Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
File: smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json)
Hash identifier: LbAI9qVSqQBljrl5XhjOJRPNUDGhh/dBCYqSx4VEVM4=
Subject key identifier: 8E:CF:A5:48:F2:2E:94:33:22:93:6A:51:F2:62:86:9E:13:EA:23:1E
Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
Certificate issuer: /CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Certificate serial: 019CADC75E2AE43F9645CC4634210717C05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
Manifest number: 02DA
Signing time: Mon 02 Mar 2026 09:00:49 +0000
Manifest this update: Mon 02 Mar 2026 09:00:49 +0000
Manifest next update: Tue 03 Mar 2026 09:00:49 +0000
Files and hashes: 1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: 17F6mk9ArK+whrydJtjGYUMiNRXdBU261ag8VEDIoHc=)
2: us0cCXgOVilyc_-btAWVQ_9HSm0.roa (hash: FpuhhqsWI6lqjf12zy/aTBMSr3k50lCdEcAaN9Dak/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:5e:2a:e4:3f:96:45:cc:46:34:21:07:17:c0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Validity
Not Before: Mar 2 09:00:49 2026 GMT
Not After : Mar 3 09:00:49 2026 GMT
Subject: CN=8ecfa548f22e943322936a51f262869e13ea231e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:39:64:3d:5a:b6:4a:dd:91:1d:3d:f5:70:
9f:6f:07:6b:d0:85:6f:37:43:7a:79:98:67:03:5d:
b7:20:d3:25:62:cb:79:4a:84:dd:c7:92:69:71:bc:
47:18:c2:49:c5:c2:45:b6:11:bf:a6:4b:20:ac:23:
d8:ea:b4:14:c5:09:d2:19:ff:69:d1:bb:3f:b0:bc:
44:59:86:d9:53:8f:eb:1f:51:35:49:3e:03:12:b3:
2f:26:7f:62:16:fe:a2:c9:ee:ee:e7:83:a4:57:90:
56:24:25:f4:94:71:a0:1c:ee:27:ed:37:ad:7f:74:
95:74:bf:b2:19:9c:03:e9:36:1d:4e:6a:7a:84:e4:
6c:9c:08:da:d8:42:d1:3c:c3:ba:ed:ea:4d:b0:54:
c5:70:e0:89:90:f8:21:bc:4f:92:b9:30:ef:77:23:
fe:fb:bc:e6:4f:53:4f:bd:94:d7:f2:3d:3f:5b:21:
d6:c6:2a:eb:0d:7d:6a:0f:41:88:7c:d7:06:56:26:
d4:bc:39:11:b6:b9:4b:97:5d:5e:18:92:38:26:17:
43:f1:ee:74:a1:2b:a7:16:08:38:71:f2:3c:28:19:
ca:e4:43:b3:5a:40:35:21:f6:2a:8c:5d:ae:51:0d:
3c:6d:38:1f:a9:14:d7:c9:07:14:a4:9f:00:5e:23:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CF:A5:48:F2:2E:94:33:22:93:6A:51:F2:62:86:9E:13:EA:23:1E
X509v3 Authority Key Identifier:
keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:61:ad:39:3c:05:b7:81:e0:da:d9:97:39:a1:2f:00:50:90:
0b:78:a0:45:25:a4:74:b8:04:46:d1:09:36:2c:71:f5:b8:9d:
71:5d:99:08:45:f9:d1:f5:4e:f3:b1:71:a2:10:2b:ec:bb:09:
de:83:eb:04:04:9f:26:b6:6a:aa:fa:32:9b:b2:90:e4:25:50:
89:ef:16:6a:d0:95:4e:ae:9c:ce:35:49:99:be:33:cd:3f:0b:
31:15:df:58:7b:1e:03:23:a0:fe:54:8c:bb:f5:45:3f:d8:1a:
a2:9a:f1:ca:7e:3f:4d:40:aa:b3:cd:fc:b7:c6:fd:f8:fc:ca:
7f:ef:19:27:13:ea:0b:74:b9:5d:7a:6a:47:57:d4:90:91:9b:
01:6a:0d:63:b3:80:54:19:db:40:30:2a:eb:cf:d2:eb:c2:fc:
92:d0:3a:6e:48:69:57:04:5e:fe:fc:11:93:cf:11:09:9b:48:
40:bb:77:5f:08:cb:5c:d4:de:df:a6:e5:ec:72:a1:0f:0f:4d:
56:20:37:00:8f:87:45:7d:a3:c6:f8:54:ef:a7:17:a5:9d:0e:
9e:86:d7:af:ce:de:6e:f7:98:dc:12:22:6a:16:58:3d:60:b1:
8c:19:07:32:03:c7:69:72:aa:14:19:52:10:60:55:eb:55:01:
4a:95:ed:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:57:09 2026 by rpki-client