Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json)
Hash identifier: il32RA8DNvt3r+hGTSzveeEqUkxxGNrUC13SnAYJDJU=
Subject key identifier: 6C:F6:5E:1C:13:88:B8:D2:74:60:72:B1:28:70:0B:9E:B7:DF:E6:8B
Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Certificate serial: 019CAE35B6270957B7F0749ADB2F5FD93C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 11:01:21 +0000
Manifest this update: Mon 02 Mar 2026 11:01:21 +0000
Manifest next update: Tue 03 Mar 2026 11:01:21 +0000
Files and hashes: 1: lep9djwdRRu1s5OqW7QhYt3e1T4.roa (hash: 678VmtvJF0332iEsfIN5ZpinwDwIbKnUYiVrKvGUM/Q=)
2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: G9OLxCQv2HQJfSeDg5uha1HqCilqMl6a8uQY2+zAULA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:b6:27:09:57:b7:f0:74:9a:db:2f:5f:d9:3c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Validity
Not Before: Mar 2 11:01:21 2026 GMT
Not After : Mar 3 11:01:21 2026 GMT
Subject: CN=6cf65e1c1388b8d2746072b128700b9eb7dfe68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:55:2f:d6:8e:82:f5:61:25:36:ca:2d:5f:
54:8f:49:cf:27:fa:fd:49:7f:d8:af:b4:e5:df:ca:
55:56:fc:8e:e5:75:0f:1e:aa:24:2c:b3:2f:b4:c3:
d0:00:b6:7d:05:17:6d:5c:86:6a:25:64:3d:97:78:
46:89:98:89:30:3d:fd:fb:b9:5f:02:e0:10:b4:c6:
61:cc:80:4c:bc:fc:51:26:0f:cb:a6:c5:66:97:84:
70:27:2a:aa:fe:91:68:d3:a7:3c:d3:85:77:60:c7:
ee:33:8f:e5:24:2b:9b:e0:76:1e:32:f9:3b:8c:24:
fa:9a:45:53:4a:04:fb:79:cf:fe:77:02:d2:09:1a:
5a:1c:b6:c9:6d:e6:f6:a3:11:aa:cf:62:75:6c:e7:
cb:44:d9:25:c5:36:90:f6:ef:2f:0f:be:13:75:c9:
19:67:48:0a:f5:f7:03:b9:e0:a3:ac:4b:0f:af:7e:
36:ef:77:c2:f8:53:7d:8a:ba:fd:40:df:e6:6e:49:
8d:cd:91:fc:2b:9b:94:ee:2f:73:f3:3a:72:f8:fd:
50:9c:e0:19:60:56:93:2e:ea:3d:05:59:63:e7:31:
07:be:05:a5:b5:1f:21:ea:ca:5d:ab:39:cb:d9:7b:
b3:fd:fb:bd:fe:b0:0a:09:f4:64:60:d2:61:22:39:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F6:5E:1C:13:88:B8:D2:74:60:72:B1:28:70:0B:9E:B7:DF:E6:8B
X509v3 Authority Key Identifier:
keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b2:e8:df:d4:86:17:44:ae:12:f4:c5:bc:be:37:52:1d:9f:
12:1a:7d:12:a2:b6:2f:c3:ab:6e:d9:5e:41:39:02:ce:cb:95:
32:bc:de:c1:a7:de:ae:19:52:70:93:ed:52:78:12:8e:ae:d8:
8f:03:e9:6e:58:6d:e3:41:82:68:c7:ec:14:f8:5f:43:7f:fe:
f7:df:74:41:bd:83:2c:20:05:7f:59:ca:f2:62:dc:f1:0e:cd:
27:1c:c3:01:38:ee:6d:50:c0:30:9e:db:e1:03:51:23:df:4b:
d3:f8:8f:4f:22:a5:f7:15:a7:f7:f6:c3:3d:5c:84:83:fe:b2:
93:ad:2c:e9:37:d6:0b:8e:03:10:1a:d9:39:5a:eb:9a:c5:11:
a3:41:de:75:be:d6:09:62:19:44:5e:11:99:2c:da:9c:6c:4c:
72:2e:1f:91:ac:4a:8f:d3:93:de:79:94:79:7d:07:7f:2a:4c:
ee:84:53:a5:94:27:dd:64:04:70:81:94:44:e4:40:79:73:b6:
e7:2a:f9:5f:ce:41:c4:cc:a6:0c:39:6f:9e:de:17:4e:86:cf:
3f:42:96:01:78:2c:03:54:d5:47:36:89:71:8f:dd:9f:06:cb:
4a:f3:a6:4e:3b:84:9f:13:2c:8c:87:d0:e1:a5:3c:50:59:96:
2f:03:40:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:17 2026 by rpki-client