Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: 0pAHtt9xhhDhFFmA1+HRiJ8Hykzs8dSBI2BfgkQhNZ8=
Subject key identifier: FC:76:A1:1E:36:17:A4:48:14:28:08:B6:82:B0:C8:15:38:AD:27:C1
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 019D99996C64DBD9259F4D7CE4943F5FE70C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 0BB1
Signing time: Fri 17 Apr 2026 04:01:01 +0000
Manifest this update: Fri 17 Apr 2026 04:01:01 +0000
Manifest next update: Sat 18 Apr 2026 04:01:01 +0000
Files and hashes: 1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: 4S+d1Rb/aFgFG1BmtM+WZEhC/7cBu9eyGZKIm3kLdZk=)
2: kpvqRPUEAmQO0O4WaugdHW1aYng.asa (hash: OUyLx1kMPpxYu9iTqQs+D/qkf4nArIUYr0ik+YK47VA=)
3: txrJT2KB55PdfZarCNv00SvLHy4.roa (hash: 7NFHpaOx0mq8qBDCYGpG0MZudMnkTx/c60OsSdUt274=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:6c:64:db:d9:25:9f:4d:7c:e4:94:3f:5f:e7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: Apr 17 04:01:01 2026 GMT
Not After : Apr 18 04:01:01 2026 GMT
Subject: CN=fc76a11e3617a448142808b682b0c81538ad27c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:bf:c6:79:ca:16:93:91:04:17:35:b1:a0:
b6:f0:3e:86:cf:76:0c:1e:0d:b2:c7:aa:08:38:e2:
d5:a8:79:e8:2d:a8:da:7e:16:a5:43:79:8d:0b:32:
bc:e2:eb:30:9e:21:d1:ca:17:13:30:e4:3e:a0:64:
9f:79:42:b3:f5:9d:e4:11:92:85:25:61:16:56:4c:
f4:17:a2:0b:14:61:cc:c3:f9:a7:bb:2c:3a:8c:e5:
ed:8c:78:db:4a:a4:88:73:f6:e8:fe:44:bd:e9:8c:
c7:1e:d2:b8:5b:9a:e9:6e:e3:01:34:26:86:88:09:
71:d7:0b:7e:09:45:41:a4:36:c9:9a:bf:9d:28:b7:
49:5e:b9:c2:68:71:c6:5d:52:e1:b9:f1:06:f7:be:
ed:09:00:f1:9f:39:03:19:22:ec:86:ea:bb:d0:fb:
01:d1:71:df:53:fe:27:b8:57:e4:14:af:25:f1:93:
3a:83:5e:dd:72:5a:c9:4c:a1:5e:e4:c7:68:ba:65:
b0:e5:7d:3d:52:cc:96:94:38:4a:80:2a:96:97:fe:
f0:dc:48:7d:f7:b1:f4:1d:f0:9e:dc:7f:de:35:a1:
21:83:ef:0d:42:77:9a:c8:b0:b4:60:b6:25:07:5d:
07:b4:fa:11:c5:73:ba:52:73:53:b1:59:d0:9c:51:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:76:A1:1E:36:17:A4:48:14:28:08:B6:82:B0:C8:15:38:AD:27:C1
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7a:6f:2d:1a:6e:48:2a:b9:3c:92:d4:82:d3:b8:84:b0:07:
61:72:79:47:34:87:76:fa:e6:6c:71:9c:60:13:4d:56:35:b8:
51:e7:e1:30:33:64:a5:5e:e9:78:04:fb:46:46:e1:c4:e4:67:
19:da:9d:7c:00:b3:b0:50:8b:d1:b2:3f:93:70:bf:60:7b:98:
2d:0a:8c:5e:92:fa:59:a0:c1:2d:74:e8:d9:1d:8e:22:73:1a:
59:92:d3:7a:22:d5:45:64:87:18:63:c3:8b:b0:36:39:57:4b:
86:16:3d:76:78:c0:48:63:18:d7:55:54:0d:d5:43:d0:91:93:
14:94:02:6e:a2:ef:83:26:81:38:d0:52:f4:35:a0:17:f2:0e:
02:6f:7d:f3:e1:80:1f:26:45:1d:fd:91:03:ec:86:f9:f3:d3:
34:94:a1:ea:75:1b:8f:13:e2:8b:44:60:ab:69:f7:ff:4c:7e:
45:cd:dd:8f:44:b3:ad:06:96:54:c0:e1:a5:cd:05:d9:10:98:
2e:fe:91:37:8a:e3:a2:b0:82:3a:da:9b:e1:fb:6e:da:50:28:
69:c0:c2:32:ac:3c:56:14:8f:1b:41:ad:48:0d:cd:3f:30:1c:
49:18:17:26:60:74:10:51:9f:8a:55:63:6c:13:d0:36:81:f3:
c5:d1:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:10 2026 by rpki-client