:f6:d4:86:5f:ec:90:
e0:30:58:51:5b:60:bb:6a:61:8d:24:fd:be:af:35:
de:ec:ba:e3:74:f5:1b:c4:68:47:7b:5c:4a:6c:8f:
f9:e5:c8:05:0f:c1:a4:8f:2f:db:04:43:b7:39:ef:
22:48:95:36:84:b0:5a:0f:5e:15:02:75:9e:ad:2b:
9f:55:97:4a:a6:35:05:f5:46:1a:57:ad:b5:32:e7:
3d:8f:09:c8:4c:95:75:04:ea:a2:46:f4:2e:98:09:
b5:6a:c4:51:5b:74:cb:26:d4:ac:e9:3a:9c:13:7e:
c5:c3:c4:bc:1b:59:4a:6f:ce:f7:5a:03:d3:79:32:
0f:0c:2e:a2:28:2a:c8:25:95:56:3f:b1:5d:b1:51:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7A:D4:E7:43:83:A7:55:7A:D6:6F:EC:68:70:B5:A3:05:16:DC:F0
X509v3 Authority Key Identifier:
keyid:48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:7f:2d:a9:15:d3:ea:74:aa:35:99:c6:b6:35:32:fd:69:5a:
e4:21:14:3e:5c:f1:56:3d:28:cb:59:28:3d:1f:f1:6b:06:a4:
d0:c8:3f:26:43:54:c1:73:7d:12:88:d9:9e:e5:96:c6:41:7e:
3a:e7:10:13:8d:f8:77:2f:67:9d:c4:68:27:41:38:f3:d7:88:
1c:46:37:1f:e1:68:c4:09:a7:a7:90:02:d1:6c:f8:9f:1f:0e:
33:79:6d:54:3e:09:67:b6:4e:19:69:aa:59:2a:e1:9b:4d:df:
bc:d4:11:d2:47:2e:c6:46:b9:d9:92:b2:99:75:9f:a8:b6:9b:
d7:07:12:86:39:ff:6f:32:da:d5:69:02:81:b7:ba:30:14:84:
17:4c:bf:4f:9d:1a:ac:f8:26:27:90:59:06:36:c1:a0:a0:cb:
ff:e3:5d:86:ac:05:1a:e6:b3:55:ac:33:9d:0d:25:7b:37:ad:
fa:2f:3d:df:5b:20:cf:29:de:3b:3e:8b:aa:a7:b1:56:4b:72:
33:c4:7f:8e:76:ba:cb:8f:aa:77:bc:ac:d3:2b:6d:8d:38:4a:
93:82:03:a1:13:66:94:95:30:df:a2:e5:cc:4f:b9:8d:7a:7f:
d1:56:d9:ec:b2:04:ec:19:36:81:b5:0c:7a:31:23:54:fb:47:
e0:f0:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:31:10 2026 by rpki-client