Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
File: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft (raw, json)
Hash identifier: dCjBkkNn/C6KUIUBOjLlKON57aC+UGHihUE7ts5icF0=
Subject key identifier: 8D:27:DE:28:DA:41:00:72:3A:90:98:CD:9E:8E:C3:4C:CD:67:C7:4B
Authority key identifier: 49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7
Certificate issuer: /CN=492999fd50a69fd0412065490f5acc75a159deb7
Certificate serial: 019CAAC640C8C468BA870CAEDC72F5B10EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
Manifest number: 17A0
Signing time: Sun 01 Mar 2026 19:00:45 +0000
Manifest this update: Sun 01 Mar 2026 19:00:45 +0000
Manifest next update: Mon 02 Mar 2026 19:00:45 +0000
Files and hashes: 1: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl (hash: rgnOmpfwUeP8P2d/2CiOSR3iNllLNAIYB1KeBo5up2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:40:c8:c4:68:ba:87:0c:ae:dc:72:f5:b1:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492999fd50a69fd0412065490f5acc75a159deb7
Validity
Not Before: Mar 1 19:00:45 2026 GMT
Not After : Mar 2 19:00:45 2026 GMT
Subject: CN=8d27de28da4100723a9098cd9e8ec34ccd67c74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:90:c8:34:f1:90:3a:55:e3:80:7a:d6:69:1f:
5e:f6:bb:c4:40:b4:6c:b4:9d:90:c0:0c:7b:2c:55:
a7:d4:69:61:8d:f4:2f:df:d4:27:3b:16:ee:51:47:
be:ba:c4:e0:34:77:f8:49:ff:e1:e2:4e:f5:90:01:
bd:66:d5:23:92:c8:ca:7a:05:de:21:d0:0b:a7:72:
23:e2:f5:f4:69:53:ca:02:55:62:e4:55:3e:68:5e:
98:de:61:e8:1f:15:5c:d9:c8:c3:a0:4e:5e:f2:bd:
a7:90:d3:9c:ce:f9:d1:89:0d:b6:a2:88:75:5f:0c:
95:09:76:d4:34:94:9b:9b:8a:3a:77:78:57:e3:f4:
ca:09:b1:1f:e4:66:ba:da:c0:e3:d6:de:a9:fc:3d:
08:df:a6:ac:2a:fb:b4:f0:c0:05:3d:b8:82:57:63:
14:2f:41:42:1c:5f:40:a3:5b:3b:02:8a:10:a5:97:
1e:64:b2:95:4e:6e:5c:15:12:a9:70:0e:c2:e7:84:
ad:3f:89:3b:e4:0c:69:46:0a:73:a0:4e:ae:f5:6f:
05:c9:87:dd:dd:e9:68:62:32:b7:98:f5:c4:50:1e:
01:a7:b5:ae:6f:88:b5:1d:4f:f7:95:83:da:ba:fd:
96:19:43:4a:0b:47:a4:14:a7:19:34:c4:b0:4b:58:
95:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:27:DE:28:DA:41:00:72:3A:90:98:CD:9E:8E:C3:4C:CD:67:C7:4B
X509v3 Authority Key Identifier:
keyid:49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ad:45:18:c5:27:00:78:d5:93:24:32:8f:57:a5:72:12:de:
db:fc:9a:30:99:b5:1c:18:fc:42:e8:7d:48:79:7b:60:87:85:
e8:c1:fa:b9:01:cc:f8:66:1a:ca:36:5e:a6:1a:ab:76:3f:f1:
1f:74:86:a6:7e:15:6f:78:ff:8d:7c:01:4c:a9:b5:2e:7d:52:
d5:84:f5:9f:a3:65:c8:87:dd:99:c1:96:86:9a:d0:0a:a3:c0:
06:6b:7d:76:a4:47:d3:c5:8d:50:0a:fa:37:d6:c4:75:f1:47:
f1:5a:1f:ea:c7:77:ad:85:cc:e0:01:20:db:1e:d3:b8:b7:08:
4c:d5:36:2f:2f:70:c7:94:eb:6d:2f:1c:ef:81:31:79:8f:72:
0c:24:77:ea:37:75:b0:c2:b8:7c:1c:8c:55:2e:59:b9:34:2b:
98:32:93:e8:85:a7:53:40:91:34:be:a9:78:ed:22:e5:b2:58:
11:9e:e8:1f:b4:14:93:c4:bd:ce:0d:ba:b6:c3:d8:15:46:61:
8a:d4:2c:81:12:c5:4c:44:88:8d:c8:7a:e6:75:01:23:39:90:
2e:53:8e:d7:ac:0c:9f:9a:44:f4:e4:de:21:1e:57:eb:aa:e8:
f3:71:c7:bc:13:ad:cb:42:75:76:6c:03:0d:b6:86:b9:1c:65:
a9:25:e3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:15 2026 by rpki-client