Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
File: SMHp2hp4jQ511Yp1FeApE37W_o4.mft (raw, json)
Hash identifier: K9cAPssV4BX+p29XLldHQ7ZlC2tj/67EAAR5/OUdyK8=
Subject key identifier: 8D:C5:DF:80:ED:00:0C:5A:6A:ED:9B:C6:33:CE:B6:84:05:37:83:FF
Authority key identifier: 48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
Certificate issuer: /CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Certificate serial: 019EBE48495FA0596157D71FC5CC99755F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
Manifest number: 0197
Signing time: Sat 13 Jun 2026 00:01:08 +0000
Manifest this update: Sat 13 Jun 2026 00:01:08 +0000
Manifest next update: Sun 14 Jun 2026 00:01:08 +0000
Files and hashes: 1: QfXrjLJUb_JZ4_SXYspmGSo1vhU.roa (hash: VbKsZvzC9FvlIfRYrSZ78JLt37iuRlrN1qMCaWZNw9I=)
2: SMHp2hp4jQ511Yp1FeApE37W_o4.crl (hash: UVctrQtbSzQojyaxditShpX+1r5fd7QiWyeLfQQGvA4=)
3: XvbscRuPqnD44ovHvZ0yezaPks0.asa (hash: uYNvUOr60t3KNGg6ZzvTHqLgdJgE2TTaGqW1+IgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:49:5f:a0:59:61:57:d7:1f:c5:cc:99:75:5f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Validity
Not Before: Jun 13 00:01:08 2026 GMT
Not After : Jun 14 00:01:08 2026 GMT
Subject: CN=8dc5df80ed000c5a6aed9bc633ceb684053783ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:df:2c:e9:e4:f9:5c:6d:bd:d1:39:55:36:
6a:bb:f5:cb:9e:b4:bd:1d:bc:55:78:a5:58:f4:cf:
51:32:12:f9:be:66:bc:93:af:de:c0:65:47:c8:7d:
f9:c6:06:7d:3f:05:b0:8a:cc:53:50:53:db:ee:1f:
77:76:8a:e6:f9:6a:51:8c:b7:26:d6:56:4e:b8:d6:
43:9c:82:5a:f5:ea:28:1c:95:c8:f4:4c:e6:13:4a:
aa:d7:dc:d1:6d:21:a8:e7:08:31:c0:33:0b:c0:89:
f7:eb:c0:3f:67:18:af:92:87:b1:bf:a8:34:c9:b6:
a2:06:f4:b8:65:fa:1c:f5:b7:8c:af:b6:dd:a4:bb:
bf:1a:10:68:b1:5f:4d:80:7a:b0:84:2c:54:4c:ca:
ca:40:ec:08:a7:9f:33:cf:3f:77:b8:48:97:57:07:
31:86:4a:32:b6:61:06:ec:a2:e7:68:06:d3:a6:23:
a4:94:dc:79:5a:25:2d:8d:84:0b:9d:22:26:8e:bc:
e6:eb:4b:01:2c:21:89:df:bc:1c:fc:1a:a5:ec:42:
70:f2:4e:85:83:46:8c:e6:ba:6a:b4:30:50:7b:a9:
d9:25:6c:b7:3e:e1:db:88:36:a3:b0:3f:d1:0a:3a:
ef:de:b8:8d:18:88:f3:33:0d:b4:bc:59:d6:bb:91:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C5:DF:80:ED:00:0C:5A:6A:ED:9B:C6:33:CE:B6:84:05:37:83:FF
X509v3 Authority Key Identifier:
keyid:48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:94:89:f4:87:6e:43:d8:81:73:c9:83:ab:b5:fe:5a:2f:fd:
b7:35:d2:6e:2c:5e:40:f7:67:f0:3b:13:1a:ec:18:6e:b8:48:
