Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: YJW7XqDEDFvR8z92gg7rCEZ2KST1brhsxEo4nIRUDQQ=
Subject key identifier: 64:7D:4A:42:BF:8C:2A:04:CD:F6:30:BF:A0:E5:6D:21:F2:0D:AC:16
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 019D99990B0AE263F89BD8FFD8FD005E4CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 18D5
Signing time: Fri 17 Apr 2026 04:00:37 +0000
Manifest this update: Fri 17 Apr 2026 04:00:37 +0000
Manifest next update: Sat 18 Apr 2026 04:00:37 +0000
Files and hashes: 1: JIuy1yADZ-WZO4oAxQqNA1Wq5AE.roa (hash: Z5LJLNpxBzdsKbIiGUAut0ZaWggo2BNQFiKt/gU6WAI=)
2: W03Nbk16lpsFFFHwZEVyGb3GdCk.roa (hash: 2uorc6ih53DwXRdYsCumZcTs0fUh5iNGE9WcBcj9AO0=)
3: km0TI5gSsaXM0ksLgopKp3QzU78.roa (hash: duTA4ngL0m0KQkmYbp4PQQqGU8slrpfiT+Ukyerp3dc=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: fc3T02EYqWq+OJCyzFP9BuGxBfqqTV9zzQbLiKO8B2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:0b:0a:e2:63:f8:9b:d8:ff:d8:fd:00:5e:4c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Apr 17 04:00:37 2026 GMT
Not After : Apr 18 04:00:37 2026 GMT
Subject: CN=647d4a42bf8c2a04cdf630bfa0e56d21f20dac16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:c0:49:d1:ff:a9:8e:97:3a:e4:a9:f3:48:
13:ef:4c:6f:f4:26:08:78:10:13:93:01:5d:39:53:
cc:f5:75:ff:77:c0:9e:72:0a:50:fd:f1:d3:bb:01:
51:da:fa:b0:b9:99:db:c9:42:9b:1c:18:6f:95:f2:
68:75:7b:ba:90:ed:0e:fd:ab:ed:39:11:0a:21:e9:
75:e4:9b:80:7d:6b:c0:bd:58:5a:48:5a:9c:7c:e8:
11:f3:41:04:c9:53:3e:d9:11:5f:87:5b:64:75:ef:
2b:65:31:31:1a:be:52:ef:d0:e9:c5:46:db:b1:2b:
c6:41:10:35:b8:4b:89:7e:3d:9f:b4:87:0b:04:de:
aa:6f:87:6e:99:b9:e1:96:d3:b1:f6:ae:d2:92:29:
ab:b8:8d:6d:b9:ad:d0:37:b5:5f:b2:0c:ee:6b:31:
61:e5:dd:3c:5c:78:3b:7e:aa:18:35:cb:3b:dc:47:
da:c9:1b:ae:8d:1c:f3:4f:5b:d8:af:2e:bf:dd:2a:
4a:3e:94:3a:1b:fa:8f:a9:f3:cd:33:80:c2:1a:ab:
b2:d1:06:0e:b4:23:d1:32:1b:b4:63:8f:7c:71:2b:
c8:4e:99:d0:8d:33:1c:2a:58:4a:8f:50:02:9f:d4:
41:38:79:06:4d:86:01:52:be:38:c0:d8:de:6d:d6:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7D:4A:42:BF:8C:2A:04:CD:F6:30:BF:A0:E5:6D:21:F2:0D:AC:16
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:63:b1:8d:52:8e:57:bc:b7:f8:33:d4:e7:05:d5:8d:e0:00:
cd:9a:62:6a:ce:70:33:54:43:dd:0a:be:01:13:27:4e:79:08:
89:d8:34:4c:17:53:54:cf:fd:47:aa:86:8d:e4:c6:4f:32:09:
92:b9:2a:61:59:40:74:86:6f:11:74:ab:47:a5:be:2c:76:d1:
fd:e4:89:66:3a:ce:b6:8f:4d:f4:66:18:79:03:c9:a0:ed:4b:
6c:ed:d6:98:18:9e:8e:f6:4b:56:3e:af:71:a5:86:31:c6:44:
83:84:d1:b2:66:4f:ae:91:9c:cb:60:9f:e1:82:c3:48:1d:79:
21:0b:38:57:19:d5:bf:ca:98:d5:7d:82:58:96:d9:58:a5:1c:
c3:39:34:2c:64:21:a8:61:81:41:7b:30:42:cf:4b:3a:1c:8d:
1d:8a:e6:27:dd:2c:d3:a1:e0:74:f9:23:e5:05:12:e8:79:a1:
1f:45:bf:f0:2c:3b:6f:ed:c0:eb:ec:79:14:19:70:fb:a8:ea:
b2:ce:e2:cb:c2:20:4a:9f:da:21:bb:cc:47:ad:43:ae:5f:b6:
ae:73:6d:e3:b9:03:6d:cf:9e:fd:8c:86:4e:df:e5:3f:e4:2e:
57:41:13:6b:76:ec:a5:4a:d2:67:e8:91:6e:59:5e:f6:b6:50:
75:59:b4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:50 2026 by rpki-client