Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.mft
File: sNnizl5psqH543QB08UFXF09584.mft (raw, json)
Hash identifier: q6b4tsf6T9x6cNIM+1osQ0pkc6876NI5jACB6SQ7ghk=
Subject key identifier: EB:82:7F:56:CD:4B:A8:38:5B:30:E9:57:FB:65:9C:1A:10:91:4B:9A
Authority key identifier: B0:D9:E2:CE:5E:69:B2:A1:F9:E3:74:01:D3:C5:05:5C:5D:3D:E7:CE
Certificate issuer: /CN=b0d9e2ce5e69b2a1f9e37401d3c5055c5d3de7ce
Certificate serial: 019D3A1C6F9783185FF6AA17F1E64FD12B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNnizl5psqH543QB08UFXF09584.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.mft
Manifest number: 8C
Signing time: Sun 29 Mar 2026 15:00:35 +0000
Manifest this update: Sun 29 Mar 2026 15:00:35 +0000
Manifest next update: Mon 30 Mar 2026 15:00:35 +0000
Files and hashes: 1: lU5CFSCqh5EhHLA6o7I-2LSPKPg.roa (hash: 8NkRUHu69JiUheqFS7oS32VLyi1jncdM+1WEdpyOzwU=)
2: sNnizl5psqH543QB08UFXF09584.crl (hash: 0PHweAs8fgarbHRI2gbS6u9ugEL7LuthUWqUIG6Uljs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNnizl5psqH543QB08UFXF09584.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:6f:97:83:18:5f:f6:aa:17:f1:e6:4f:d1:2b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d9e2ce5e69b2a1f9e37401d3c5055c5d3de7ce
Validity
Not Before: Mar 29 15:00:35 2026 GMT
Not After : Mar 30 15:00:35 2026 GMT
Subject: CN=eb827f56cd4ba8385b30e957fb659c1a10914b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:3b:37:65:ae:19:11:8d:79:ba:4f:29:a7:
3b:2e:56:e5:f5:52:ac:c1:0b:3b:b7:03:73:e6:63:
b2:60:57:6c:0e:e8:6a:12:47:6f:23:a6:85:99:25:
2b:2e:79:bb:ea:c8:44:db:f4:22:ec:d0:bf:15:98:
59:7f:69:9f:8f:38:01:6f:fd:58:35:cb:53:ba:40:
81:5b:5d:52:e0:d1:12:bd:dd:1d:f8:56:88:88:53:
92:dc:a8:ce:76:99:8d:48:a3:5c:35:b6:66:c8:8c:
14:78:bf:f1:97:57:d6:99:c7:fe:4d:ac:d2:e2:62:
d8:81:b1:98:2b:d1:c0:dc:b4:e3:03:51:fa:c5:36:
82:95:20:01:1f:bc:0e:e5:f7:83:55:9d:0f:f3:96:
d0:be:65:79:56:c5:04:ec:30:0a:59:66:9f:8b:19:
0e:92:c2:6c:b0:5d:ee:6f:49:00:34:54:82:57:61:
d8:18:62:cc:04:69:60:bc:fc:54:9d:44:15:a8:7b:
77:a9:e0:33:01:7d:91:9d:3f:81:b5:7d:d7:a3:8e:
6b:dd:5e:82:3a:2c:30:11:3a:13:6f:24:75:d7:94:
e1:a3:ee:c2:0b:b5:34:86:dd:ab:02:b4:df:b5:0b:
f1:4d:dd:cb:cb:fe:02:ec:c5:21:7b:17:75:ac:ba:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:82:7F:56:CD:4B:A8:38:5B:30:E9:57:FB:65:9C:1A:10:91:4B:9A
X509v3 Authority Key Identifier:
keyid:B0:D9:E2:CE:5E:69:B2:A1:F9:E3:74:01:D3:C5:05:5C:5D:3D:E7:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNnizl5psqH543QB08UFXF09584.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:db:28:9e:78:e3:cc:fc:ea:f6:64:0c:72:ff:f3:6b:d3:75:
ca:a0:fe:3c:fa:fa:f4:8e:c0:5a:9f:f1:4e:32:64:1d:72:7f:
6a:a5:6c:62:88:08:29:dc:90:dd:34:d2:2f:e5:09:ce:3b:29:
e4:44:d7:5c:e8:da:88:a0:49:93:a5:48:6d:eb:e5:2a:4a:71:
ab:56:02:27:54:d9:ea:15:d1:f9:5a:67:41:dd:d7:13:85:58:
40:72:3d:e4:94:15:43:5e:bf:6e:fb:01:21:c3:76:d0:2e:15:
9d:a3:aa:bc:ad:d9:a0:fa:d2:9f:90:ce:23:6b:99:c0:ea:42:
1c:b4:18:9e:cd:13:e3:82:fd:79:d4:f5:85:29:d3:40:9f:ad:
c5:e7:90:36:a8:d7:a1:f0:ac:a2:20:17:d8:84:eb:6a:f1:eb:
33:6f:84:bc:a6:f8:12:cd:d6:85:e8:dc:02:6a:1a:0d:df:6c:
15:b3:20:cf:04:f9:05:88:94:91:83:ae:41:bf:63:64:af:a5:
d3:57:91:58:fe:19:9b:8d:a9:5e:8d:30:09:2c:0b:43:fc:70:
6a:ad:b8:60:94:6b:e9:50:06:d9:7b:ce:21:a5:8d:07:a2:5e:
52:70:20:49:5c:54:21:e0:74:b7:7a:5e:f0:4b:cb:ae:10:ec:
3e:1c:81:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:27:31 2026 by rpki-client