Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
File: SnqRfdz8JujIezCFi28H8po9tD4.mft (raw, json)
Hash identifier: biSm/TbpqXuzW8lKaCARTIy3sl/e9INnzV3r4nswQuI=
Subject key identifier: C8:99:23:24:CF:AD:7A:D2:EC:C3:20:E1:4D:49:26:FC:79:75:C4:27
Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
Certificate issuer: /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Certificate serial: 019CAC100F3580A20BA4453B90BC38DC3442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
Manifest number: 17F6
Signing time: Mon 02 Mar 2026 01:00:59 +0000
Manifest this update: Mon 02 Mar 2026 01:00:59 +0000
Manifest next update: Tue 03 Mar 2026 01:00:59 +0000
Files and hashes: 1: SnqRfdz8JujIezCFi28H8po9tD4.crl (hash: hRdFu75wn33r/vmWcr280vP9sJsn3XbTmYVnZm5nfu4=)
2: gaFppvVddFLc9YOMVwUzFNcCgUQ.roa (hash: i+Kh8i4+DKnTEKBuSgTv7ekccdiOHpGuMvTmjdxcqYc=)
3: lAOACP6fIFrSs106QfV9vDc0Enk.roa (hash: rcK1+vZOHdd9T291evHaFUXPt0RJ4Nnm4VGGlDkZdbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:0f:35:80:a2:0b:a4:45:3b:90:bc:38:dc:34:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Validity
Not Before: Mar 2 01:00:59 2026 GMT
Not After : Mar 3 01:00:59 2026 GMT
Subject: CN=c8992324cfad7ad2ecc320e14d4926fc7975c427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2c:3e:02:d2:d5:e0:96:3b:fe:9a:b0:e3:15:
88:05:c3:2e:d9:41:bb:28:d6:ed:c5:4c:50:83:5c:
8d:72:f8:9a:74:8a:e0:3f:05:12:ef:c6:8d:85:4b:
25:55:5b:df:21:ee:e1:e8:c9:3a:dc:06:c1:59:de:
33:ff:ae:2e:64:21:24:3e:87:62:d6:83:a1:06:36:
c2:69:4b:e3:8f:b0:cb:14:ef:c9:c1:0b:37:cc:43:
2f:c1:12:3b:88:a0:8d:3c:c7:ab:1d:b4:28:ae:91:
9a:39:71:24:71:68:14:d4:04:f5:67:72:e8:9d:ba:
97:c7:4f:50:64:89:c3:ea:cd:ee:db:9d:90:a8:2d:
d9:ca:00:d2:41:08:f9:1c:3d:4d:5c:06:bb:3f:b9:
fa:37:d3:4d:63:85:1c:60:79:03:65:d4:c8:cb:9b:
39:e8:09:81:68:fd:ca:96:b6:86:7c:af:ff:a3:5a:
7f:51:ae:cd:a1:a8:c2:9e:12:3f:9d:bf:61:80:fd:
56:dc:72:c5:72:23:6b:fa:74:e7:20:86:a1:e4:23:
2a:cb:d9:bd:b4:17:4d:10:7b:7f:79:65:47:13:23:
e5:5b:b0:0c:17:1b:d2:27:c2:30:3c:49:0c:d7:bd:
36:6c:db:39:5c:21:e5:4f:96:a8:7f:0a:da:59:73:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:99:23:24:CF:AD:7A:D2:EC:C3:20:E1:4D:49:26:FC:79:75:C4:27
X509v3 Authority Key Identifier:
keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:af:46:01:cc:84:6f:73:3a:8c:f0:51:28:26:da:92:b0:7b:
d2:6d:5b:ec:b5:32:db:82:56:6e:6d:9d:0e:b5:2d:1b:8d:36:
bc:46:63:48:0d:2f:fb:84:b6:83:2d:62:c9:4b:5c:f3:c3:2b:
5e:a4:3f:10:da:97:bf:b0:ad:a3:89:15:75:b8:60:80:74:c8:
4f:d9:4a:56:14:ef:f6:4e:cb:d1:22:74:b8:bc:09:33:2e:d6:
41:55:d0:c8:de:55:4e:90:32:60:3f:18:f7:de:fe:a5:57:5c:
2e:d6:61:c2:7a:ab:54:ba:3b:77:af:3d:24:72:49:7f:38:53:
c1:3b:90:74:76:82:42:f3:6b:c6:84:fe:0d:2b:0d:cf:38:ed:
09:85:aa:b3:dd:06:d5:2d:ce:7b:b5:b8:64:18:50:e5:22:b0:
57:94:f4:e9:cd:f0:3c:f8:16:c8:41:94:e0:fa:13:5b:bf:56:
32:9f:01:60:a0:bb:97:76:89:c9:db:66:8c:56:13:c4:10:f2:
e8:79:44:38:68:41:4f:52:01:4f:2d:c8:af:af:7f:9c:fc:c4:
36:75:b8:85:c1:7c:ed:1a:2a:dc:66:2c:ff:e2:bd:67:84:eb:
16:ab:bd:8a:a6:c8:4c:0b:33:72:d5:56:4c:57:64:78:4b:81:
30:ce:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:46 2026 by rpki-client