Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
File: SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft (raw, json)
Hash identifier: 8Jm/77tbpZF62sMNDzUjyYNZyEq80nZV7oIYmmbE0RI=
Subject key identifier: 3B:A6:3A:E9:9F:08:EE:42:31:6F:E3:9C:00:60:B1:11:17:AF:21:AF
Authority key identifier: 4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
Certificate issuer: /CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Certificate serial: 019CAB6AE567919D2C87972C27DBFB0C4923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
Manifest number: 1039
Signing time: Sun 01 Mar 2026 22:00:35 +0000
Manifest this update: Sun 01 Mar 2026 22:00:35 +0000
Manifest next update: Mon 02 Mar 2026 22:00:35 +0000
Files and hashes: 1: SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl (hash: KVEKpILi9wcn1yvlPk+5ddS+US7rZxW1Cd6mFx/CMwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e5:67:91:9d:2c:87:97:2c:27:db:fb:0c:49:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Validity
Not Before: Mar 1 22:00:35 2026 GMT
Not After : Mar 2 22:00:35 2026 GMT
Subject: CN=3ba63ae99f08ee42316fe39c0060b11117af21af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:72:e4:53:7d:e9:e9:74:7b:b7:39:bb:12:
cf:36:3c:a4:b3:9c:e5:09:09:08:8f:0d:7f:62:26:
f7:4f:20:47:0d:55:0b:e1:5c:0f:7f:ed:99:7d:b6:
aa:0a:8b:1d:12:c7:64:e3:67:08:29:7b:b6:20:d6:
6b:6c:ef:23:54:2f:20:21:99:cc:3a:f8:25:7b:5b:
23:c7:8f:b6:c8:37:16:1c:13:83:35:c5:af:3b:c8:
32:50:37:e8:1b:63:3e:b2:1b:16:fc:0a:76:b8:cf:
d1:eb:dd:95:1a:3d:29:0a:cd:4e:dc:46:63:14:a7:
ee:df:f2:58:0a:cf:63:7e:67:d3:cb:94:30:df:09:
c7:06:32:25:20:18:a2:5f:ba:f4:df:fd:73:23:5d:
17:e3:b3:73:3c:3d:c6:74:35:0c:89:dd:89:49:a0:
1a:bf:8a:a5:fd:18:8b:9a:bf:9f:1b:55:e1:1d:96:
a0:ec:b1:eb:5b:fd:8d:35:1c:ff:9a:4b:9d:a7:9f:
80:56:3c:7c:2c:41:7b:62:83:f3:b0:29:5d:78:69:
cd:7e:1f:f4:da:07:0c:b6:8f:73:8d:53:99:39:6c:
61:f9:a1:d8:79:07:5b:ee:5a:e6:eb:e0:56:f5:64:
76:33:c4:ad:b3:83:87:29:bd:10:7c:58:3f:66:0c:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A6:3A:E9:9F:08:EE:42:31:6F:E3:9C:00:60:B1:11:17:AF:21:AF
X509v3 Authority Key Identifier:
keyid:4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d8:8a:09:35:32:bc:2b:7c:02:95:c7:a2:c2:72:1f:d7:cd:
d1:b2:39:e3:2b:ef:d4:e2:d9:06:ae:75:d1:45:0d:b7:10:f6:
d8:6a:7c:ea:eb:16:a5:98:91:03:21:25:48:12:83:c1:33:0d:
13:e7:2a:9f:7d:8a:a8:95:73:7d:36:e7:a8:25:90:d5:04:ea:
4b:f0:75:99:f1:a5:41:2a:ce:ad:f7:21:28:2a:77:58:7c:39:
38:e4:51:a7:99:85:17:63:b0:87:44:fa:10:ea:92:b4:34:b5:
3e:08:3e:ba:6a:81:4f:ac:2e:ba:2f:3d:80:d7:ab:3a:dc:9c:
05:ce:9f:51:74:ca:ed:75:ee:a1:72:42:00:aa:ba:fc:cf:e8:
b8:bc:42:02:fc:12:5a:42:0f:f7:34:5f:96:c9:82:ae:14:1a:
32:b7:ab:6f:14:8d:86:a1:13:1b:a4:c2:e8:7e:36:94:cd:09:
0f:97:5c:e7:d6:87:df:f4:36:d2:a2:9c:99:00:d2:c5:77:26:
03:12:f6:ce:f9:55:b3:07:8d:cb:5f:43:78:b5:6a:cf:f2:e5:
45:9b:af:62:ab:cd:fa:f3:f1:f2:e9:ee:8c:50:d7:fa:c3:c0:
47:e5:30:22:70:e8:a6:48:48:55:10:4d:72:3a:d4:11:71:b2:
bf:06:d1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:33 2026 by rpki-client