Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
File: SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft (raw, json)
Hash identifier: 05YQ2vuoTUU6bgOz4rpMiq+OL9/OGJ1LBqZ149K74Dc=
Subject key identifier: 1D:38:51:C3:5B:6E:09:50:D2:DA:10:4B:C2:F4:53:29:5A:75:CA:94
Authority key identifier: 4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
Certificate issuer: /CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Certificate serial: 019D9AE377564FE898717ADB4F038880131C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
Manifest number: 10B5
Signing time: Fri 17 Apr 2026 10:01:31 +0000
Manifest this update: Fri 17 Apr 2026 10:01:31 +0000
Manifest next update: Sat 18 Apr 2026 10:01:31 +0000
Files and hashes: 1: SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl (hash: jE+zkYLturisjeQR7JB3RPfupNHka1aIAno0GS8BW3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:77:56:4f:e8:98:71:7a:db:4f:03:88:80:13:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Validity
Not Before: Apr 17 10:01:31 2026 GMT
Not After : Apr 18 10:01:31 2026 GMT
Subject: CN=1d3851c35b6e0950d2da104bc2f453295a75ca94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:d0:3d:05:fe:c6:f5:d7:11:86:69:a3:01:
8a:71:cb:24:c5:4d:87:6b:9e:fc:4c:3f:1d:41:67:
65:00:19:42:a8:7b:f3:ac:f0:5b:9c:33:78:d5:4d:
0d:60:57:1e:bb:7f:24:96:d8:89:4d:eb:60:91:fb:
c3:8b:f9:2b:14:29:83:96:8d:de:bf:57:68:61:f1:
19:1d:7d:86:2d:b0:40:ff:de:3e:5d:5b:7d:87:2e:
1b:95:43:c6:53:08:a6:75:e8:13:08:e3:f6:21:c4:
f2:d8:42:34:cc:b4:99:59:01:ee:41:ce:23:88:3e:
41:ce:d5:7b:1e:d3:68:af:18:c4:24:1e:74:fd:8f:
07:a5:71:71:3b:0b:00:23:2d:ef:a9:d3:78:c6:1d:
0e:a5:96:0e:b8:cb:82:7b:be:f5:91:b2:8a:84:2c:
19:b2:83:21:da:fb:05:c6:ec:09:fd:2c:31:b7:e3:
aa:4e:0b:d6:9e:ab:af:29:24:70:d7:3d:28:67:58:
a2:26:2b:2d:f0:1a:e7:fa:30:1e:94:c5:db:f6:2d:
a6:5e:44:51:f1:54:8c:cb:ab:e9:ee:ff:34:15:a2:
37:ae:00:5f:91:f6:8f:31:c9:d7:e2:f1:b8:1d:a5:
b1:ba:f7:c3:8d:bb:55:9b:66:0d:a3:6f:2f:bd:74:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:38:51:C3:5B:6E:09:50:D2:DA:10:4B:C2:F4:53:29:5A:75:CA:94
X509v3 Authority Key Identifier:
keyid:4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:09:5c:91:59:df:3d:51:17:d9:48:a7:aa:f8:e7:f5:db:8e:
cc:70:2d:3f:bc:ca:7f:dc:6c:3c:ec:0a:ca:33:bf:f9:98:a1:
0b:8d:64:5d:86:76:2a:a4:0a:88:6c:0d:1a:4a:47:48:d5:99:
38:0b:45:4e:d7:7e:31:db:4e:00:02:fa:e6:41:ee:81:d0:05:
8d:27:a5:de:b8:c5:90:2f:6a:89:86:78:6b:49:02:84:5c:08:
88:13:8e:75:31:ed:9a:ae:98:63:29:59:44:2b:be:86:0b:15:
6c:8d:35:63:d5:92:d4:0a:33:c2:96:50:bc:07:57:f0:0c:9e:
43:f6:26:22:02:98:12:8d:16:9d:57:f9:18:ea:c7:9d:12:22:
48:83:58:d4:f6:c5:77:e9:a6:bc:69:be:dd:c4:c3:7a:c3:92:
6e:79:d1:ae:1f:3f:b6:e0:95:c4:f5:72:6e:8d:2c:de:89:51:
f8:a0:af:37:bb:cd:0e:cc:9f:43:dc:e8:33:31:39:c8:b0:fa:
74:25:a6:1b:1d:76:35:11:c3:a8:6f:fb:2a:24:cb:e9:28:a9:
51:e1:6c:e5:3e:14:17:ac:90:05:6b:5c:57:c7:56:10:c0:b0:
f6:14:b2:55:ab:6c:98:0d:21:20:29:87:ce:cc:82:19:a7:78:
26:54:78:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:03 2026 by rpki-client