Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: UAJLVjmn+95MmoT4WuWNCChew3pJ1aXZuE9atZsh5o0=
Subject key identifier: 69:36:D8:9B:66:3A:E7:8F:F1:01:89:2B:AD:43:5A:FE:11:A2:F6:F7
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 019D371BF395C3E93D7B3B1FF5F7949992A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 0B7E
Signing time: Sun 29 Mar 2026 01:01:11 +0000
Manifest this update: Sun 29 Mar 2026 01:01:11 +0000
Manifest next update: Mon 30 Mar 2026 01:01:11 +0000
Files and hashes: 1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: dgCsVi+KPMHJ1LDtCFChjKpLpznZE4NPTLXMtzR/GLY=)
2: kpvqRPUEAmQO0O4WaugdHW1aYng.asa (hash: OUyLx1kMPpxYu9iTqQs+D/qkf4nArIUYr0ik+YK47VA=)
3: txrJT2KB55PdfZarCNv00SvLHy4.roa (hash: 7NFHpaOx0mq8qBDCYGpG0MZudMnkTx/c60OsSdUt274=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:f3:95:c3:e9:3d:7b:3b:1f:f5:f7:94:99:92:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: Mar 29 01:01:11 2026 GMT
Not After : Mar 30 01:01:11 2026 GMT
Subject: CN=6936d89b663ae78ff101892bad435afe11a2f6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:f2:2a:68:b5:b5:19:4f:ad:bc:39:65:45:
42:b7:6e:9b:d0:02:08:8c:4e:27:91:22:bd:89:cc:
4b:e0:60:f2:4b:84:19:9b:26:06:ea:58:27:47:cd:
26:c7:06:08:9f:1b:8e:85:5c:eb:8d:4b:b8:dd:f5:
7d:5d:30:1c:c2:06:04:a0:e6:cd:10:81:ed:b3:92:
0c:d7:30:da:ba:e4:19:39:f7:95:21:f8:a5:ce:f7:
e4:09:61:70:93:2b:1d:03:e6:66:22:4c:a3:58:d2:
4a:de:29:2d:78:d5:1a:5f:3b:3d:46:92:81:f3:86:
0a:e8:bb:f2:46:71:7f:cf:9a:31:11:0d:2e:75:3e:
b2:2a:39:1c:a9:e1:9e:a8:31:b8:4e:27:84:f1:1b:
9e:77:73:37:85:4d:fd:f7:40:e3:a2:cc:04:ea:9c:
a3:0b:fb:b9:73:14:2b:a6:7e:f3:5a:86:9b:b4:cd:
4a:db:a4:04:45:41:67:e8:b5:ac:08:21:64:8d:14:
24:25:06:bd:30:7b:14:06:ab:5e:4a:fb:a1:71:0b:
ca:4c:28:82:d3:79:69:74:17:2c:18:d1:a1:92:80:
07:d4:08:7b:ad:be:dd:89:14:81:f6:c8:95:7d:d9:
cf:7d:47:55:37:d0:ee:7f:d9:28:a0:65:8d:b3:08:
da:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:36:D8:9B:66:3A:E7:8F:F1:01:89:2B:AD:43:5A:FE:11:A2:F6:F7
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b9:38:ec:96:66:d0:cc:72:c4:8d:31:75:ae:e1:e7:e9:d9:
bc:11:2e:48:d2:93:89:75:1d:cc:da:22:5c:1a:ea:80:2c:70:
6e:fb:35:f0:3e:d9:c0:41:3c:5d:39:21:84:de:e7:ac:d3:a7:
21:5e:10:da:20:9b:f7:b0:9d:d0:56:f5:f7:4f:ad:14:64:df:
50:64:97:81:a4:55:9b:3c:1c:46:53:22:d5:da:5b:53:57:d2:
f1:02:45:5f:d1:24:70:c6:6b:cc:3f:e1:05:4f:d7:55:71:f6:
f2:0a:87:65:a0:d9:69:fd:f8:a1:b0:93:1f:02:0d:e1:9b:a5:
0a:e0:a4:80:4e:c3:e4:53:95:55:94:2e:2f:0c:38:94:bd:20:
7c:3f:db:c4:e0:a9:68:3d:a3:59:46:a3:5e:3d:92:dd:37:b7:
aa:18:3c:90:26:09:11:30:0d:42:1b:e9:8b:f0:d4:df:fc:4b:
1f:62:9e:b0:e1:9f:d7:29:51:5a:5d:a2:b4:2d:b2:22:df:dd:
39:cf:de:fa:44:73:84:2e:93:6c:99:16:83:1f:6a:54:69:0d:
17:3c:73:41:93:3b:e3:e5:5c:e5:81:d0:e6:3b:b1:9e:38:60:
3a:68:fb:0f:8a:0a:10:98:82:ac:8f:04:26:81:37:13:4d:11:
20:cb:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:44 2026 by rpki-client