Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json)
Hash identifier: /t4HMUYRjuV8H7tzYCmbgEbZRZzws5eCEJTFkcgJIII=
Subject key identifier: 08:51:AF:F2:04:E0:25:0F:D6:53:CA:55:64:62:37:FA:AE:30:E6:39
Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Certificate serial: 019D99D02365106C3D1EF0FB5FC7660D19BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:00:47 +0000
Manifest this update: Fri 17 Apr 2026 05:00:47 +0000
Manifest next update: Sat 18 Apr 2026 05:00:47 +0000
Files and hashes: 1: lep9djwdRRu1s5OqW7QhYt3e1T4.roa (hash: 678VmtvJF0332iEsfIN5ZpinwDwIbKnUYiVrKvGUM/Q=)
2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: Fsfm40n7C5v+Utc5TY+wJtkW31O3JAitwksPRZnN7RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:23:65:10:6c:3d:1e:f0:fb:5f:c7:66:0d:19:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Validity
Not Before: Apr 17 05:00:47 2026 GMT
Not After : Apr 18 05:00:47 2026 GMT
Subject: CN=0851aff204e0250fd653ca55646237faae30e639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:c0:e7:b5:4d:3e:d6:24:ac:dd:46:bb:28:
e8:36:4d:a6:ea:05:55:44:9b:f1:70:6d:7e:30:2b:
26:20:fa:67:00:7d:9d:d2:47:f6:e1:e8:99:ed:2c:
68:2f:26:db:a0:e0:4e:6d:94:48:e1:28:26:86:e8:
3f:b9:ec:69:ab:81:b8:66:d7:41:25:a8:59:0b:db:
64:67:30:02:cf:6e:4c:d3:ab:3c:5e:1d:44:50:69:
97:14:ab:bd:d2:9f:4c:9a:63:28:c5:8c:2d:6d:46:
44:9d:58:6b:dc:a3:68:58:e9:28:fe:97:1c:c7:76:
a2:aa:83:bd:be:0a:c4:31:55:b9:35:45:5c:2a:23:
20:b1:45:d3:c5:bc:ce:36:4d:62:8f:6f:f6:d3:d2:
2e:1f:2e:43:e9:84:81:41:f7:bf:bf:02:3e:ea:c3:
ea:28:de:6b:ec:80:f3:ca:2c:ca:66:ba:46:bc:a9:
cd:48:3f:fb:86:2d:5f:08:5d:28:25:6a:95:89:1d:
8f:43:51:4e:48:66:a5:99:c4:be:6b:c3:8f:84:89:
9d:5e:1d:a6:64:a9:7e:78:fa:f0:2b:8e:47:e9:51:
5b:c0:9d:25:74:96:b3:17:4f:cc:3c:0e:c2:3a:bf:
06:dc:d0:78:c6:0d:d1:34:dd:00:af:2f:18:e7:66:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:51:AF:F2:04:E0:25:0F:D6:53:CA:55:64:62:37:FA:AE:30:E6:39
X509v3 Authority Key Identifier:
keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:64:d3:a9:06:02:15:cd:ef:ff:20:7c:97:88:3d:e1:e0:f3:
c8:41:65:fe:e8:9d:42:86:04:c4:62:b9:26:d3:be:7e:ad:8b:
ab:ac:61:b9:02:24:d9:60:76:37:89:c9:92:e1:f9:02:b1:a7:
93:42:d9:95:47:8b:e5:10:f9:98:5a:a9:e5:87:33:67:ec:79:
33:8d:90:67:4d:bf:36:64:cd:1a:37:b1:ca:b5:45:47:df:6c:
45:47:7c:69:cb:ca:6c:b5:a2:db:5a:4d:cd:6d:82:59:b6:e1:
db:86:42:53:59:6c:85:9c:7f:f8:4d:d0:93:35:6d:5e:aa:46:
24:00:05:80:fd:07:28:0b:2f:f4:63:87:50:e6:76:6a:da:c2:
3a:b2:7f:11:0b:9f:91:14:cb:f4:b2:96:ff:33:87:90:a1:f7:
9b:b6:04:7a:43:5f:b7:06:d3:3a:2b:f9:84:33:ec:35:36:8f:
de:23:b3:b6:b6:70:0f:30:1c:a3:78:bd:5b:2d:c1:f5:f9:95:
aa:30:ba:65:61:4a:82:ae:cc:aa:a9:d7:26:8e:71:0b:ee:f1:
c3:e0:90:68:d6:86:e3:d8:40:9f:bc:f5:3a:c4:b1:9e:5a:10:
20:21:76:45:02:89:3d:d7:0b:d6:d4:c6:be:db:91:ff:d7:bd:
49:ab:20:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:43 2026 by rpki-client