Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
File: snjtj5eA8p2voi-f3wM3TaSYDpQ.mft (raw, json)
Hash identifier: aw1l+9cjYqmVG+1moG160H+ArR2tQmaZizDYLL2PyQo=
Subject key identifier: DE:F8:BD:FC:D6:15:92:F9:09:1B:6E:56:3B:CE:71:23:8A:53:47:25
Authority key identifier: B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
Certificate issuer: /CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Certificate serial: 019D382E2988D42209F8B49EFA27DF7C3858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
Manifest number: 12E7
Signing time: Sun 29 Mar 2026 06:00:42 +0000
Manifest this update: Sun 29 Mar 2026 06:00:42 +0000
Manifest next update: Mon 30 Mar 2026 06:00:42 +0000
Files and hashes: 1: qWWCnvnb1AjTvXVQe6eky9BUjfQ.roa (hash: uhoA5mJH4PMkfCjpYTO4XK5e/8oJdkyHk7G+Sws4TBU=)
2: snjtj5eA8p2voi-f3wM3TaSYDpQ.crl (hash: DoLwKG0QHFgpBlEmgG7mat6jJ6LmOxtBxi7YBzjRsZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:29:88:d4:22:09:f8:b4:9e:fa:27:df:7c:38:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Validity
Not Before: Mar 29 06:00:42 2026 GMT
Not After : Mar 30 06:00:42 2026 GMT
Subject: CN=def8bdfcd61592f9091b6e563bce71238a534725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:9e:2e:b1:89:3f:40:1b:ba:79:6f:81:6d:
7d:7f:a5:ba:e4:aa:bf:22:94:5a:5b:28:ce:46:c4:
7e:bc:13:ec:6c:37:bf:c4:13:eb:43:8c:8b:f6:5c:
02:7c:0e:6c:96:4d:cc:40:b1:1d:65:7a:29:b5:83:
93:77:32:59:59:a3:ff:cc:ee:40:ae:5c:b9:9b:dd:
aa:ff:d0:9e:2c:11:af:ff:7d:f8:a3:9d:40:1f:1d:
db:e1:b7:78:e2:a1:6a:32:aa:43:db:52:bb:8c:32:
2d:94:69:3e:05:81:b4:e9:73:49:62:35:21:84:d6:
99:c2:cb:cf:15:f1:00:37:67:83:95:30:17:ea:d2:
4d:7e:50:28:31:e0:b2:b9:c3:38:00:fd:e9:4d:33:
db:70:6c:c7:da:5c:71:39:57:d0:ed:e5:4b:e4:b6:
dc:04:da:c0:0b:6d:7b:86:77:e5:bb:84:6b:13:bb:
ee:37:03:68:8d:74:de:42:03:33:b4:bc:58:79:46:
ba:41:41:e5:61:0b:b9:08:85:67:35:1e:2a:cb:2a:
87:20:6c:b2:0f:7a:3b:7f:ef:96:e8:ba:0c:9c:e6:
2b:18:ce:6f:b4:0f:8c:25:a5:48:80:03:d4:b4:fe:
b4:38:93:cf:03:22:b7:cd:dc:4d:e8:f2:f8:49:3a:
0d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F8:BD:FC:D6:15:92:F9:09:1B:6E:56:3B:CE:71:23:8A:53:47:25
X509v3 Authority Key Identifier:
keyid:B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:23:97:3c:76:b4:df:23:02:f8:60:a2:ee:16:18:71:14:39:
44:7f:8a:24:ee:2d:6a:4d:0e:84:2f:79:31:07:33:03:fc:5b:
