Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: mp92D5ElvBJqIGrU6Wpt7hFZ1NQrYW5A0ESyrlcIrGk=
Subject key identifier: 07:4B:11:19:BC:7D:34:43:23:6F:70:60:36:72:F0:3C:34:6C:F3:2D
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 019E288224E86CFC1E00DE5A6D5A3F2919FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 0BFB
Signing time: Thu 14 May 2026 22:01:18 +0000
Manifest this update: Thu 14 May 2026 22:01:18 +0000
Manifest next update: Fri 15 May 2026 22:01:18 +0000
Files and hashes: 1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: Tfa5rTwQuqdSpqyvuPQ7etb3oApn52QFpBCeRZSPcIw=)
2: kpvqRPUEAmQO0O4WaugdHW1aYng.asa (hash: OUyLx1kMPpxYu9iTqQs+D/qkf4nArIUYr0ik+YK47VA=)
3: txrJT2KB55PdfZarCNv00SvLHy4.roa (hash: 7NFHpaOx0mq8qBDCYGpG0MZudMnkTx/c60OsSdUt274=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:82:24:e8:6c:fc:1e:00:de:5a:6d:5a:3f:29:19:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: May 14 22:01:18 2026 GMT
Not After : May 15 22:01:18 2026 GMT
Subject: CN=074b1119bc7d3443236f70603672f03c346cf32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:5a:0c:8c:3b:07:ff:d5:49:80:15:73:a7:
05:5f:9e:51:87:81:0c:26:4b:aa:d3:e0:a8:b4:e7:
f6:90:e0:2c:b5:a0:0c:2c:54:96:43:28:9c:c0:2b:
82:08:70:40:61:ca:15:5d:19:af:d6:8b:df:45:55:
8c:62:35:84:d0:43:85:f7:00:ac:73:5f:4b:7f:ae:
94:db:7d:9f:54:18:6a:47:7c:95:96:85:39:f8:62:
f8:e4:3b:6d:4d:58:50:dd:4a:15:03:17:7a:2e:bc:
f5:31:07:c0:11:da:04:78:e8:78:7e:1b:07:b9:dd:
5e:71:18:e6:05:05:51:7f:a3:87:2e:bf:33:a8:e0:
9e:55:ce:5a:ba:2b:c4:ba:99:9f:48:8c:59:64:46:
5a:df:8e:f8:b3:f0:8d:8e:87:83:55:75:62:2c:0e:
8f:88:07:6b:86:2d:a2:65:9a:ad:72:2c:2d:1f:31:
57:64:fc:71:2f:24:ac:88:be:d9:39:0d:ab:d1:c1:
80:6a:9a:45:3e:04:b4:c5:ac:a0:ce:57:3f:e9:c8:
53:b8:a4:8c:96:f8:62:e4:66:9d:de:ca:94:72:e9:
a9:73:ef:3b:78:b3:9b:d6:04:6d:c3:c8:f2:bc:1e:
43:be:94:f2:96:71:d4:68:26:40:f7:1f:6e:ba:46:
3f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4B:11:19:BC:7D:34:43:23:6F:70:60:36:72:F0:3C:34:6C:F3:2D
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e6:c4:2f:e6:a7:35:18:0d:fc:9f:1c:cc:18:ae:6f:f5:1a:
6c:ed:24:ee:dc:31:80:1d:4c:90:37:07:89:f5:78:1a:81:88:
f8:75:af:0b:7d:32:19:e1:4d:c2:d5:c0:9e:7e:1c:81:87:c8:
db:6e:31:c6:33:53:5a:13:b6:49:98:ca:6d:f1:ae:10:b4:c4:
80:9f:d7:b8:b3:33:39:46:94:2e:19:2c:7f:6d:c1:e1:83:65:
6d:df:6f:a5:9d:8e:33:99:41:b2:f4:e9:f9:1c:8f:f6:5a:e9:
96:6f:b3:2c:21:c2:a2:c7:4d:1c:51:2f:25:8f:d4:5e:27:88:
f1:96:f6:92:b6:d3:0c:69:e5:75:42:f2:23:4d:bb:fe:16:f6:
01:e2:bf:94:a4:00:dc:ba:e4:6f:ab:52:18:ee:ae:70:e8:3c:
85:72:fd:f7:1d:d9:a9:5a:17:1c:f3:7f:e7:c8:07:4c:0b:e5:
42:a3:f3:bb:d7:27:71:bf:0d:12:2f:9e:74:e7:d1:1b:e7:4c:
01:a6:39:b4:9e:34:4d:2c:83:bc:81:0a:41:5c:7b:f3:a0:90:
5e:bc:e2:4e:9b:d2:a9:dd:27:f3:2d:42:e1:86:a9:6a:63:f4:
20:8c:86:f6:b3:dc:57:88:ee:8b:84:31:de:33:c5:22:85:38:
a7:a6:68:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:36 2026 by rpki-client