Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
File: Snz-iBFothWgvUEcwxS9BApNJ_Y.mft (raw, json)
Hash identifier: /ClNFCjYFCrLVZ0tdPmCk7lEpdwmudqitoxoWeC13g4=
Subject key identifier: 2E:02:6C:E5:E8:F0:A1:03:31:9D:DC:6C:E9:AB:1E:AD:1E:F6:21:D1
Authority key identifier: 4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
Certificate issuer: /CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Certificate serial: 019D38D2965E3AB6A6FD17F21C3160360559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:00:18 +0000
Manifest this update: Sun 29 Mar 2026 09:00:18 +0000
Manifest next update: Mon 30 Mar 2026 09:00:18 +0000
Files and hashes: 1: Snz-iBFothWgvUEcwxS9BApNJ_Y.crl (hash: t5QmJuiVS1iRqZ4SqykJYeu3mNZ3T+xWQbL3ImDjtJ8=)
2: _CtWoZatOsYRtZxdTJ5TMLTNjw8.roa (hash: LYseNoTvnl/Pp/BBmHZ1FTB2FkR4cL5AND422CQVg9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:96:5e:3a:b6:a6:fd:17:f2:1c:31:60:36:05:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Validity
Not Before: Mar 29 09:00:18 2026 GMT
Not After : Mar 30 09:00:18 2026 GMT
Subject: CN=2e026ce5e8f0a103319ddc6ce9ab1ead1ef621d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:d4:72:26:b0:5c:09:cb:6f:ca:30:bd:cf:
64:fe:5d:fc:8f:41:3a:2a:65:c7:aa:53:3f:cb:80:
c3:c5:63:b1:c3:49:e9:12:a7:4c:42:2e:fd:52:ec:
95:ef:08:e7:9f:94:41:5d:a2:f4:2b:68:69:d2:b1:
e0:94:ba:35:50:54:76:c5:59:0f:b7:5d:c9:2c:df:
49:58:37:56:a3:de:2d:af:ae:26:6c:93:17:12:38:
fa:fe:17:e3:98:4c:ad:24:b9:42:76:80:7a:f1:de:
b7:53:6a:9e:b4:f6:df:59:4a:9b:12:0b:af:c7:8f:
7b:77:b9:0b:4c:60:31:8a:5a:89:4a:38:c0:d4:eb:
68:18:f0:2d:26:0e:d9:d0:6c:a7:25:e7:74:a7:f3:
18:1a:55:33:6c:36:53:14:7c:48:db:ce:cb:70:b4:
97:b8:09:e0:9a:54:07:ba:fd:95:83:b2:3e:e6:0a:
f4:31:22:77:7f:84:2d:1a:c1:35:be:92:4a:00:e9:
d8:f5:7c:87:8f:e4:00:71:69:00:62:f9:38:71:5d:
4e:3d:61:e2:9e:56:bf:17:8f:c8:cb:97:0e:f8:52:
d9:a9:05:31:af:e3:1e:c8:d0:fe:45:42:16:9d:21:
b6:56:6a:0e:55:da:34:9d:a4:76:82:b4:94:15:b9:
1a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:02:6C:E5:E8:F0:A1:03:31:9D:DC:6C:E9:AB:1E:AD:1E:F6:21:D1
X509v3 Authority Key Identifier:
keyid:4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ed:1e:a2:90:48:c4:0c:97:d2:6a:c3:16:a0:19:dd:4a:8f:
56:95:70:b5:df:4c:3d:79:ae:2f:57:98:d2:6b:c4:06:64:c9:
aa:6e:fb:b5:0b:a9:c4:9d:c8:00:96:dd:42:9f:73:fb:58:14:
4b:e0:b2:18:13:a5:33:3a:a6:22:70:62:70:5e:66:6d:cf:a8:
df:0f:97:f6:e3:ea:e5:64:31:59:cf:25:75:72:44:57:a1:2e:
7a:6f:e1:77:9a:34:8e:d0:0b:21:83:e8:f6:05:90:46:d0:8c:
f4:36:91:39:31:0c:4a:01:98:1d:42:4f:26:71:48:f7:0a:45:
55:b2:a5:7a:5a:53:4c:5b:66:87:15:8c:4e:5f:e0:1f:1d:4c:
97:e5:be:a6:a8:c5:7a:66:82:44:3f:75:d9:03:a3:74:d9:47:
29:8d:4b:5c:48:c5:4e:85:5e:fc:9c:db:88:e3:08:9a:3a:44:
28:29:56:20:88:f5:e5:70:02:71:a4:19:36:3e:48:75:94:ef:
9d:20:05:d9:d9:19:73:cc:01:e8:21:a5:85:9c:f4:4c:f4:70:
d9:ed:ef:f1:d1:f2:f3:b9:97:e4:cd:5d:d7:84:84:92:c6:82:
e5:57:5f:8f:3f:a2:d7:32:c9:d3:72:c5:2b:4a:3c:dd:68:b3:
53:3b:49:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:42 2026 by rpki-client