32:82:eb:6e:4c:9a:a3:7d:79:b5:61:bd:54:14:0d:d3:87:56:
33:c4:a9:0e:a4:cf:af:12:c1:e3:19:d1:11:64:6b:a4:01:96:
fc:2f:fa:2d:e8:9f:8e:4b:a6:98:43:23:8d:26:6b:7a:8d:cf:
21:a3:8c:c8:1b:9c:fc:39:df:fd:18:e0:19:04:f4:e0:e9:2d:
b1:c4:eb:76:33:cc:bc:a0:4f:69:d1:5a:33:5f:ba:57:b9:6e:
e3:96:03:e0:fe:fd:98:f9:17:78:0d:d7:6b:a1:08:8f:bf:b3:
ec:ff:5a:1e:c7:12:3c:af:e3:a6:87:17:37:f6:7d:47:41:8e:
a5:80:c1:29:61:dd:8f:9c:c3:e4:86:50:36:9d:2e:e7:d1:ec:
03:d5:1b:d1:ca:3a:e4:88:c5:9d:82:6e:97:76:ff:3d:17:72:
91:60:8a:cd:d2:a0:38:95:5d:63:87:cc:27:ea:05:57:aa:15:
fb:5b:31:1e:ab:5c:d3:06:4a:9b:df:98:17:69:9b:bf:35:04:
54:e5:8c:17:02:a7:c9:25:27:8a:fa:e6:c9:88:8f:16:27:03:
1c:4a:6b:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LimI1CIJ+LSe+ifffDhYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNzhlZDhmOTc4MGYyOWRhZmEyMmY5ZmRmMDMzNzRkYTQ5
ODBlOTQwHhcNMjYwMzI5MDYwMDQyWhcNMjYwMzMwMDYwMDQyWjAzMTEwLwYDVQQD
EyhkZWY4YmRmY2Q2MTU5MmY5MDkxYjZlNTYzYmNlNzEyMzhhNTM0NzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpOeLrGJP0AbunlvgW19f6W65Kq/
IpRaWyjORsR+vBPsbDe/xBPrQ4yL9lwCfA5slk3MQLEdZXoptYOTdzJZWaP/zO5A
rly5m92q/9CeLBGv/334o51AHx3b4bd44qFqMqpD21K7jDItlGk+BYG06XNJYjUh
hNaZwsvPFfEAN2eDlTAX6tJNflAoMeCyucM4AP3pTTPbcGzH2lxxOVfQ7eVL5Lbc
BNrAC217hnflu4RrE7vuNwNojXTeQgMztLxYeUa6QUHlYQu5CIVnNR4qyyqHIGyy
D3o7f++W6LoMnOYrGM5vtA+MJaVIgAPUtP60OJPPAyK3zdxN6PL4SToN+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN74vfzWFZL5CRtuVjvOcSOKU0clMB8GA1UdIwQY
MBaAFLJ47Y+XgPKdr6Ivn98DN02kmA6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc25qdGo1ZUE4cDJ2b2ktZjN3TTNUYVNZRHBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xZTIzMTYtMWI1Yi00YmE1LTkzN2Qt
MDI4NjRjNTg1MTljLzEvc25qdGo1ZUE4cDJ2b2ktZjN3TTNUYVNZRHBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8xZTIzMTYtMWI1Yi00YmE1LTkzN2QtMDI4NjRjNTg1MTlj
LzEvc25qdGo1ZUE4cDJ2b2ktZjN3TTNUYVNZRHBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSOXPHa0
3yMC+GCi7hYYcRQ5RH+KJO4tak0OhC95MQczA/xbMoLrbkyao315tWG9VBQN04dW
M8SpDqTPrxLB4xnREWRrpAGW/C/6LeifjkummEMjjSZreo3PIaOMyBuc/Dnf/Rjg
GQT04OktscTrdjPMvKBPadFaM1+6V7lu45YD4P79mPkXeA3Xa6EIj7+z7P9aHscS
PK/jpocXN/Z9R0GOpYDBKWHdj5zD5IZQNp0u59HsA9Ub0co65IjFnYJul3b/PRdy
kWCKzdKgOJVdY4fMJ+oFV6oV+1sxHqtc0wZKm9+YF2mbvzUEVOWMFwKnySUnivrm
yYiPFicDHEprJQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:01 2026 by rpki-client