Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
File: SMOd4l_6fq8CsqbYws9uLOtWK_M.mft (raw, json)
Hash identifier: cwtINSTvVRlO+eAcpZj+TkJI4qR3XiWwAxtruttldMU=
Subject key identifier: 6D:DB:72:61:C0:AB:23:D7:5A:D5:AE:65:31:4F:1C:6A:AE:66:32:7B
Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
Certificate issuer: /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Certificate serial: 019CAAFD9151F77D8BE0F96FF043705B00A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
Manifest number: 14A3
Signing time: Sun 01 Mar 2026 20:01:10 +0000
Manifest this update: Sun 01 Mar 2026 20:01:10 +0000
Manifest next update: Mon 02 Mar 2026 20:01:10 +0000
Files and hashes: 1: RO5Y64erMnkGFS_q7s72Hi1r0FU.roa (hash: AsPEDTURfYi6VUtt4C3gZ0GGPtUCjtWSs6d5iV6qUCg=)
2: SMOd4l_6fq8CsqbYws9uLOtWK_M.crl (hash: g8Zuka2lu/PV9r9QXnYc2X8e2rofNAgQ38XXWBsNAL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:91:51:f7:7d:8b:e0:f9:6f:f0:43:70:5b:00:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Validity
Not Before: Mar 1 20:01:10 2026 GMT
Not After : Mar 2 20:01:10 2026 GMT
Subject: CN=6ddb7261c0ab23d75ad5ae65314f1c6aae66327b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:73:e4:43:24:3c:94:fa:ba:6d:6e:29:11:
66:a2:bb:24:9c:d0:86:b0:25:af:b5:15:58:f5:b0:
a5:e6:6a:41:75:5d:66:ab:41:f1:f2:36:d0:55:dd:
b8:b2:85:e5:e5:d6:27:18:f2:6b:92:14:b4:00:0e:
99:b5:dc:7f:b4:2f:1e:fc:23:f2:79:30:9d:b4:a6:
2e:fd:13:49:25:8e:f4:a1:5c:eb:28:b0:ee:32:da:
fb:b4:78:bb:2c:21:e4:1c:44:61:3e:62:d9:79:d6:
13:39:94:26:d7:f3:92:0b:e4:e3:cc:3d:6b:7d:72:
5a:67:9a:32:cd:02:57:8a:3f:8d:e8:36:de:79:7d:
9c:97:72:c2:f3:94:92:7e:22:d0:6d:24:5b:30:40:
59:b5:fc:86:46:f1:df:68:79:c4:93:29:f3:bf:7e:
5d:f7:d7:a7:30:cc:92:83:bb:1c:93:ee:3b:72:e8:
a2:c2:c1:e3:c5:a4:48:5f:f3:78:57:bd:e8:84:1f:
13:6d:87:21:4f:cd:4f:b8:b8:91:d9:08:c3:0a:3e:
f8:13:f6:02:a0:cf:b4:44:96:32:bd:a1:7a:e0:7e:
8c:ff:75:f6:d7:10:87:22:b2:24:54:97:22:2a:58:
55:51:e6:46:84:a6:54:92:2a:6e:23:8b:81:cd:d1:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DB:72:61:C0:AB:23:D7:5A:D5:AE:65:31:4F:1C:6A:AE:66:32:7B
X509v3 Authority Key Identifier:
keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8b:0b:54:4c:e1:2f:18:97:ff:d1:29:e2:ca:c5:83:54:b7:
78:bd:ce:8e:ba:9f:da:61:5e:a8:4d:79:fc:b7:50:34:e6:e1:
fd:22:38:6b:31:c7:08:c4:1d:29:de:4e:a5:5e:6f:63:dc:87:
e8:eb:fe:a6:e1:6e:2b:b6:d1:17:9c:22:90:9e:86:07:14:5b:
e1:4f:d6:7f:05:31:a2:9a:80:a9:39:9c:8d:f3:8f:32:4c:10:
da:d8:15:d7:1d:65:e1:5b:9d:e9:46:d9:1f:37:04:79:91:c8:
8f:82:a7:83:7f:66:f2:51:fc:28:27:a2:3a:ae:da:b5:4b:dc:
0d:53:d5:5f:e1:af:b7:0f:0e:08:d8:d8:ae:03:6f:da:45:20:
a1:e0:0d:d5:5c:69:e1:ef:7a:f0:2e:94:79:b3:6b:1a:1b:4c:
c2:2f:d1:88:6d:b1:b6:b1:88:a8:a2:42:cc:89:ed:8f:03:32:
01:f3:a4:23:69:c1:29:9d:04:f5:d8:ad:c0:a5:44:62:d5:7e:
5f:92:cf:6a:0a:0e:62:96:6d:ff:4a:b2:2a:8d:69:83:9d:13:
bc:44:f8:b4:e0:67:64:88:17:1e:0e:ce:de:d1:a8:54:c3:2a:
b8:f6:82:f6:b8:05:11:f6:9a:3b:3f:17:2e:7e:92:e1:75:3d:
43:1b:65:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:18 2026 by rpki-client