Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: w6APr5acNK49OSzvjoboVlQXiexBILTcNojhsYmDl04=
Subject key identifier: BF:E9:3A:B0:99:FB:3E:85:21:C4:71:54:5F:D7:9D:86:EF:B5:BC:11
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 01A0BDD50D2117F4A8C3C0AAFFDBCCE0E368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 0D52
Signing time: Sun 20 Sep 2026 08:00:51 +0000
Manifest this update: Sun 20 Sep 2026 08:00:51 +0000
Manifest next update: Mon 21 Sep 2026 08:00:51 +0000
Files and hashes: 1: Cw3evW-6yESknE9BpT1L9kWZjRE.asa (hash: oBahNEzx8P7hP2ItMlP1MDr33FMJPRkds2MOauVpLXw=)
2: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: cu3bFSHxbzCp6dSvu/sQWP4MWBXgjS+gqUOBo5K/c9Q=)
3: sjVRYtz4jH9eKfw8Efr3wGt_oeI.roa (hash: P8Aovfss+2O/AKMSRS+SqD+lQMU75jfoO2E2lQksJcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d5:0d:21:17:f4:a8:c3:c0:aa:ff:db:cc:e0:e3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: Sep 20 08:00:51 2026 GMT
Not After : Sep 21 08:00:51 2026 GMT
Subject: CN=bfe93ab099fb3e8521c471545fd79d86efb5bc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c1:f9:70:da:75:95:87:33:01:d2:6c:b5:72:
5d:ff:68:99:6d:36:86:8b:53:30:f0:fd:20:53:f2:
ce:e3:60:63:7d:54:38:ef:88:95:35:06:6d:f5:8b:
be:4a:b3:c8:53:2a:26:3c:ed:a1:5f:e6:3e:98:8e:
28:c3:02:93:61:00:7a:0e:fe:bc:ce:40:4b:37:34:
cb:17:0e:4a:45:81:c1:1c:77:41:d7:ad:5b:40:32:
79:f4:a1:60:4f:8b:22:fb:dc:0c:e6:79:29:4a:86:
ed:09:9c:44:07:cd:99:05:48:65:b1:7b:a1:8b:63:
80:78:51:b9:71:d4:b7:fc:bf:5f:cc:f3:6f:05:9b:
f7:59:83:a0:9e:68:c0:87:8c:3d:fa:2f:b6:8b:a3:
1a:db:35:af:06:5d:f4:6c:05:c1:2c:c4:5a:cf:f7:
fa:b9:b3:36:5a:0e:c6:f4:8d:4d:a0:85:54:5b:91:
bb:b7:d6:cf:6c:80:df:7a:d2:3a:c4:e9:52:a5:0a:
eb:3c:a2:08:48:69:50:dc:de:48:c6:6f:06:30:e1:
09:3f:21:27:0b:31:52:c9:3e:e2:4a:83:ad:90:fe:
1c:54:3a:c6:ca:ce:34:7f:96:d2:f0:b3:69:d8:51:
ec:df:5b:23:00:d8:35:38:3a:b7:11:1b:ec:3d:09:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E9:3A:B0:99:FB:3E:85:21:C4:71:54:5F:D7:9D:86:EF:B5:BC:11
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bb:71:7f:b9:a2:3f:c3:64:a2:51:1c:af:e4:47:38:65:1c:
f5:f4:b8:ff:32:0f:f3:58:b7:bd:da:00:30:5f:f4:8a:09:dd:
99:ba:67:9c:f4:5b:14:9f:03:93:ba:82:49:f1:fb:98:95:39:
fa:79:23:ee:18:ca:1a:f1:30:e6:10:cf:98:f0:28:a4:4c:63:
b5:16:57:38:34:ed:af:c6:a4:f4:60:fe:c1:5a:8b:29:c8:18:
20:bc:37:2e:a0:85:1d:01:86:1e:2f:2b:67:37:80:a3:cf:e3:
2a:81:32:92:8e:8c:09:ce:e3:44:82:66:b4:ae:39:d2:f3:e0:
c0:4a:08:63:6f:0b:78:32:26:c3:d5:e1:1b:c8:35:ee:b0:3d:
e3:a2:28:05:98:c6:64:2e:94:98:32:c9:e1:3d:29:80:2f:f5:
d6:c3:bf:d9:84:09:05:41:ea:f0:32:b4:15:bc:72:04:c4:71:
36:86:57:0d:17:39:46:63:e5:03:cb:39:cd:94:75:f6:96:ef:
01:2a:0a:37:21:0c:d2:12:29:86:38:44:dc:80:d2:07:43:52:
ff:ea:eb:68:ce:9b:0d:2c:40:21:9e:b4:ef:2e:d7:d3:2f:47:
71:f0:91:e5:d3:f9:81:db:33:32:10:69:c4:1f:2d:e1:3e:b3:
43:3c:20:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:04:04 2026 by rpki-client