Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
File: snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json)
Hash identifier: CTU1K4gXc6IX/0RYi6q06CthaV9+4JT5STGopvY9sk0=
Subject key identifier: 5D:B8:9D:D8:7F:0F:9C:5D:B7:D2:4B:12:A7:2B:E5:46:53:4F:42:E3
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial: 019CAC46FC7F7CF958FD8F820097F4D65C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
Manifest number: 107A
Signing time: Mon 02 Mar 2026 02:00:59 +0000
Manifest this update: Mon 02 Mar 2026 02:00:59 +0000
Manifest next update: Tue 03 Mar 2026 02:00:59 +0000
Files and hashes: 1: HyYIQlysdxbEjMCMjTsZDnQh6eA.roa (hash: g3hpyf9/HAqIKib0Sw0ECcCcqaYC2Rz7TpU4xEiIjbs=)
2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: lAcvaRhzlM/GJZ2rG5rHNxTebYUHGE0BCTOj7gD7cgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:fc:7f:7c:f9:58:fd:8f:82:00:97:f4:d6:5c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
Validity
Not Before: Mar 2 02:00:59 2026 GMT
Not After : Mar 3 02:00:59 2026 GMT
Subject: CN=5db89dd87f0f9c5db7d24b12a72be546534f42e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:96:f6:0f:30:cd:d5:89:86:c5:e3:69:61:
21:1d:f0:e7:f5:5e:3f:48:42:85:1a:bd:28:88:e6:
51:33:e5:33:f2:d9:72:de:0f:4c:48:db:1d:02:b1:
8d:13:f8:f3:1a:a8:ef:1b:4c:c4:2f:d5:f1:4b:51:
a4:71:49:ee:6b:c4:00:cb:6c:eb:2e:51:1d:19:88:
55:a4:f1:94:48:f5:de:0d:05:65:c6:4c:46:35:a8:
01:f9:3a:75:41:01:fe:2d:d0:06:62:84:da:bf:eb:
bd:68:82:18:be:70:05:ef:5b:fe:8d:86:87:df:b6:
89:ee:e3:e8:e4:80:1b:db:cd:d4:b9:0f:30:62:c3:
a3:0a:56:80:0c:00:33:8c:23:29:74:d6:8c:58:ec:
fd:36:1a:88:fd:20:9e:20:ac:50:c1:97:4a:3d:10:
4b:6a:b1:fa:c9:0f:24:4b:8a:61:88:eb:7a:41:a5:
66:34:bb:52:a7:33:8d:e9:df:50:bc:85:c0:f9:12:
84:34:76:1e:39:fc:fe:17:cc:61:74:6c:87:7a:76:
85:49:11:66:34:c5:6c:42:17:12:1e:75:8a:1f:71:
c0:c2:8f:87:64:88:ae:6c:9a:c6:56:39:fa:dc:96:
69:a1:b1:47:dc:1e:d6:88:e5:0c:5b:b9:95:93:95:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B8:9D:D8:7F:0F:9C:5D:B7:D2:4B:12:A7:2B:E5:46:53:4F:42:E3
X509v3 Authority Key Identifier:
keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:43:48:5b:26:70:7e:6c:4e:11:df:f4:ee:dc:88:dd:f8:0e:
c7:bf:a9:e2:00:39:04:01:2b:9e:ed:b7:19:9e:a4:ed:83:97:
6e:c4:b0:b0:40:bc:96:46:6b:18:0c:4e:f2:f6:2c:b1:09:71:
ba:68:cc:a9:26:e7:65:43:53:a8:3b:6a:9f:0a:69:cb:87:4e:
89:6b:56:3d:37:79:75:91:83:0a:f5:a0:d5:af:ef:ac:6e:67:
7b:5d:71:32:0d:4a:df:44:1c:91:eb:33:17:d3:79:76:9f:20:
54:f3:b3:b2:82:e2:63:cf:d5:ec:36:80:e6:b7:4f:c5:b9:d6:
f7:9d:ab:ee:7b:2d:d8:a7:e5:14:c3:da:2e:7d:50:da:ee:7f:
80:88:41:d1:f3:9e:04:9a:73:96:b5:bf:d5:b6:93:9b:05:d7:
72:34:d2:13:6d:fd:d6:18:cc:9e:76:91:7f:95:69:a7:73:80:
64:7a:67:7a:2d:51:38:8e:cb:82:f7:11:dd:8c:f0:0c:d5:e2:
7f:7f:45:bf:c3:1d:44:76:f6:58:18:30:34:4c:7b:5c:67:48:
5a:d2:11:dd:df:71:d8:5b:54:30:e9:fc:69:b1:c4:d4:f2:a0:
29:35:12:0b:e1:68:d7:0d:9e:83:be:33:2c:3e:7e:07:1c:16:
ee:c2:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:20 2026 by rpki-client