Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.mft
File: sMyV_ELz2Bkg9GSw8gyKUgPyHjA.mft (raw, json)
Hash identifier: HlukqOSN6jUmzzoOs9495/S1Ek5RWYkDtN2GBZ7s7qc=
Subject key identifier: F5:08:E0:9A:11:26:54:89:61:93:5C:D1:C0:81:F6:2B:11:F5:FA:57
Authority key identifier: B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
Certificate issuer: /CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Certificate serial: 019D9A74B1298BB3DAE753076F8791C22657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.mft
Manifest number: 0AD0
Signing time: Fri 17 Apr 2026 08:00:31 +0000
Manifest this update: Fri 17 Apr 2026 08:00:31 +0000
Manifest next update: Sat 18 Apr 2026 08:00:31 +0000
Files and hashes: 1: gUx1Nw3tICZQ91Z66Dc_ZM3oKZU.roa (hash: qMVuUtEMmH0F6gZUJxcIjMLQShefrpmgEA8LuMyQ4iE=)
2: sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl (hash: h/OSH2QDg7uFthFQOLRdT7TlQPb2MNQfY/ouxAS+65s=)
3: yggEv9ui6ICKlWbapXbZI_19UxI.roa (hash: wbaiUJKmCM34k4K4JfRSlpVn14tN3ETSC3SnnG+xIY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b1:29:8b:b3:da:e7:53:07:6f:87:91:c2:26:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Validity
Not Before: Apr 17 08:00:31 2026 GMT
Not After : Apr 18 08:00:31 2026 GMT
Subject: CN=f508e09a1126548961935cd1c081f62b11f5fa57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f4:14:62:24:af:f4:62:80:e1:89:3c:d7:14:
e4:b3:29:b1:d4:1a:86:fa:9e:01:d5:4d:e6:84:9e:
2c:b9:17:4c:ab:71:84:6a:8f:0c:5e:ad:a9:91:c9:
f7:4d:ed:16:32:ba:d7:0f:c0:81:c5:25:f5:7f:8c:
b7:cf:5a:0b:53:4a:44:4e:d2:fd:28:3a:b3:88:92:
04:7d:0e:32:6d:d1:c3:fa:12:d4:b5:19:7e:58:f8:
b3:96:86:ce:d9:b5:86:cb:a9:54:86:2c:bf:06:75:
2e:99:44:45:cb:6f:11:2c:56:6b:e1:87:52:ec:eb:
4d:02:4d:48:f2:c9:c5:dd:6f:b9:0f:01:89:4a:73:
dc:fc:f5:a9:0a:36:31:3f:90:2a:6a:99:49:19:06:
7a:b6:e4:23:31:b5:81:0b:30:1e:b6:e7:82:18:97:
22:24:43:5c:da:07:79:6d:d9:c6:47:67:fa:b1:85:
a8:e3:97:23:07:e7:61:4a:7a:19:2f:38:9c:9c:be:
60:98:bd:81:a2:79:22:ae:a2:c3:02:67:02:17:19:
69:e3:86:8e:21:95:e1:6a:93:24:2e:bd:53:8d:5f:
26:29:79:d6:70:29:10:ac:aa:c2:0e:80:e8:f6:69:
37:73:b6:58:19:62:dc:5c:d7:48:56:48:f8:ac:63:
42:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:08:E0:9A:11:26:54:89:61:93:5C:D1:C0:81:F6:2B:11:F5:FA:57
X509v3 Authority Key Identifier:
keyid:B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c1:0c:da:89:3c:bc:77:18:f3:df:3c:c5:6f:b1:8e:dd:3a:
69:a1:b0:ec:40:4f:fc:a1:06:58:60:2d:10:43:53:63:dd:a4:
2a:68:5e:a3:29:f8:db:0c:c5:af:d5:71:c3:a8:19:8f:ce:b9:
85:8d:25:f0:62:64:dc:09:ff:b0:e1:09:c9:d6:04:de:d6:5c:
db:8b:bc:80:1e:4a:b0:be:0f:1b:db:1a:2b:86:37:9c:8e:65:
4e:3c:45:3f:cd:e3:9d:e9:cc:bb:6f:57:65:bd:60:ff:fd:64:
e0:7a:11:82:f2:a6:50:0c:ed:1d:a6:58:90:fa:70:1e:43:94:
e0:ca:4d:b1:eb:67:66:0c:d0:d5:09:13:2f:72:38:03:d8:8e:
18:b3:ef:69:27:bd:da:b5:fd:20:50:90:af:00:05:14:ff:cc:
76:d9:c3:0e:26:70:79:14:8d:fa:25:c5:7e:8a:c4:35:11:7d:
4d:33:4a:e3:06:46:ae:23:c8:91:24:d1:9f:a8:75:06:e8:c7:
51:34:78:5b:f6:6f:cf:7c:b2:c1:b9:e3:6a:bf:37:69:85:7d:
51:d3:b1:75:39:21:61:dc:2e:7e:83:ee:ab:b4:21:f2:fc:aa:
3c:a1:eb:bb:d9:93:47:38:d2:a9:a5:b0:eb:da:5b:82:4e:2f:
12:99:97:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:17:29 2026 by rpki-client