Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
File: sNcTFlrGKE-0HV38gmV3_B2gtzA.mft (raw, json)
Hash identifier: A2NS/jR2zdbdN0Bdg9FRBWtEFvFzSTB+egIKHDuFtwQ=
Subject key identifier: F2:73:19:A9:0D:51:3C:DE:32:F7:95:E5:1D:48:77:20:40:B3:98:21
Authority key identifier: B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
Certificate issuer: /CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
Certificate serial: 019CAB6ADF4AF6B318728E576F40DC7BBD02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
Manifest number: 155C
Signing time: Sun 01 Mar 2026 22:00:33 +0000
Manifest this update: Sun 01 Mar 2026 22:00:33 +0000
Manifest next update: Mon 02 Mar 2026 22:00:33 +0000
Files and hashes: 1: sNcTFlrGKE-0HV38gmV3_B2gtzA.crl (hash: /g1dEEkS/658FSfSVQmb2UtMT+a/mGhbuxAHaSNqvlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:df:4a:f6:b3:18:72:8e:57:6f:40:dc:7b:bd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
Validity
Not Before: Mar 1 22:00:33 2026 GMT
Not After : Mar 2 22:00:33 2026 GMT
Subject: CN=f27319a90d513cde32f795e51d48772040b39821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:ed:82:f9:34:e4:03:20:76:57:6b:4b:6c:
71:b8:ca:e6:a5:82:30:55:a6:da:24:37:c1:41:d8:
a6:2c:3e:ad:e2:6e:da:2b:a6:2c:ff:09:a2:51:49:
ba:63:98:53:c6:8d:3f:3f:d4:84:90:60:f1:8d:a1:
14:fd:5f:a0:8e:6c:e0:69:a0:92:01:87:c2:5b:74:
54:4a:bc:42:ab:fa:32:cb:df:a4:ac:85:6b:92:23:
fc:09:dc:f0:bb:67:9c:ec:9d:3b:85:03:2a:da:d5:
e0:00:04:b3:87:43:3f:c9:02:35:3e:9d:db:ec:a1:
94:3e:60:43:32:52:b0:43:92:13:f2:8c:36:b8:b3:
8b:4b:6b:f9:f5:f8:79:c4:3c:56:5a:b5:ee:59:b4:
ed:cf:bd:a3:8d:74:49:a4:92:91:16:95:21:53:45:
84:85:de:96:fc:d2:9f:3f:4b:e0:d1:7e:b3:71:e3:
91:ea:0b:79:18:f5:44:c2:18:f2:af:f9:e4:97:1c:
aa:a2:cc:b1:cd:5d:ed:71:26:0a:9d:3b:f9:ff:02:
a0:dc:6c:c1:77:b8:5e:67:26:d0:32:34:32:09:32:
87:67:81:eb:0d:4a:37:45:d6:f6:4e:26:50:fd:a2:
13:18:1e:7b:16:73:f8:7f:84:23:13:16:09:19:6e:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:73:19:A9:0D:51:3C:DE:32:F7:95:E5:1D:48:77:20:40:B3:98:21
X509v3 Authority Key Identifier:
keyid:B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:36:57:73:bc:14:2b:43:c4:d9:57:83:fa:35:ff:fb:d1:33:
77:2b:98:63:81:46:e0:71:04:f3:4a:c9:e8:bc:71:e3:1b:01:
69:1e:76:83:68:60:fb:21:ad:af:c3:84:54:c0:92:f9:1a:7f:
d0:6b:4d:56:ae:ae:98:3c:bc:b5:5e:9e:8e:f9:e0:e4:b3:c6:
11:d0:76:2b:67:45:91:15:1d:01:d8:be:86:0a:c9:d1:8f:ef:
54:d2:81:65:e0:42:14:65:1d:c4:75:1a:a5:30:cc:b5:ef:4b:
56:9a:1d:ba:2b:12:13:73:98:35:e6:e6:4f:61:c3:32:85:9e:
7c:0f:42:c5:78:6c:77:93:b3:db:e4:46:4d:97:96:34:3a:a7:
4c:d8:d5:b5:ad:9b:6f:bf:d8:85:04:d1:b5:44:a5:b0:ec:0a:
4e:fe:23:1f:df:23:f2:ff:9c:29:af:99:78:a6:56:30:3d:67:
e6:b3:f3:3e:7d:36:30:5d:9f:aa:89:5e:02:16:15:55:aa:33:
dd:40:b2:c4:25:5c:b3:84:35:25:90:09:2c:9a:53:4c:17:e0:
0e:29:39:8a:3a:b5:bb:c1:42:9e:0a:b5:20:cc:c2:eb:90:25:
3e:19:3a:66:8c:1d:45:3b:d3:43:50:5a:c6:28:9c:a3:0b:ef:
94:0f:88:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:06 2026 by rpki-client