Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
File: snkS_-9nB4uwa9SpAh-6lq2xgL4.mft (raw, json)
Hash identifier: DUNO1Y3EzTyS/IIPyDdtJFDX4/x+PbAbnWSuynw98+E=
Subject key identifier: CD:68:44:FF:F4:CD:A9:E3:03:80:9A:13:6A:65:D2:D4:FC:6D:CF:4F
Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
Certificate issuer: /CN=b27912ffef67078bb06bd4a9021fba96adb180be
Certificate serial: 019D3A537DB000E412F96106C5BB23853B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
Manifest number: 142C
Signing time: Sun 29 Mar 2026 16:00:43 +0000
Manifest this update: Sun 29 Mar 2026 16:00:43 +0000
Manifest next update: Mon 30 Mar 2026 16:00:43 +0000
Files and hashes: 1: s4CVi1heGWJbYwCYW_iawkx1Vkw.roa (hash: PP2ljsLLNht9ow6bvcHANrvhM1dT4caqkcMgRlkhU+U=)
2: snkS_-9nB4uwa9SpAh-6lq2xgL4.crl (hash: j8Ppp9P+RKfRYmZG8TjSR1vbBzBbNa7UJsRXVNPoMUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:7d:b0:00:e4:12:f9:61:06:c5:bb:23:85:3b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be
Validity
Not Before: Mar 29 16:00:43 2026 GMT
Not After : Mar 30 16:00:43 2026 GMT
Subject: CN=cd6844fff4cda9e303809a136a65d2d4fc6dcf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:75:0b:52:d3:14:83:4b:24:27:47:ed:e7:
be:18:b0:34:8d:07:c8:7c:27:f4:87:8c:40:fa:f6:
33:6f:e5:c6:61:89:04:e9:00:b3:c0:ca:e6:d0:29:
29:7a:1a:c8:d8:87:54:fa:c1:d3:aa:8f:75:05:0c:
6c:cc:a4:91:0a:52:31:66:19:48:bd:21:c0:c4:fd:
b3:f6:a7:1e:5a:ca:7c:67:dc:b3:66:c9:6b:fe:6b:
fd:bd:ed:88:bf:cd:bd:88:43:d1:19:5a:e2:93:b1:
62:c5:86:af:5b:56:10:c4:e0:c1:b3:e1:ae:aa:26:
0a:d8:0e:ea:4c:8d:fa:64:b1:84:ce:76:0b:ed:68:
f6:d1:b9:63:59:22:2d:cf:26:b2:6a:8e:b5:51:8d:
5f:bf:9b:14:af:c8:53:40:f5:39:78:14:eb:55:ff:
ad:d5:a3:71:89:8a:e0:4a:bf:41:4d:6b:90:23:4e:
91:b0:b9:93:9f:03:9e:77:a2:c9:4c:fc:89:26:86:
88:be:f1:b8:7a:e4:a2:7d:12:a8:56:64:c4:ed:90:
ae:c7:bf:0b:15:2a:49:8e:21:dd:d6:33:df:47:2f:
9b:43:fe:fc:42:46:a0:6a:e9:44:99:33:23:19:c3:
b8:46:b9:0f:3a:5b:87:eb:ea:66:f0:aa:2d:57:ef:
0b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:68:44:FF:F4:CD:A9:E3:03:80:9A:13:6A:65:D2:D4:FC:6D:CF:4F
X509v3 Authority Key Identifier:
keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:96:da:56:68:b3:1f:07:b5:6b:56:23:f4:da:73:c1:4b:e9:
13:a3:73:ec:24:a9:9a:f2:91:92:c8:84:81:2b:29:65:5e:73:
9f:4d:39:0d:4c:b3:6d:c4:37:b4:99:41:7c:ff:03:20:36:cb:
b3:9c:78:4a:e0:4f:42:30:09:56:1e:a1:a0:6b:93:d4:4e:1a:
24:7e:28:c4:de:e9:8b:31:b5:9d:79:b2:77:8b:7b:de:fa:b0:
f6:39:4b:3f:e2:25:53:e9:d9:c5:57:f5:52:d0:95:20:97:c4:
8b:bd:dc:d7:43:dd:13:c8:a0:e2:2c:4e:c8:3f:6b:9e:2c:69:
15:ad:ac:51:99:47:e3:ca:3a:70:e3:dc:45:ca:a3:28:fc:75:
c9:46:46:ef:68:db:41:93:58:44:bd:ca:1d:c8:98:d0:c8:e0:
05:98:b0:b9:b8:75:c8:e1:eb:7e:a0:cf:08:e0:96:6f:a9:5c:
68:5b:33:74:dd:b6:9a:21:85:49:35:5c:31:ae:d5:9f:ec:1c:
6c:76:a4:23:37:bc:22:bc:60:3a:44:9b:e0:11:58:c4:9f:fc:
9b:18:64:de:e5:31:ec:a4:2c:2e:dd:11:40:45:a4:f9:03:47:
d1:8c:cb:0a:f9:cc:28:1d:87:46:b8:a1:6b:47:aa:65:06:95:
1f:30:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:00 2026 by rpki-client