Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: E4Uta4TNBxcxLDFCq6VKrWrxl+levifgeApbTgbKGYk=
Subject key identifier: CA:70:10:E3:FE:DA:FE:6A:44:FA:A3:D7:C9:E1:F3:8D:86:8B:62:14
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 019CAA21EC869E39EC28BD6CC8440B2E4AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 1859
Signing time: Sun 01 Mar 2026 16:01:15 +0000
Manifest this update: Sun 01 Mar 2026 16:01:15 +0000
Manifest next update: Mon 02 Mar 2026 16:01:15 +0000
Files and hashes: 1: JIuy1yADZ-WZO4oAxQqNA1Wq5AE.roa (hash: Z5LJLNpxBzdsKbIiGUAut0ZaWggo2BNQFiKt/gU6WAI=)
2: W03Nbk16lpsFFFHwZEVyGb3GdCk.roa (hash: 2uorc6ih53DwXRdYsCumZcTs0fUh5iNGE9WcBcj9AO0=)
3: km0TI5gSsaXM0ksLgopKp3QzU78.roa (hash: duTA4ngL0m0KQkmYbp4PQQqGU8slrpfiT+Ukyerp3dc=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: TmDV9HeRBQCz3ynJ1BQ8uB9kFSr/D/8FPSQTNFTAQ0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:ec:86:9e:39:ec:28:bd:6c:c8:44:0b:2e:4a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Mar 1 16:01:15 2026 GMT
Not After : Mar 2 16:01:15 2026 GMT
Subject: CN=ca7010e3fedafe6a44faa3d7c9e1f38d868b6214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:7f:2d:7f:80:52:cb:f7:cb:94:1d:50:54:
a3:07:9e:59:98:39:51:23:39:4f:9e:5b:30:36:f4:
3b:0d:74:12:38:54:a4:5e:4a:57:17:06:61:2b:a9:
af:4e:ad:31:d3:35:4b:7d:95:68:b0:e8:c1:19:b3:
ed:f7:cb:64:48:db:da:0d:46:dc:63:1d:f5:46:e4:
f5:c8:e8:ad:ca:89:e3:66:2f:db:a3:ac:e5:b4:33:
bd:91:96:f0:fb:d0:44:51:f5:31:0e:93:c4:c7:ea:
63:3a:51:b6:7d:03:78:39:e8:1a:a5:46:2e:89:a6:
86:3c:51:87:ee:96:ba:72:58:31:fe:02:87:a2:bb:
d5:4c:53:ae:3c:14:c7:4d:61:59:4c:3c:03:21:fc:
ca:b6:dd:36:60:eb:df:19:8a:7e:cf:2b:3d:74:d7:
29:61:37:84:bb:15:99:0f:ce:f1:a0:3b:d2:63:ea:
3b:8f:a0:1f:62:89:6e:1f:af:49:f9:ef:08:f1:6e:
65:b6:9d:a8:a0:56:7c:b1:b3:2a:cd:bf:83:8b:21:
6d:9e:02:f7:0e:6f:54:b9:7a:d5:c9:d7:99:a6:f3:
ea:22:3b:17:48:e2:cf:2b:56:c7:60:70:9f:d3:c7:
57:58:1d:70:c0:32:b2:fa:c9:8a:ca:27:ea:ab:b3:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:70:10:E3:FE:DA:FE:6A:44:FA:A3:D7:C9:E1:F3:8D:86:8B:62:14
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d6:e2:57:90:fb:10:c4:36:f9:e0:a3:0f:c5:62:8b:8b:81:
d0:8a:21:24:85:6f:d9:e5:88:b6:c8:c2:f9:e6:21:5b:49:07:
36:3f:f8:91:5a:94:98:b9:96:8d:af:d0:28:a8:67:e6:e8:88:
46:e7:4f:be:bc:3c:2b:d5:67:d5:82:ba:98:54:29:bf:77:37:
d3:01:9b:5f:44:39:00:f0:93:12:48:8d:e9:5b:e8:8b:d0:e9:
82:d2:c1:a0:0f:55:9f:5c:80:ff:bb:65:a1:fb:2c:ee:9d:5a:
c2:ea:60:a7:d7:76:71:75:14:f8:6d:c4:9f:a9:94:15:a9:59:
4b:90:e0:9a:7b:83:11:47:7f:c5:d0:8a:1f:51:9c:5e:8c:07:
3c:27:b7:6c:bb:bc:aa:6c:78:fd:8c:74:da:c3:b5:54:b6:3d:
90:08:bf:2c:44:28:41:ae:85:d0:e1:1c:ea:17:dd:36:92:03:
96:c8:fc:b6:10:a4:0e:1b:6c:45:96:57:32:d6:9f:0e:4f:84:
38:2a:1c:20:f3:0b:b6:8a:b0:7b:02:18:0b:d0:db:42:c4:a5:
c8:b0:db:c6:1a:7a:a1:7c:c7:00:6b:12:8b:b9:72:05:3e:2a:
5e:1a:fb:e0:10:43:b0:ee:c9:3f:b0:82:00:47:c5:db:86:29:
ff:55:9c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:04 2026 by rpki-client