Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
File: SnDhvI7t2UeGELGv8JMPQDR1JuU.mft (raw, json)
Hash identifier: V7e1Jzv3t/HNR4Ks2yj+fUpH8UsCjbdCqVoKQy1oNMs=
Subject key identifier: F4:F7:51:B1:D9:E4:F6:19:79:EA:7D:0B:8A:13:10:46:8B:35:20:CF
Authority key identifier: 4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5
Certificate issuer: /CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
Certificate serial: 01A0CC35B7D75B6F20E347082BC76D4E08DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
Manifest number: 0232
Signing time: Wed 23 Sep 2026 03:01:07 +0000
Manifest this update: Wed 23 Sep 2026 03:01:07 +0000
Manifest next update: Thu 24 Sep 2026 03:01:07 +0000
Files and hashes: 1: SnDhvI7t2UeGELGv8JMPQDR1JuU.crl (hash: 3RGbwHO+WYpX5e03oo8QxsNPXFauWmpRwNpcYM0Kpmo=)
2: mbfy7L8D_2UAGm_dalRDD5X5-5k.roa (hash: QA1iyiTc+hx3IttbGaQYktAkhZefaHnHg6PgY6o1wcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:b7:d7:5b:6f:20:e3:47:08:2b:c7:6d:4e:08:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
Validity
Not Before: Sep 23 03:01:07 2026 GMT
Not After : Sep 24 03:01:07 2026 GMT
Subject: CN=f4f751b1d9e4f61979ea7d0b8a1310468b3520cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:38:a9:cc:0f:42:af:c5:2c:1c:ff:2a:60:
e1:61:c7:a3:53:85:52:a4:13:20:7c:a2:9c:ef:66:
0b:f3:89:cb:fb:b9:2a:7f:dc:88:a5:ed:e4:76:7d:
cd:96:b3:55:a6:c7:3c:79:db:9e:c5:fb:86:79:91:
21:7e:b9:66:7a:a9:2b:bb:51:44:28:1d:53:6c:ec:
61:19:b8:90:9c:ae:a2:06:1a:d4:ec:8f:65:0e:4f:
6c:03:53:23:e7:d6:03:9a:ad:51:f3:f6:37:e4:50:
72:f9:b7:00:3c:3f:bb:f7:b7:49:73:ac:d6:53:4e:
fd:c3:fd:e5:05:60:87:ac:14:36:85:3b:09:e2:da:
94:07:11:52:38:8b:99:c2:9d:d4:21:77:55:b5:ef:
5d:68:7b:08:95:2b:9f:70:eb:65:dc:05:e9:56:77:
f9:c2:cf:22:85:66:bb:58:e4:35:2b:f7:08:23:cf:
e0:6a:72:ae:30:7a:de:41:38:af:69:5c:dc:22:aa:
72:5a:2a:54:7a:bd:b3:5a:87:14:ab:a7:eb:8f:87:
72:5b:3c:c7:38:6d:e0:68:c4:85:0d:16:d3:57:ad:
d2:1c:30:a8:50:50:1a:a5:06:91:ae:e4:d7:4e:25:
26:e4:ad:9f:0e:f1:7d:b9:1b:20:4e:86:1a:e4:b1:
9d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F7:51:B1:D9:E4:F6:19:79:EA:7D:0B:8A:13:10:46:8B:35:20:CF
X509v3 Authority Key Identifier:
keyid:4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a7:39:ec:69:1c:c5:ea:d4:5a:3f:57:dc:45:a6:be:15:0a:
1a:7c:33:dd:0c:17:38:41:b9:5f:f3:02:35:0c:3d:b2:5d:74:
da:39:5a:00:8f:b2:31:a2:8a:8d:70:58:82:a6:89:aa:27:d0:
e0:0c:54:6e:f0:37:5e:ca:e9:76:e5:d6:33:82:e1:34:f9:2b:
ba:2c:43:95:3a:58:cf:0f:cc:90:56:da:3e:74:fa:b1:03:da:
a0:c8:1b:f3:8f:0f:ea:46:29:f8:07:20:0c:54:de:17:31:41:
c0:0e:ab:1c:03:af:2b:aa:62:a2:ae:f5:87:92:20:18:2e:5b:
75:40:9e:13:f4:44:f2:96:42:b9:d4:8d:8f:73:75:c1:91:2b:
b8:12:bf:43:b0:67:60:c3:24:d2:d1:3e:7c:9e:82:22:31:36:
e8:ac:60:76:18:06:1d:99:4e:d6:68:58:b0:aa:bb:fc:a4:42:
de:24:bd:80:bd:97:12:c8:02:a2:aa:99:46:7d:5b:0b:d3:d3:
44:68:a9:b7:6a:41:b9:09:31:6f:7c:c8:a8:f7:03:32:c7:2b:
96:c5:60:3c:dc:ae:0e:45:a3:28:2a:f2:66:6b:1b:1b:c8:a6:
80:40:8a:96:0e:5c:dd:cf:db:27:bd:10:e3:70:02:5a:45:ae:
0a:18:e3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:26:06 2026 by rpki-client