Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
File: Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft (raw, json)
Hash identifier: +f1A4HxdP2MEeB+NouTcA39kUeTq6BTbiZP+yntNfqk=
Subject key identifier: 2B:D5:58:E1:E5:83:56:F1:7E:3F:E5:29:B9:8F:AC:04:57:8B:40:9B
Authority key identifier: 4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
Certificate issuer: /CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Certificate serial: 019D38D2F13344CD85084654511EF3348430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
Manifest number: 03B9
Signing time: Sun 29 Mar 2026 09:00:41 +0000
Manifest this update: Sun 29 Mar 2026 09:00:41 +0000
Manifest next update: Mon 30 Mar 2026 09:00:41 +0000
Files and hashes: 1: 05dVc6ABA35s1lIVZCX4MyAVWsE.roa (hash: A7QaqhKGTQnL4Dm/bLJ1IF2pAVw/4/vPWwEpS9iWxoc=)
2: Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl (hash: yF3hoExpXvU2KO6A3+17RLmln6vdXW4mF1l/JA1Tb4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f1:33:44:cd:85:08:46:54:51:1e:f3:34:84:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Validity
Not Before: Mar 29 09:00:41 2026 GMT
Not After : Mar 30 09:00:41 2026 GMT
Subject: CN=2bd558e1e58356f17e3fe529b98fac04578b409b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:37:48:cf:1f:d2:32:66:aa:de:51:fa:64:23:
69:ae:90:c7:24:4b:10:68:8c:8d:19:67:f5:d2:ca:
c5:64:43:a9:ec:52:51:ef:49:e7:e6:26:c2:54:62:
5d:bd:c6:fb:a7:25:9c:12:01:7c:5a:fe:ab:d1:44:
b1:04:6c:cd:13:be:63:b7:cd:77:9e:55:cf:6b:e0:
b9:f6:7c:63:12:58:cc:f0:fc:46:97:9a:21:b5:29:
71:05:67:09:b1:87:e2:58:fd:30:f5:74:ab:45:ca:
c9:fa:d5:2a:9c:bf:07:15:f9:74:9a:03:e2:03:cc:
79:f5:7a:19:25:2f:9b:6b:cf:55:89:0e:3d:1b:82:
a2:25:97:42:54:79:0c:22:15:40:c6:21:71:fb:9c:
25:57:52:ad:34:74:ff:93:1a:77:13:91:dc:b0:27:
ad:bf:0d:b1:9e:c4:72:ea:45:77:c0:26:f6:90:a7:
28:ce:c1:fc:b4:c4:55:53:bb:a6:eb:0e:60:63:a3:
50:60:7b:93:6f:8e:81:3c:ac:c0:e0:28:ad:23:fd:
85:fb:85:19:12:fd:ba:0e:88:f3:37:ef:49:87:df:
3b:a3:32:76:60:a0:4d:15:70:52:b0:03:b9:93:eb:
31:c4:bd:28:a8:d0:a4:4d:2d:0a:b4:5a:1b:00:a2:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D5:58:E1:E5:83:56:F1:7E:3F:E5:29:B9:8F:AC:04:57:8B:40:9B
X509v3 Authority Key Identifier:
keyid:4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:08:20:81:5c:21:34:49:0a:4a:79:be:44:ea:b9:0d:c0:3f:
05:10:cd:5a:32:02:7e:c8:90:9e:9f:8d:91:b0:8b:07:79:c3:
82:2e:ed:ae:88:51:a5:c2:52:55:8d:cd:11:59:da:31:7e:5f:
9f:f9:7f:84:fa:e2:3b:1a:16:01:db:60:75:3e:78:95:86:9c:
58:7d:32:9c:2e:79:da:76:ce:d4:1a:e7:15:8f:bf:86:6b:03:
4a:e3:ac:db:dd:e1:ac:2b:3a:6f:7d:1e:71:e4:49:66:c1:3e:
ab:d3:83:1f:6f:73:66:7b:6d:00:95:bc:24:cb:7d:42:d1:80:
86:25:c0:f2:6d:9e:76:20:5b:2b:19:1c:a3:ae:b3:b4:e2:0b:
fa:50:5a:2a:98:f9:d3:e1:5d:49:75:a8:06:a0:4c:2d:9a:33:
6f:2c:cb:5f:df:07:1d:0e:23:03:47:cf:22:e8:9a:9e:8a:a0:
87:9b:48:69:b5:ec:5e:96:06:02:2d:9f:70:8f:57:80:65:2f:
e9:fc:a8:1a:17:6f:34:ec:1a:78:57:7b:64:b1:2c:db:09:f3:
df:c3:08:00:ff:7e:8b:a2:b9:4e:d4:33:73:b3:a7:d2:3b:85:
ef:b7:8c:08:de:bb:ac:9b:1b:33:1d:56:bb:5e:2a:d9:db:b2:
49:14:b4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:48 2026 by rpki-client