Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: KntB3OgwVR9/tB/oEfZg6iIzgB0IUiAzrKldnW6CWIY=
Subject key identifier: 13:6C:F6:4F:4B:A7:C6:74:2B:5A:C8:8F:9D:15:AF:62:E7:A8:DB:B9
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 019E2A021925BBD1C893224ED8DE23F1F11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 1542
Signing time: Fri 15 May 2026 05:00:40 +0000
Manifest this update: Fri 15 May 2026 05:00:40 +0000
Manifest next update: Sat 16 May 2026 05:00:40 +0000
Files and hashes: 1: 0Pztl2uTXxD16fJwYOZmUomSR-I.roa (hash: qxpOdzA38as8ew7phtI3wkwt8cWmyBdRvvdNKvSSdvU=)
2: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: JjdP0JlFs3TDfRVFhtNdVWUZcgP/690yf8XJFnpXI90=)
3: zNQ3P3IMHTJolqRce_or6IY_YBw.roa (hash: IouHvQG0QV0oy1fKKHRyhRE9NfsCBgE0xFqm0b1F5QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:02:19:25:bb:d1:c8:93:22:4e:d8:de:23:f1:f1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: May 15 05:00:40 2026 GMT
Not After : May 16 05:00:40 2026 GMT
Subject: CN=136cf64f4ba7c6742b5ac88f9d15af62e7a8dbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:a7:04:79:1f:a0:c0:34:31:4c:2b:1f:00:
64:f5:13:91:46:f8:b3:fd:25:fa:dc:01:fc:3c:18:
e3:85:fe:b0:7e:4a:f5:bf:6b:36:16:b5:70:c8:22:
75:e9:6a:34:f3:a9:34:f5:72:0f:e1:7a:de:08:d7:
ca:08:bd:02:8f:20:79:3a:2c:23:dd:77:c0:95:57:
e3:e8:01:79:db:bc:57:e0:65:fc:e9:c5:f0:d7:b4:
ad:d5:f7:78:c7:62:fd:da:60:6d:16:06:a0:92:8b:
dd:09:ef:d8:13:57:14:c4:c7:eb:d1:37:cc:52:d7:
48:78:dc:61:10:dd:20:f4:31:39:75:d8:0e:64:d9:
2b:46:eb:1d:a6:e2:3a:fb:dc:b4:a0:82:19:59:08:
77:e1:e4:09:d5:9c:2d:44:7e:a4:87:f2:da:ac:67:
79:03:04:76:09:44:8e:ec:3c:bc:95:d1:05:72:90:
a3:8f:71:98:02:8e:d2:83:04:1b:42:26:b5:5a:93:
ae:e1:c2:8c:9e:64:96:2d:8e:d8:2a:70:9e:af:6e:
fd:fb:8b:75:a9:95:ac:13:83:50:ed:e0:d1:21:56:
be:e0:50:54:71:c6:aa:75:d7:d4:7c:89:21:55:87:
88:39:aa:3b:fb:1f:00:08:80:ed:ab:8c:ef:dc:64:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6C:F6:4F:4B:A7:C6:74:2B:5A:C8:8F:9D:15:AF:62:E7:A8:DB:B9
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:08:d9:b1:8d:12:9a:a1:ea:bb:30:04:cd:44:bb:e9:59:6d:
29:89:dd:50:23:61:6b:5f:2d:05:da:f3:9a:b3:0e:f8:9b:fd:
57:f6:e8:ed:88:ae:76:8b:14:ff:cc:75:53:b5:98:db:85:66:
35:b3:e7:73:40:a5:ad:88:53:cc:b6:14:20:72:92:27:63:11:
ae:90:99:de:c7:57:92:27:fd:4a:49:64:ee:c9:e5:2a:07:14:
09:8f:82:a6:fa:50:50:a0:24:93:b0:c7:3f:34:a5:0e:57:f8:
de:f3:ba:93:0a:dc:a4:a8:05:85:1d:83:0b:77:24:1a:1e:9e:
9f:13:3b:39:f1:26:d3:aa:6f:bf:3e:be:9c:d4:da:a6:85:6f:
67:8f:41:29:15:da:30:1e:db:4d:e7:ce:93:b6:ff:f2:6c:a5:
9c:71:d4:c8:2f:61:87:05:01:65:d4:5e:26:05:2e:ad:60:c7:
e7:7b:80:e3:b1:4c:ff:d3:76:21:78:57:db:c3:2f:27:be:ed:
f7:7b:de:6e:8f:4e:82:39:42:16:a9:94:c6:29:11:31:00:d9:
a3:47:a0:30:ea:df:d9:cd:12:a7:d2:ea:bc:2c:d4:a2:63:cc:
41:47:a1:9c:19:dd:09:a5:33:da:be:29:32:e0:d2:f5:6a:a3:
7d:29:ad:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:02:59 2026 by rpki-client