Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
File: snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json)
Hash identifier: hNVAPlCecNnkJniqX3zl7SiKKU6qvB5+CzNP434n0z0=
Subject key identifier: 5E:0C:5D:06:4D:AE:77:0B:E5:40:B1:DA:25:EC:F2:AB:F1:9B:AF:BF
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial: 019D37531122EFD15C18846DD7DBAF0BC18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
Manifest number: 10C2
Signing time: Sun 29 Mar 2026 02:01:23 +0000
Manifest this update: Sun 29 Mar 2026 02:01:23 +0000
Manifest next update: Mon 30 Mar 2026 02:01:23 +0000
Files and hashes: 1: HyYIQlysdxbEjMCMjTsZDnQh6eA.roa (hash: g3hpyf9/HAqIKib0Sw0ECcCcqaYC2Rz7TpU4xEiIjbs=)
2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: CCz1F+y/pLWFkA9ZzbKpJzTYOVmFzv7p/zffbt6NhX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:11:22:ef:d1:5c:18:84:6d:d7:db:af:0b:c1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
Validity
Not Before: Mar 29 02:01:23 2026 GMT
Not After : Mar 30 02:01:23 2026 GMT
Subject: CN=5e0c5d064dae770be540b1da25ecf2abf19bafbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:e3:44:c6:15:66:fb:b9:15:19:f3:06:36:
a1:d3:4c:ca:91:a2:ee:0a:f4:56:e2:1c:19:32:fe:
ff:37:17:23:9d:69:71:85:3b:e1:d3:2c:78:5e:cc:
8d:5a:a0:02:b0:cd:6d:8d:19:e1:98:20:ad:b3:5b:
44:a8:39:34:2e:e9:e2:bc:e7:4d:f9:9c:fd:36:af:
0a:30:78:8c:dc:1c:6b:e6:dc:58:dc:18:ee:8a:89:
61:f1:be:3f:c1:80:10:a4:41:91:2c:20:df:74:d8:
da:34:39:ba:12:7b:dd:b1:a1:70:60:b2:5f:a2:65:
fd:4c:30:88:77:a3:c8:bb:76:35:7e:c6:3b:d5:f7:
8d:23:c7:74:b9:e1:a0:cb:76:c1:1e:5f:2e:6a:ca:
58:8a:ba:d7:83:f8:19:80:69:2d:d2:35:1e:f9:99:
6b:4e:33:0a:9a:45:a4:ae:f4:44:87:12:b9:5f:39:
0c:62:ce:40:bb:02:3f:9a:1f:6b:3c:b3:54:08:7c:
aa:01:4b:15:db:96:e2:ac:c4:b6:f1:46:06:99:2a:
d0:49:ef:1b:6c:62:93:6d:f8:40:ad:52:07:f6:50:
b4:b4:3e:2b:a7:31:6a:68:17:0a:8d:fa:ce:58:52:
4e:c1:88:06:0f:5a:0c:d5:af:ec:ae:a5:07:10:91:
d0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0C:5D:06:4D:AE:77:0B:E5:40:B1:DA:25:EC:F2:AB:F1:9B:AF:BF
X509v3 Authority Key Identifier:
keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:51:0c:77:04:47:94:1f:ee:34:6a:42:d8:50:84:5a:1a:99:
68:4e:e8:e6:08:39:8c:dd:87:9b:28:30:b6:73:38:87:7b:12:
23:0a:bf:ed:1f:70:8f:00:79:75:25:c9:e5:ae:7e:db:4b:25:
f1:da:50:6f:1a:8c:db:eb:93:f3:d9:cf:ec:65:62:7a:c6:77:
f6:84:4d:43:74:63:f2:cc:d7:7d:b4:0b:8b:ad:13:c9:d9:a9:
a8:cc:52:e6:27:fb:60:83:16:3f:f7:86:c7:7b:b7:b9:25:8f:
d3:df:a6:0c:37:2c:f8:da:89:25:79:d2:1b:66:e6:27:95:09:
65:b8:a9:26:1a:da:b6:22:cb:1d:6a:ab:63:a8:b1:fa:f9:94:
f9:44:f0:28:be:4b:49:ea:89:a2:5a:a8:3d:54:68:b6:01:ab:
65:af:ae:43:97:48:70:88:c6:13:1d:e3:b9:0e:07:e0:76:ff:
48:bc:f7:52:c4:da:f8:61:d9:28:7b:4b:6a:07:4e:72:8e:4c:
8c:c0:49:4e:f0:ee:b5:85:1a:94:26:20:2d:1d:d5:a5:9c:4f:
c1:6d:5e:5a:d7:43:52:5d:55:ca:0c:b3:79:04:e2:bd:d7:cf:
39:85:9e:c1:58:f1:8a:01:b4:bd:be:b1:96:f0:e2:81:a8:b7:
f0:e7:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:05 2026 by rpki-client