18:e1:b8:4d:30:7a:66:d1:1f:a4:f8:ee:d3:54:e4:f5:f5:ce:
31:ea:37:a5:0f:b0:12:d3:e2:d4:00:79:b6:e3:3c:61:fe:7f:
26:97:60:b0:7f:47:52:1c:4d:3d:8f:61:9b:24:9d:e4:d3:4e:
db:4e:2a:18:93:8e:e9:89:21:f0:e8:06:3d:95:6d:86:96:34:
67:ea:55:30:da:fb:49:3f:d7:b6:b3:75:43:2a:3b:fb:10:c1:
8b:15:86:2b:e9:88:64:e1:15:d4:36:41:24:67:55:d5:d2:a6:
04:5d:2e:8c:ea:4a:e4:54:1a:97:c9:ce:03:8b:98:61:92:9b:
88:e7:4a:b1:85:9f:de:d7:26:82:87:b1:a2:b0:80:61:7c:57:
a9:19:69:7b:09:76:16:29:d7:63:4f:76:44:fe:21:7c:ce:9a:
0b:be:be:eb:aa:84:35:e8:95:06:d6:15:b4:cb:2a:4b:20:77:
a8:65:49:6f:8b:eb:76:ee:e2:a5:30:60:6c:fc:b6:7b:5c:db:
b8:0c:74:a3:04:67:5c:84:01:b4:7e:20:6f:9a:af:83:15:1a:
90:84:6c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+SElfoFlhV9cfxcyZdV9CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YzFlOWRhMWE3ODhkMGU3NWQ1OGE3NTE1ZTAyOTEzN2Vk
NmZlOGUwHhcNMjYwNjEzMDAwMTA4WhcNMjYwNjE0MDAwMTA4WjAzMTEwLwYDVQQD
Eyg4ZGM1ZGY4MGVkMDAwYzVhNmFlZDliYzYzM2NlYjY4NDA1Mzc4M2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqErfLOnk+VxtvdE5VTZqu/XLnrS9
HbxVeKVY9M9RMhL5vma8k6/ewGVHyH35xgZ9PwWwisxTUFPb7h93dorm+WpRjLcm
1lZOuNZDnIJa9eooHJXI9EzmE0qq19zRbSGo5wgxwDMLwIn368A/Zxivkoexv6g0
ybaiBvS4Zfoc9beMr7bdpLu/GhBosV9NgHqwhCxUTMrKQOwIp58zzz93uEiXVwcx
hkoytmEG7KLnaAbTpiOklNx5WiUtjYQLnSImjrzm60sBLCGJ37wc/Bql7EJw8k6F
g0aM5rpqtDBQe6nZJWy3PuHbiDajsD/RCjrv3riNGIjzMw20vFnWu5GRKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3F34DtAAxaau2bxjPOtoQFN4P/MB8GA1UdIwQY
MBaAFEjB6doaeI0OddWKdRXgKRN+1v6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU01IcDJocDRqUTUxMVlwMUZlQXBFMzdXX280LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kOGU3ZjUtM2I3Zi00MTBlLWE2ZDct
ZDliNWNjMmEwOTZmLzEvU01IcDJocDRqUTUxMVlwMUZlQXBFMzdXX280Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9kOGU3ZjUtM2I3Zi00MTBlLWE2ZDctZDliNWNjMmEwOTZm
LzEvU01IcDJocDRqUTUxMVlwMUZlQXBFMzdXX280LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZSJ9Idu
Q9iBc8mDq7X+Wi/9tzXSbixeQPdn8DsTGuwYbrhIGOG4TTB6ZtEfpPju01Tk9fXO
Meo3pQ+wEtPi1AB5tuM8Yf5/JpdgsH9HUhxNPY9hmySd5NNO204qGJOO6Ykh8OgG
PZVthpY0Z+pVMNr7ST/XtrN1Qyo7+xDBixWGK+mIZOEV1DZBJGdV1dKmBF0ujOpK
5FQal8nOA4uYYZKbiOdKsYWf3tcmgoexorCAYXxXqRlpewl2FinXY092RP4hfM6a
C76+66qENeiVBtYVtMsqSyB3qGVJb4vrdu7ipTBgbPy2e1zbuAx0owRnXIQBtH4g
b5qvgxUakIRsow==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:06:42 2026 by rpki-client