Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
File: Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft (raw, json)
Hash identifier: hTdY1Q71549SzJvMGPH816zlyY/vLenMDr1TriHBG6E=
Subject key identifier: DF:AA:4A:6C:03:D5:07:3E:9A:BE:99:90:D0:0E:8B:04:20:1C:85:07
Authority key identifier: 4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
Certificate issuer: /CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Certificate serial: 019D9D3F30DA3A42C345A71A86091CCBEC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
Manifest number: 03ED
Signing time: Fri 17 Apr 2026 21:00:57 +0000
Manifest this update: Fri 17 Apr 2026 21:00:57 +0000
Manifest next update: Sat 18 Apr 2026 21:00:57 +0000
Files and hashes: 1: 05dVc6ABA35s1lIVZCX4MyAVWsE.roa (hash: A7QaqhKGTQnL4Dm/bLJ1IF2pAVw/4/vPWwEpS9iWxoc=)
2: Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl (hash: pBS/Asxjn5TW7/AdkfWe/ceakAdOMvOxUP0FzcBeJ6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:30:da:3a:42:c3:45:a7:1a:86:09:1c:cb:ec:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Validity
Not Before: Apr 17 21:00:57 2026 GMT
Not After : Apr 18 21:00:57 2026 GMT
Subject: CN=dfaa4a6c03d5073e9abe9990d00e8b04201c8507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b0:71:78:46:7a:5a:b0:b4:7b:e0:63:0c:13:
86:01:7c:b2:f3:30:3e:24:c1:49:ae:eb:ea:73:6e:
e0:1e:f7:2a:39:cc:20:f4:43:cc:2a:d7:ca:54:7a:
c4:94:57:ee:04:b1:ce:67:53:ee:77:68:c3:60:93:
ba:e1:cf:69:1d:c1:f3:a5:2c:75:14:de:b0:3f:9d:
73:b9:6b:83:9c:2b:95:bd:fc:db:45:2d:07:3c:a1:
36:06:48:ff:ef:57:a6:83:a7:5d:cb:96:c8:1a:b7:
e7:27:20:35:49:38:a0:5e:b1:8a:86:3e:45:a8:69:
34:80:f4:83:3b:3d:0b:b0:98:4c:e3:8a:0e:0e:4a:
58:d6:30:56:2e:fe:05:e8:6a:98:f0:2d:37:c1:e0:
75:ae:74:e3:90:5e:fb:86:ef:20:ea:88:f6:a7:d6:
e9:fa:07:0c:51:ca:8f:4c:e7:2e:cb:25:ce:e6:f7:
de:d3:ef:30:ed:16:bd:7a:ff:d6:4f:cd:5e:cd:24:
1f:12:a8:04:38:85:b2:f2:e0:aa:0f:e5:ba:b6:cd:
f1:b8:13:8f:b3:25:45:2e:5c:2a:29:c7:ed:f8:a4:
d1:47:ff:27:42:10:db:1a:96:d3:df:2d:4b:f0:00:
6f:04:2e:88:49:88:20:a0:f3:97:34:d9:88:9b:17:
87:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AA:4A:6C:03:D5:07:3E:9A:BE:99:90:D0:0E:8B:04:20:1C:85:07
X509v3 Authority Key Identifier:
keyid:4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5c:c1:a2:61:cb:e5:af:8e:d1:fb:2f:4f:e4:0c:ac:6a:e9:
3d:b5:8b:75:4b:13:67:fd:fe:bd:86:32:4e:ed:7c:87:6e:21:
c2:e0:82:9e:1b:fc:63:ff:d1:b1:05:d0:29:81:f7:c6:6e:54:
a0:90:eb:c8:88:20:d2:74:e5:81:69:8d:c6:be:9d:6b:c2:93:
79:90:f6:9b:55:1a:0e:7b:72:6f:f4:37:57:3a:e8:a8:1a:01:
6d:7c:68:77:00:be:a5:13:75:2b:53:2a:ff:8c:1d:b2:c6:a4:
ed:fc:85:35:3b:27:57:62:2e:a3:7c:56:a4:74:57:7a:cd:a9:
aa:94:fd:df:6f:48:71:62:89:0e:16:96:dc:c3:7d:55:5d:c9:
2a:e5:c8:ca:3c:80:dc:d7:91:ee:a2:75:93:30:ba:ed:d8:b1:
a4:07:83:2d:c1:29:28:ce:08:3d:52:df:7c:1e:df:a4:df:ab:
96:3f:0e:cd:33:01:df:a3:72:32:74:70:4a:db:32:3d:3b:c7:
dc:72:cc:37:c3:88:13:57:ec:7d:ca:2c:f4:8c:0b:76:b3:d2:
59:02:02:3d:06:46:e1:be:cf:45:4a:d7:82:26:40:49:b1:6e:
38:67:6b:56:57:2e:ce:36:5f:66:04:a4:b3:a1:f4:9d:c8:0b:
30:2d:a7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:55:34 2026 by rpki-client