Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
File: SMHp2hp4jQ511Yp1FeApE37W_o4.mft (raw, json)
Hash identifier: kOlnJIGxMc7xCNY+FWRjt+nxoeK8lXc0PG6hZa0smnA=
Subject key identifier: DB:18:84:64:38:27:EE:AB:16:72:27:51:52:DB:2D:E5:80:9A:64:16
Authority key identifier: 48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
Certificate issuer: /CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Certificate serial: 019CA9462904CD126F7CB81AB72BC72A2C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
Manifest number: 83
Signing time: Sun 01 Mar 2026 12:01:13 +0000
Manifest this update: Sun 01 Mar 2026 12:01:13 +0000
Manifest next update: Mon 02 Mar 2026 12:01:13 +0000
Files and hashes: 1: QfXrjLJUb_JZ4_SXYspmGSo1vhU.roa (hash: VbKsZvzC9FvlIfRYrSZ78JLt37iuRlrN1qMCaWZNw9I=)
2: SMHp2hp4jQ511Yp1FeApE37W_o4.crl (hash: Tf0MjnyuTcNh/JmKu2FanWlkA+oJToM2joMIuzsOPXo=)
3: XvbscRuPqnD44ovHvZ0yezaPks0.asa (hash: uYNvUOr60t3KNGg6ZzvTHqLgdJgE2TTaGqW1+IgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:29:04:cd:12:6f:7c:b8:1a:b7:2b:c7:2a:2c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e
Validity
Not Before: Mar 1 12:01:13 2026 GMT
Not After : Mar 2 12:01:13 2026 GMT
Subject: CN=db1884643827eeab1672275152db2de5809a6416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:e2:68:b3:8d:3b:4e:ca:9a:18:68:8a:1c:
21:1e:ac:bf:e9:1a:e1:26:d3:b7:40:8c:e4:ff:d7:
88:69:be:e1:29:85:50:9a:c3:ba:8b:13:25:95:ae:
59:33:fb:f3:11:5f:d6:a4:74:d3:21:00:6e:70:e9:
21:a7:86:90:e4:a4:a8:40:1c:18:2f:2d:38:29:60:
e7:61:b1:68:87:ed:0e:c9:45:33:1b:9d:81:40:57:
90:72:4d:30:b8:6d:93:2f:a7:94:1b:7e:d7:87:f2:
38:2b:32:5c:c8:b2:f0:83:0c:dc:94:a5:f3:51:76:
68:1a:4c:4b:b9:86:a8:b2:04:48:b1:2c:5c:4f:58:
ef:3b:59:29:0e:f2:9a:79:8c:e9:cd:34:c8:59:99:
0e:9b:e2:86:55:a9:21:d4:8e:2a:5e:29:f3:00:70:
4e:2a:77:e1:98:f3:71:3c:be:d5:dc:fb:85:64:ce:
ba:0f:1b:a9:8e:ee:48:4f:2a:29:66:3a:90:73:e3:
d7:b2:e6:be:e7:5d:ac:c5:06:09:a7:99:2a:dc:e9:
35:fe:ff:ee:c0:f9:5c:91:fb:64:73:20:26:97:21:
53:4e:70:88:05:6a:1c:21:a6:b1:d0:71:7d:89:24:
94:37:16:c7:77:83:42:49:04:ec:89:48:0e:3e:cd:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:18:84:64:38:27:EE:AB:16:72:27:51:52:DB:2D:E5:80:9A:64:16
X509v3 Authority Key Identifier:
keyid:48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:45:f6:b8:f0:3b:2d:3a:aa:3f:4c:6d:8b:78:ec:fa:b4:e5:
e6:a3:72:8c:65:86:e9:f2:41:f5:ee:17:c0:0f:a0:fd:b9:64:
89:b9:6f:a7:c4:5a:98:a0:7b:99:2e:eb:93:7e:c2:3c:42:dd:
b4:e5:5f:3e:75:b8:d6:eb:14:09:5a:35:d5:d6:5a:70:3f:ee:
52:b9:e1:77:12:4f:d7:22:9c:f4:8b:8d:80:e9:84:72:84:ab:
ed:4d:b4:96:dc:d1:1d:09:d6:6c:a0:73:50:a7:2b:f8:93:bc:
79:f8:47:dd:06:d9:d7:68:91:a9:8f:42:4e:19:65:e0:fc:3a:
b1:24:0a:76:52:a3:65:d6:ed:03:2c:cc:92:2d:d1:9d:90:7e:
71:d9:4e:b6:ef:68:f0:28:c6:bf:5b:c1:99:7a:b4:99:b2:38:
70:bb:a8:58:e8:37:44:93:c4:f2:8a:1e:11:d1:d5:bd:b5:fd:
08:11:72:30:19:94:2b:86:79:36:c0:ea:f2:62:f9:59:5d:0e:
af:20:5f:6b:5c:fa:6b:e8:40:78:a8:a1:c3:c5:3b:4c:c0:9d:
9a:d4:9e:5f:71:75:16:2c:eb:1c:d6:63:3f:04:67:19:e2:a1:
31:18:01:29:ff:e5:96:bd:02:28:c5:91:e5:14:78:d1:52:16:
23:d3:c2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:35 2026 by rpki-client