Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
File: SnqRfdz8JujIezCFi28H8po9tD4.mft (raw, json)
Hash identifier: I3wUwZ2W1Henhs+Lgs9M6a3FEz4I8eQJ0VqjFANUs0o=
Subject key identifier: A4:FE:56:5A:6C:9A:FC:46:9C:D1:14:21:F6:93:DC:2C:5D:4A:B1:29
Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
Certificate issuer: /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Certificate serial: 019D9998D2A306017A072304E597EBAACB10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
Manifest number: 1871
Signing time: Fri 17 Apr 2026 04:00:22 +0000
Manifest this update: Fri 17 Apr 2026 04:00:22 +0000
Manifest next update: Sat 18 Apr 2026 04:00:22 +0000
Files and hashes: 1: SnqRfdz8JujIezCFi28H8po9tD4.crl (hash: XJ5Vv1HFT8C6nANju39qvZIaPxFmFc9+sk4TtgHhKeE=)
2: gaFppvVddFLc9YOMVwUzFNcCgUQ.roa (hash: i+Kh8i4+DKnTEKBuSgTv7ekccdiOHpGuMvTmjdxcqYc=)
3: lAOACP6fIFrSs106QfV9vDc0Enk.roa (hash: rcK1+vZOHdd9T291evHaFUXPt0RJ4Nnm4VGGlDkZdbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:d2:a3:06:01:7a:07:23:04:e5:97:eb:aa:cb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Validity
Not Before: Apr 17 04:00:22 2026 GMT
Not After : Apr 18 04:00:22 2026 GMT
Subject: CN=a4fe565a6c9afc469cd11421f693dc2c5d4ab129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:a8:44:b0:48:c0:45:31:26:d1:47:1b:72:
8d:e2:1b:9e:8f:e0:af:27:a2:43:96:3d:14:8e:10:
10:2a:b1:b1:61:dd:c5:fb:51:ed:9a:c3:3f:17:05:
40:cc:42:49:ce:96:85:8f:19:ca:75:49:90:cc:0a:
2c:a6:59:ac:75:a6:bb:67:90:38:07:c1:67:a9:c1:
51:93:f4:1d:1d:f7:12:22:14:5e:a9:0e:7b:92:98:
a4:fc:70:69:d2:3d:e3:50:b0:59:39:0c:3f:02:c2:
52:0f:a6:2c:6f:c2:13:33:cb:53:d0:14:d5:8d:00:
44:8c:d9:de:1c:fb:f4:af:37:45:3f:e9:dc:3d:a6:
27:b8:a3:3d:11:eb:a3:95:68:20:02:43:20:13:a0:
7e:ab:a5:41:6d:ae:56:e6:b0:13:e1:d1:e5:60:5e:
55:b2:a6:86:23:a8:63:7e:1c:6d:2b:8b:c8:11:a1:
46:55:f6:ce:e2:31:7b:25:a5:dc:44:dc:c1:2e:2a:
87:41:b9:8f:53:28:6a:57:b3:ab:25:16:eb:6f:6e:
9e:db:c6:1e:4d:3e:de:4f:70:3d:98:06:ac:7c:b7:
44:14:95:1b:16:e1:15:d1:cc:8b:d4:db:69:8d:b2:
65:07:c3:5f:bf:df:77:d3:e8:cc:9f:d9:ae:77:90:
a4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FE:56:5A:6C:9A:FC:46:9C:D1:14:21:F6:93:DC:2C:5D:4A:B1:29
X509v3 Authority Key Identifier:
keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:65:94:5e:e8:82:a5:82:f9:f4:86:84:ba:82:dc:ef:29:7f:
33:e1:e2:27:4b:40:a5:bd:7b:8e:e2:3f:72:da:74:da:75:e0:
36:4b:d9:68:d3:53:27:c5:0e:76:ae:b0:14:8c:5e:9b:29:57:
33:68:d8:11:6f:50:76:c3:04:f0:00:28:42:a4:6c:8b:50:1b:
1a:eb:a1:0d:ab:9c:e1:30:37:e6:18:ac:bf:4c:df:65:85:20:
5a:48:cc:61:10:e7:43:79:2e:55:72:e7:5a:e2:4f:96:be:80:
01:0d:54:c4:77:8c:ef:da:71:4a:10:2b:be:35:04:03:c2:64:
23:ee:00:8a:6a:7b:b2:55:1f:a1:20:88:5f:8b:64:8c:ee:36:
b7:16:32:15:83:e8:f7:ae:94:77:e2:7e:0c:2a:8e:8f:fa:47:
da:55:bf:d0:ab:ed:c5:5f:de:ef:7d:83:f8:cc:f0:4e:2e:df:
b6:6e:11:a8:26:44:c5:e5:0c:52:4d:85:56:18:c4:7f:bd:50:
b7:a3:02:32:78:5a:c4:11:bc:1d:d1:9e:39:65:2e:f8:f0:53:
2e:76:78:06:ea:8b:52:cb:7d:bd:88:bf:9f:f0:ce:7e:be:9d:
bb:05:d9:f1:2f:de:1d:83:bd:82:2d:34:f8:f2:9c:46:2a:cd:
b9:b9:54:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:11 2026 by rpki-client