Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
File: snkS_-9nB4uwa9SpAh-6lq2xgL4.mft (raw, json)
Hash identifier: kRcXjlp9rtYYWzw4DTdh8/kgYRVPqVSRLO4UUP/F4+4=
Subject key identifier: 83:BC:B5:A1:01:39:39:F2:FE:7C:86:AE:C9:4B:5E:20:BE:96:D5:E5
Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
Certificate issuer: /CN=b27912ffef67078bb06bd4a9021fba96adb180be
Certificate serial: 019CAD593C8C4280CEDB5D333DAFAB420ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
Manifest number: 13E3
Signing time: Mon 02 Mar 2026 07:00:32 +0000
Manifest this update: Mon 02 Mar 2026 07:00:32 +0000
Manifest next update: Tue 03 Mar 2026 07:00:32 +0000
Files and hashes: 1: s4CVi1heGWJbYwCYW_iawkx1Vkw.roa (hash: PP2ljsLLNht9ow6bvcHANrvhM1dT4caqkcMgRlkhU+U=)
2: snkS_-9nB4uwa9SpAh-6lq2xgL4.crl (hash: BXeUi1Qjt7cX5+6iQ+MhMoOXeNYFX1WS2O81Ej9Oips=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:3c:8c:42:80:ce:db:5d:33:3d:af:ab:42:0a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be
Validity
Not Before: Mar 2 07:00:32 2026 GMT
Not After : Mar 3 07:00:32 2026 GMT
Subject: CN=83bcb5a1013939f2fe7c86aec94b5e20be96d5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:80:1c:57:f8:ab:56:b2:a6:39:52:a2:80:
87:94:eb:8e:e4:01:2f:35:d8:1d:19:60:97:08:fa:
82:34:70:b3:80:a5:8c:0d:b6:2c:cc:ad:00:b3:8c:
71:d5:9a:1d:28:6d:11:66:74:a1:66:3f:f0:d7:be:
46:9d:cf:d2:65:99:02:e0:03:99:78:22:24:13:e1:
6f:29:d6:69:50:76:7e:92:18:51:84:b7:36:ae:4a:
35:4e:8e:ea:35:c0:90:25:fb:df:34:af:f1:16:39:
06:c6:a8:94:01:a8:da:be:89:32:09:38:9b:5d:d4:
ef:b0:da:88:e8:87:c6:d4:4e:36:75:5b:d3:cc:d3:
23:4d:b3:4a:c2:18:11:15:1b:f2:c6:ac:1c:07:04:
56:fa:35:02:c2:b5:31:2d:ca:02:3d:8b:3c:2e:cd:
c9:17:5f:a6:bb:12:b8:e3:6d:02:0c:b0:2c:46:93:
4b:83:87:4f:ce:78:b0:dc:44:e2:18:6c:e7:ca:c1:
12:64:b8:d6:c6:6d:72:db:d4:69:09:e6:f4:99:60:
35:a9:35:dd:64:31:a0:f8:82:c2:47:bf:00:d6:fe:
8f:6d:6c:2e:99:18:1c:6a:88:f6:af:51:dd:e0:46:
fd:f4:bb:02:67:20:92:29:44:38:7a:e0:b8:4e:d8:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BC:B5:A1:01:39:39:F2:FE:7C:86:AE:C9:4B:5E:20:BE:96:D5:E5
X509v3 Authority Key Identifier:
keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:22:56:b6:ef:f4:63:43:8f:aa:bc:45:90:68:17:1c:46:53:
4d:76:58:3c:d2:f3:37:70:a5:3e:8d:67:5c:14:04:2f:a0:73:
c0:af:b7:d1:f4:f0:f0:1a:93:e2:a9:60:77:a3:dd:2c:1b:92:
56:d4:97:79:79:00:17:92:6d:3f:e6:e1:d9:e9:da:26:96:b4:
3d:8a:27:41:d0:b2:c4:3a:2d:9d:3e:8f:ec:a1:80:7a:87:a3:
61:ba:5e:02:2b:1d:50:e1:50:14:14:f7:72:64:b1:20:54:41:
8d:77:0c:60:9a:1d:bf:92:a2:87:ab:39:80:72:f2:8a:aa:8f:
86:ec:fb:1e:c0:e5:a8:40:aa:53:e5:fe:c0:ff:4f:6d:34:b0:
94:05:7a:92:45:41:b5:b6:d4:48:45:a6:ac:97:01:c8:e9:fc:
8e:20:3b:ce:81:00:2a:08:95:75:12:cd:dc:ae:74:ec:45:10:
2d:fd:97:57:11:75:60:c3:b2:50:15:1e:51:5e:fe:90:e9:54:
a2:b5:a4:14:9a:a6:e4:ae:c9:c2:51:31:b9:5b:e2:86:99:0e:
c0:39:58:16:6d:4e:aa:f9:27:22:61:59:e2:fe:c8:f4:e2:db:
7c:10:04:6f:63:66:0e:63:3e:d9:09:ed:c6:6a:d7:99:36:34:
13:a6:e2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:41:32 2026 by rpki-client