Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
File: SnDhvI7t2UeGELGv8JMPQDR1JuU.mft (raw, json)
Hash identifier: Q5gPLnsSQLOHNlyLR+6j2nGvPgVBwKoswH3D+9rYRyI=
Subject key identifier: 69:F0:0E:42:38:F5:B6:6E:7F:BD:94:57:77:84:FB:66:1F:28:46:60
Authority key identifier: 4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5
Certificate issuer: /CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
Certificate serial: 01A10625404511F110A49CE4DBCCF882ADBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
Manifest number: 0250
Signing time: Sun 04 Oct 2026 09:01:06 +0000
Manifest this update: Sun 04 Oct 2026 09:01:06 +0000
Manifest next update: Mon 05 Oct 2026 09:01:06 +0000
Files and hashes: 1: SnDhvI7t2UeGELGv8JMPQDR1JuU.crl (hash: Xx2/NiwT2UrV46AWwNIBVvbymzFt7tZOORm6Ox9/skY=)
2: mbfy7L8D_2UAGm_dalRDD5X5-5k.roa (hash: QA1iyiTc+hx3IttbGaQYktAkhZefaHnHg6PgY6o1wcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:25:40:45:11:f1:10:a4:9c:e4:db:cc:f8:82:ad:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
Validity
Not Before: Oct 4 09:01:06 2026 GMT
Not After : Oct 5 09:01:06 2026 GMT
Subject: CN=69f00e4238f5b66e7fbd94577784fb661f284660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:6d:47:17:22:d5:ed:3a:8a:7c:78:ea:ef:
6b:89:65:de:a8:8c:68:ed:90:6d:07:d6:e2:a9:9f:
67:c2:76:29:ea:2a:40:71:fd:bd:eb:d2:88:42:38:
50:9e:11:5f:aa:e6:a6:16:3b:02:21:c4:29:03:a2:
0b:8c:ae:ab:90:80:32:a9:a4:db:2d:9b:19:53:21:
cb:f2:0a:ec:62:c9:6d:a2:05:ae:e6:25:79:ce:ba:
8c:db:03:d7:90:be:df:83:a8:3a:d7:4d:62:70:bd:
6e:a1:d1:50:84:0f:60:96:73:bc:16:7c:23:01:8a:
f8:87:88:91:ee:02:40:56:79:b4:61:81:f8:f7:86:
d6:22:b7:0a:b1:c4:62:cd:18:bd:fc:f4:e2:39:25:
d8:18:62:32:d3:8d:49:00:8b:db:52:64:da:2e:43:
42:d9:6a:49:7c:0e:fe:66:4a:b4:34:0c:c1:87:75:
b1:21:65:39:04:fb:45:88:8f:42:83:53:14:ab:4a:
22:c4:25:0d:ce:5f:95:d5:77:55:00:ea:14:65:8f:
80:7a:59:02:f2:97:f1:25:28:52:49:2e:c0:77:8e:
22:65:4f:ec:de:b5:62:29:46:1f:c1:a8:cb:53:13:
37:63:6c:06:81:97:38:e4:04:0d:1c:17:56:ab:21:
8e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F0:0E:42:38:F5:B6:6E:7F:BD:94:57:77:84:FB:66:1F:28:46:60
X509v3 Authority Key Identifier:
keyid:4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b8:61:31:c4:de:61:ec:58:65:82:a6:80:ca:2d:dd:7b:ed:
91:eb:c5:69:23:31:18:36:62:5a:e0:4f:76:8e:c0:db:ed:34:
69:f1:8f:b1:af:e9:4e:c0:db:b8:09:ff:5e:99:10:14:61:a4:
c0:5e:76:b4:93:e1:e8:bd:43:53:5c:ae:c1:f3:78:27:53:f6:
20:f2:05:1c:21:8a:02:4b:24:b3:99:14:5c:d7:60:26:1a:b0:
10:74:d8:db:47:94:3d:ce:92:02:45:a2:32:e2:7e:90:35:33:
33:25:be:3c:51:4a:32:37:6e:c9:86:ca:b8:49:4d:be:92:96:
c1:ed:d6:84:32:1e:6c:8e:88:74:44:be:ee:cd:7c:24:12:c1:
8d:30:7d:3b:b6:bb:10:25:94:bb:b9:fc:ae:e4:f0:2e:08:5b:
48:72:97:ed:7c:13:36:b3:e0:a2:f9:fa:31:6f:57:ae:64:7a:
60:20:0d:fe:03:e8:76:a7:ab:fd:03:84:47:0b:3c:47:31:12:
67:78:af:14:80:1c:36:d0:83:19:dc:3e:fb:18:29:d5:2a:5f:
01:43:0f:4d:e3:a6:28:a3:ca:f2:8d:6b:f6:d2:3d:a7:f5:51:
b6:a7:b8:3e:f7:e6:73:9d:68:13:10:4a:ba:27:4f:9a:ae:03:
f8:32:3a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:04:42 2026 by rpki-client