Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
File: sNcTFlrGKE-0HV38gmV3_B2gtzA.mft (raw, json)
Hash identifier: aSCj12Za4FJtdwdFTbJdMAJkkuuaMznUs6shwxrMvuI=
Subject key identifier: C1:B6:9B:1A:CF:5A:0B:38:7D:7B:71:B9:07:36:76:FD:62:6B:83:81
Authority key identifier: B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
Certificate issuer: /CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
Certificate serial: 019D9AE3304F9585C1D836282529A7253D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
Manifest number: 15D8
Signing time: Fri 17 Apr 2026 10:01:13 +0000
Manifest this update: Fri 17 Apr 2026 10:01:13 +0000
Manifest next update: Sat 18 Apr 2026 10:01:13 +0000
Files and hashes: 1: sNcTFlrGKE-0HV38gmV3_B2gtzA.crl (hash: 3s4FeScKTamZIq0dlmtjVjDq9gxMa7mtE1Kc/yuLmpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:30:4f:95:85:c1:d8:36:28:25:29:a7:25:3d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
Validity
Not Before: Apr 17 10:01:13 2026 GMT
Not After : Apr 18 10:01:13 2026 GMT
Subject: CN=c1b69b1acf5a0b387d7b71b9073676fd626b8381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:c2:e5:f7:b6:43:70:bd:9c:a9:50:d2:8c:
65:a3:6a:fc:dc:18:db:09:9a:31:f8:73:da:20:97:
92:77:f7:70:4e:b0:03:32:7c:42:b0:19:56:e0:6e:
1a:29:2f:d4:19:90:a8:9c:40:68:38:05:67:d0:ee:
84:94:63:6a:fa:b6:6e:c8:4b:fd:31:c4:c2:e8:22:
bc:24:8e:37:70:79:d6:63:9f:c5:bc:79:f8:25:8a:
1b:38:3f:23:e9:a5:b3:3a:d4:35:20:ce:89:aa:e1:
6c:98:0b:73:27:e4:be:a9:7c:95:e8:31:5f:e5:94:
74:7b:79:0a:df:c8:88:e6:d6:be:ca:ca:e1:4a:00:
a3:57:2a:0a:21:ad:cf:c8:24:66:50:4d:2c:50:48:
48:2c:3e:2e:29:b5:db:6d:99:38:ba:7b:8c:91:98:
bd:b0:72:31:96:41:e9:a5:d9:80:57:65:dd:48:b1:
28:9c:91:5c:af:ee:7a:d2:7d:1b:f4:99:95:3b:be:
8f:61:16:4b:3b:b2:d6:88:ae:1b:e3:41:ee:5d:ee:
d6:0c:c2:0f:48:7e:3e:e9:b0:93:8d:06:d4:f4:66:
17:39:85:77:66:0d:f9:e4:35:a3:09:4d:1b:37:68:
94:71:b2:ef:90:6c:6c:7b:8b:91:6b:64:e3:77:21:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B6:9B:1A:CF:5A:0B:38:7D:7B:71:B9:07:36:76:FD:62:6B:83:81
X509v3 Authority Key Identifier:
keyid:B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3a:e8:f5:33:19:9a:fc:4c:ea:f3:d7:ca:c6:a6:ae:c1:1b:
af:11:0d:7c:bb:b7:72:04:5c:ae:cd:7e:1b:48:52:03:bd:13:
ec:5e:8b:ba:33:5c:da:f3:f5:cf:fe:70:d3:f7:39:00:fe:09:
3f:7c:4d:57:b9:94:88:ac:f8:ef:1c:57:ea:3a:b3:9b:ef:c0:
b3:c3:d4:ca:f9:77:ad:aa:44:37:6d:d9:7a:8f:03:bc:34:00:
cb:37:ba:04:9d:35:14:f8:1a:20:8b:c6:09:56:8c:71:75:f9:
1c:98:c4:06:34:d3:7b:70:aa:33:b7:f0:af:ec:cb:f2:25:b5:
41:63:cd:7b:a2:86:6a:f2:0b:65:76:1a:e5:46:72:d6:23:1b:
a8:6d:49:e7:26:ea:9d:c4:6d:a6:40:17:9c:6e:89:32:f8:0b:
75:0c:ed:91:88:b6:ac:59:e9:ef:6e:02:83:e4:04:9a:df:33:
5d:4d:be:b9:96:18:30:2b:cc:06:be:ce:9c:6b:08:42:33:b7:
b2:70:ff:70:b8:ca:0f:92:b3:ed:b6:1d:5b:ec:46:ab:d3:c2:
a0:d0:6b:56:29:40:78:13:98:72:7b:e5:17:2f:75:ec:ab:92:
0f:99:fe:e2:33:17:b4:46:2e:5c:1f:11:40:6f:42:31:dc:88:
7f:96:ff:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:55 2026 by rpki-client