Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
File: snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json)
Hash identifier: WHQMkw9b3gDBBeJogh3o3QAeh+Jbs4st1xEuQIlyY9M=
Subject key identifier: 18:99:FC:01:2B:2B:0E:A9:85:72:9D:8C:15:D5:E3:9C:96:C9:B6:D0
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial: 019D99D027E50E6D5736FCE9EEECDFB1A297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
Manifest number: 10F5
Signing time: Fri 17 Apr 2026 05:00:48 +0000
Manifest this update: Fri 17 Apr 2026 05:00:48 +0000
Manifest next update: Sat 18 Apr 2026 05:00:48 +0000
Files and hashes: 1: HyYIQlysdxbEjMCMjTsZDnQh6eA.roa (hash: g3hpyf9/HAqIKib0Sw0ECcCcqaYC2Rz7TpU4xEiIjbs=)
2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: Oz0QzDTay5j6U6+kpjNVDsRe/LmCpYF5S1bBx14g6Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:27:e5:0e:6d:57:36:fc:e9:ee:ec:df:b1:a2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
Validity
Not Before: Apr 17 05:00:48 2026 GMT
Not After : Apr 18 05:00:48 2026 GMT
Subject: CN=1899fc012b2b0ea985729d8c15d5e39c96c9b6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:a7:8b:0d:ab:49:b9:fc:a5:11:7e:62:f5:
dc:92:8c:9d:01:62:f1:c2:0d:af:d0:9d:28:34:aa:
63:70:0c:e1:e3:36:30:cb:51:78:1d:9d:1f:f7:64:
b3:43:ee:03:05:fb:26:75:00:98:74:72:87:eb:4a:
64:e9:70:ba:eb:b5:c2:9a:2e:50:d2:11:4f:05:74:
4f:fd:33:f1:b4:f3:72:b3:2a:0f:e5:a7:d2:2a:54:
3f:a2:83:7a:73:5c:1f:e9:63:0e:8d:95:8f:fd:0e:
99:9a:0b:ab:37:c8:bd:52:dd:30:ab:29:33:eb:66:
5d:75:fa:26:2e:c6:b6:4e:e2:67:99:8a:dd:2b:c6:
33:d3:57:f0:db:73:82:6c:cd:15:96:2c:68:fa:04:
a9:d2:0a:21:87:a4:da:93:20:65:1f:86:87:f2:5a:
af:b1:34:e4:0f:05:07:04:23:b3:4f:d3:a5:e5:ab:
4f:d2:79:e9:81:d6:42:4a:13:8e:88:c0:55:37:8c:
5d:71:02:8d:9d:e7:56:5e:f3:44:96:c6:17:05:4a:
f5:d9:54:30:bd:f1:e8:63:49:20:3f:2a:98:95:ca:
5b:79:ed:9a:54:39:19:e6:91:5a:ae:62:9c:54:d2:
6e:a6:b5:7c:26:da:bf:dc:b8:88:70:df:49:af:cc:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:99:FC:01:2B:2B:0E:A9:85:72:9D:8C:15:D5:E3:9C:96:C9:B6:D0
X509v3 Authority Key Identifier:
keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:75:0f:70:21:94:18:0d:b8:a1:3d:e9:76:db:51:3d:3b:f4:
7b:c3:f9:c0:27:32:dc:14:45:91:3c:31:85:12:b9:5e:35:0b:
d3:a6:b9:3a:98:45:26:30:42:44:4f:bc:8b:b8:3c:38:77:a5:
a3:e0:a4:e0:1d:bd:01:b5:0a:3f:f3:df:dc:41:be:ce:64:73:
08:46:7a:55:ef:eb:0f:47:8d:80:2d:83:80:3d:2c:63:83:d5:
6a:d6:1b:fa:38:74:0d:bd:25:0a:fc:45:2e:49:af:97:de:d5:
c9:7a:f9:c0:1d:93:c2:07:05:6e:b1:43:c1:56:54:e7:3f:d5:
87:6f:4c:9e:2b:85:a1:90:b7:99:1a:a7:a3:11:f5:5d:2b:35:
5c:73:0d:ae:27:db:4a:0b:1e:67:01:23:a8:4d:78:e0:a9:11:
83:c1:62:65:b7:4a:9d:21:c2:fb:67:9a:77:a9:23:97:7b:1f:
d4:4a:f1:81:43:10:cd:a5:da:e4:a1:38:be:09:32:a4:c9:35:
1f:f1:19:47:fe:7a:32:93:4a:e6:a6:b5:de:f9:e7:f3:21:87:
6b:51:fc:76:57:19:ac:df:1f:1a:01:08:e1:27:10:ee:d5:21:
dd:44:9a:a7:12:69:af:03:59:e0:a2:60:bc:36:a8:da:db:04:
c4:61:d2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:04:51 2026 by rpki-client