Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
File: Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft (raw, json)
Hash identifier: hySrpAh949HRJvbmzsY5VG+3wwR4g448FtD4e1JI8mk=
Subject key identifier: 0D:36:39:0B:47:09:7F:BB:7F:05:9B:AF:E9:E5:9F:48:4E:A8:57:8F
Authority key identifier: 4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
Certificate issuer: /CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Certificate serial: 019CAE355080B7AE970CCD83FE42EDECF7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
Manifest number: 0371
Signing time: Mon 02 Mar 2026 11:00:55 +0000
Manifest this update: Mon 02 Mar 2026 11:00:55 +0000
Manifest next update: Tue 03 Mar 2026 11:00:55 +0000
Files and hashes: 1: Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl (hash: ay4EnRONawPABviUHZBxremqVr7Hue8w8kjRRaM1zb8=)
2: tUzrF3nyBJ8jEfq7bWvPmVwsD-0.roa (hash: Haw+aRAR5U2cv2bj8US6YE3DJs1jpOG0OPl3Bgiz4Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:50:80:b7:ae:97:0c:cd:83:fe:42:ed:ec:f7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Validity
Not Before: Mar 2 11:00:55 2026 GMT
Not After : Mar 3 11:00:55 2026 GMT
Subject: CN=0d36390b47097fbb7f059bafe9e59f484ea8578f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cd:ea:1a:84:63:b6:5a:e5:83:9c:68:71:00:
59:32:d0:1a:81:6b:26:00:be:66:e4:b0:6b:73:3d:
29:8c:74:71:93:c0:49:14:b6:c3:94:a5:3a:ac:52:
84:12:ae:a7:e0:89:e9:25:e5:9d:f8:15:e9:cb:41:
2a:59:f5:f7:f9:43:91:99:8e:6c:1e:46:46:e5:35:
db:0a:1f:e7:10:b6:50:b5:79:75:4d:40:24:16:cb:
0a:41:85:0d:07:52:c5:79:8b:c0:d2:e3:85:f1:39:
33:7b:39:f0:a4:0a:e0:a7:42:68:2b:0d:da:a5:25:
f1:9e:5b:07:1e:d2:88:68:3d:35:0f:fb:63:53:94:
04:71:0c:ab:97:0d:b8:11:e5:d3:1a:4c:b2:13:63:
b7:b9:e7:21:d2:dc:96:f7:4e:80:4e:b9:19:56:e7:
16:34:14:4c:b3:7b:d8:fb:ff:76:91:82:ae:4e:bc:
4b:41:e1:b1:4b:5a:6d:78:bc:0a:49:77:f8:d4:2b:
4d:9b:af:21:4a:8f:b8:6a:05:73:2e:d4:17:90:ef:
74:04:9d:4f:30:68:06:eb:26:25:7d:4e:de:d5:c8:
aa:63:40:c0:5c:c2:f8:6a:89:c8:66:9f:af:a8:28:
78:12:73:39:6d:c5:a8:61:9a:ac:f2:91:99:3e:17:
14:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:36:39:0B:47:09:7F:BB:7F:05:9B:AF:E9:E5:9F:48:4E:A8:57:8F
X509v3 Authority Key Identifier:
keyid:4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cb:94:a4:55:04:8a:59:4f:86:87:14:78:8a:d7:c6:9e:ee:
e0:12:6a:96:c5:69:cd:69:2d:e0:55:c7:ac:87:73:f2:5e:90:
1f:86:56:4b:e7:ad:68:35:6c:70:c2:33:f9:7b:ab:8d:0b:a3:
48:97:9f:c1:57:ba:b8:f4:ba:a5:9c:09:34:03:23:36:96:00:
46:7f:34:8b:bc:b6:1c:b8:1f:61:bc:24:fc:a5:71:bb:4b:a2:
7c:e3:f6:1e:c5:a3:26:a5:b5:97:73:e1:e3:7c:21:67:31:a9:
09:14:58:5c:3a:ad:7f:ae:f3:30:75:75:df:07:13:da:df:5c:
c8:d6:e4:5b:9a:c2:03:d3:a6:e9:7d:2a:4b:4f:c9:dd:63:01:
34:ce:c9:83:50:c6:e9:a6:04:20:78:c8:04:2c:69:81:a2:03:
86:76:ee:dc:81:25:1e:d2:2f:41:76:d9:7d:cc:a0:b6:8b:9d:
70:9a:ec:f7:00:80:bf:c1:7d:e8:7e:4b:50:f1:23:bf:db:f8:
d9:66:d2:a7:a1:b6:76:08:30:6b:77:7a:b0:79:c4:f7:b2:6b:
97:f9:18:3c:94:07:d7:f1:ba:4f:ca:87:d3:ce:74:8a:d4:9f:
df:48:ba:86:76:95:89:d8:a1:6b:6c:8a:49:f8:91:f2:08:b5:
d8:51:28:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:27 2026 by rpki-client