Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: ANoaaiEHJCazmEvVcIPfjueagXEjwQslvuuwcvPDc38=
Subject key identifier: 58:A1:C8:71:3F:AA:5A:A6:40:6D:70:13:AA:4A:3A:84:68:52:9B:AD
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 019D0A42A4EA6661944D8D6588529342070B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 14AD
Signing time: Fri 20 Mar 2026 08:00:32 +0000
Manifest this update: Fri 20 Mar 2026 08:00:32 +0000
Manifest next update: Sat 21 Mar 2026 08:00:32 +0000
Files and hashes: 1: 0Pztl2uTXxD16fJwYOZmUomSR-I.roa (hash: qxpOdzA38as8ew7phtI3wkwt8cWmyBdRvvdNKvSSdvU=)
2: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: il0evMxrFuARUKDwEBn2Wve9NsCnJDeAf53b+IDTdLE=)
3: zNQ3P3IMHTJolqRce_or6IY_YBw.roa (hash: IouHvQG0QV0oy1fKKHRyhRE9NfsCBgE0xFqm0b1F5QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:42:a4:ea:66:61:94:4d:8d:65:88:52:93:42:07:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Mar 20 08:00:32 2026 GMT
Not After : Mar 21 08:00:32 2026 GMT
Subject: CN=58a1c8713faa5aa6406d7013aa4a3a8468529bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:38:cd:de:c8:50:7e:96:75:a0:61:f6:8b:
dd:fa:70:67:b8:e8:36:d7:dd:96:0a:2a:7f:90:ba:
2f:09:c3:be:fb:4b:0b:d4:f2:23:71:1d:38:e6:2b:
b6:fb:f4:a9:a3:86:ac:c1:83:82:8d:46:7a:ce:1a:
36:45:b1:51:16:73:2a:30:5b:d4:63:b2:96:e1:d5:
33:4a:a8:22:a6:8f:a0:ee:34:01:fb:7f:7a:fb:b3:
0b:2a:a1:2e:79:d5:82:e2:ef:af:a6:a5:4e:28:c2:
e5:3a:00:ba:2c:c4:81:74:e2:7c:54:18:b9:38:f0:
ad:ca:eb:d9:72:af:fd:db:04:1a:c5:ca:fa:29:e4:
73:a5:a9:44:f6:7e:1b:ea:3b:a9:2b:ba:0a:b0:78:
c1:21:5f:4d:b4:9e:a3:fd:45:0d:71:cd:e8:50:94:
5e:10:73:ef:ef:43:f2:c1:2f:df:42:76:b0:09:ac:
e7:f1:dc:53:a0:6f:cb:39:23:fc:80:2c:33:36:41:
b9:95:27:ad:92:a3:88:3f:6c:95:54:55:a2:7a:55:
2c:b5:58:e1:17:5f:04:48:91:55:58:0c:60:e1:fe:
b3:ac:7c:41:21:6a:bf:fb:fd:44:ec:22:5a:1d:a8:
b5:fe:c8:5e:15:9d:6b:c9:df:bf:6e:54:0c:39:9a:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A1:C8:71:3F:AA:5A:A6:40:6D:70:13:AA:4A:3A:84:68:52:9B:AD
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1c:44:71:3d:c4:94:1c:d3:72:50:cc:2f:de:93:3e:5d:4b:
35:c2:35:8d:95:0b:a0:ca:45:12:51:72:bd:43:89:74:4d:45:
38:7d:e9:4d:f9:9b:57:86:ab:ff:03:20:03:1e:57:02:74:43:
16:48:51:06:ff:d8:39:57:8e:b8:f1:f7:c5:c5:41:74:2b:0d:
7d:5f:f6:62:c7:2b:12:c7:43:17:07:60:9f:93:35:c2:38:9c:
a1:e4:58:02:b2:3a:0a:28:ee:83:56:fc:60:0c:24:1c:a8:11:
da:57:64:c1:27:95:53:3a:7c:af:56:1f:53:09:57:86:bd:71:
24:9f:8f:6a:3b:8d:e3:be:8a:48:94:e6:d6:53:e5:77:24:67:
0c:38:b1:a4:71:ed:4c:bb:74:39:a2:be:86:42:ca:cf:24:74:
5a:99:53:cd:01:85:a9:a7:89:dc:29:f1:91:7d:c3:ef:a5:db:
6f:72:fc:4e:ff:6e:6b:bb:83:a0:d7:6a:55:83:4e:6a:9e:93:
02:1a:55:c1:07:95:61:c6:c5:23:fc:b2:25:47:64:89:c9:72:
2c:60:31:ea:25:2b:47:ba:af:ee:20:dc:ef:e1:0b:14:3d:2e:
ba:bf:14:10:15:74:66:54:62:fd:92:81:e5:c9:2e:2f:21:dc:
a7:a6:24:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 11:31:38 2026 by rpki-client