Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: jgUqASXC/87ZcPySV2IkKZp7gBCfbmhGvfQBDIaYLc8=
Subject key identifier: 80:EC:84:C3:CA:EB:F7:E6:90:73:05:2C:07:2A:B7:E4:94:48:8A:89
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 019D992B4FE85C48C01EE25E2F0D7105EB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 14F7
Signing time: Fri 17 Apr 2026 02:00:45 +0000
Manifest this update: Fri 17 Apr 2026 02:00:45 +0000
Manifest next update: Sat 18 Apr 2026 02:00:45 +0000
Files and hashes: 1: 0Pztl2uTXxD16fJwYOZmUomSR-I.roa (hash: qxpOdzA38as8ew7phtI3wkwt8cWmyBdRvvdNKvSSdvU=)
2: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: Hf6v76J+b8GdlKb+mGIMNTbKyI2jZ8ZJmubHfQddq0I=)
3: zNQ3P3IMHTJolqRce_or6IY_YBw.roa (hash: IouHvQG0QV0oy1fKKHRyhRE9NfsCBgE0xFqm0b1F5QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:4f:e8:5c:48:c0:1e:e2:5e:2f:0d:71:05:eb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Apr 17 02:00:45 2026 GMT
Not After : Apr 18 02:00:45 2026 GMT
Subject: CN=80ec84c3caebf7e69073052c072ab7e494488a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fb:20:b6:83:7b:e0:60:dd:03:0d:07:f5:cb:
93:57:1a:4a:57:5b:ee:87:55:8a:ca:09:1e:aa:84:
38:bd:1b:a8:52:fa:83:8f:3f:b2:d5:18:1a:da:99:
28:da:88:ef:4b:ce:ac:c5:d6:45:91:6b:5a:fa:61:
a8:30:2e:91:a1:04:5b:e5:d3:70:44:64:bf:f1:17:
c6:0a:2a:c6:3c:9e:4c:ab:58:ac:bf:d0:73:dd:1b:
00:fa:aa:3c:12:c8:86:01:3a:0c:3f:1e:c1:64:be:
99:e9:e7:e2:58:95:d3:56:71:a6:0b:b1:6b:cf:e8:
fe:7f:9b:d8:67:47:e8:49:7c:3d:4d:d6:a1:9b:e5:
51:82:a8:72:d1:9e:8c:98:b7:c8:26:e3:d6:9c:95:
b0:54:b3:1f:ac:7b:17:96:28:f0:a0:63:61:5b:9a:
0f:0c:55:04:f6:df:b3:7a:cd:f2:fc:aa:a5:87:30:
c2:64:8f:6c:bd:df:ce:95:cb:d6:b9:39:b2:f8:6e:
98:c0:eb:71:d8:a7:aa:bd:9f:e7:07:05:02:0f:e9:
d1:76:8a:0a:31:33:4b:86:c1:8d:4a:0e:dc:f1:b1:
52:36:97:0c:6b:91:7e:5a:ac:4f:fb:a0:02:30:c3:
55:65:81:b3:74:13:fe:2c:42:9a:2d:7f:bb:98:b5:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EC:84:C3:CA:EB:F7:E6:90:73:05:2C:07:2A:B7:E4:94:48:8A:89
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6e:e8:b5:6b:38:21:13:b1:f5:ea:23:ea:df:0e:0e:f2:3a:
43:ec:1b:5c:4d:42:31:98:f7:8a:30:74:83:24:eb:eb:d8:5f:
d8:c0:11:10:5d:21:01:fe:c1:6a:31:db:9a:d8:e2:96:c2:d2:
f0:ac:68:1f:f7:f8:48:56:f8:68:05:7b:f7:aa:40:47:71:48:
69:5e:6f:38:82:23:22:10:cc:01:75:c2:c2:56:01:ea:ce:db:
a7:b3:13:5c:77:21:ab:15:70:9d:11:33:5f:16:a1:92:5f:79:
ac:a5:29:fc:10:57:2d:d7:57:f2:00:88:f8:3f:ee:ab:3e:76:
a5:51:f0:8d:51:22:80:41:db:3b:d4:f9:ab:a3:66:bb:1f:85:
cf:bb:a2:a6:3e:7d:d2:81:5f:23:86:19:ef:6b:9e:40:fd:fc:
e2:05:87:5e:54:0f:ec:da:52:72:0f:49:71:b6:da:59:f7:05:
97:6f:9e:df:04:cd:83:f6:0c:d2:b0:27:01:07:16:fa:f1:0c:
bc:d1:72:78:c7:4b:cf:a9:8d:30:84:7f:47:1b:93:a0:a8:55:
c8:92:74:1c:c1:45:dd:6c:34:ee:df:82:b7:3c:12:c6:bc:42:
40:4b:9f:2b:7d:fc:10:18:d1:43:19:ed:44:6b:80:0d:8c:66:
de:e2:0d:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK0/oXEjAHuJeLw1xBetqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNzQ5YmM5Y2QyY2Y4ZGZmY2YyZmZlZDc4ODRmYmMxM2Ni
M2U0NWQwHhcNMjYwNDE3MDIwMDQ1WhcNMjYwNDE4MDIwMDQ1WjAzMTEwLwYDVQQD
Eyg4MGVjODRjM2NhZWJmN2U2OTA3MzA1MmMwNzJhYjdlNDk0NDg4YTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfsgtoN74GDdAw0H9cuTVxpKV1vu
h1WKygkeqoQ4vRuoUvqDjz+y1Rga2pko2ojvS86sxdZFkWta+mGoMC6RoQRb5dNw
RGS/8RfGCirGPJ5Mq1isv9Bz3RsA+qo8EsiGAToMPx7BZL6Z6efiWJXTVnGmC7Fr
z+j+f5vYZ0foSXw9Tdahm+VRgqhy0Z6MmLfIJuPWnJWwVLMfrHsXlijwoGNhW5oP
DFUE9t+zes3y/KqlhzDCZI9svd/OlcvWuTmy+G6YwOtx2KeqvZ/nBwUCD+nRdooK
MTNLhsGNSg7c8bFSNpcMa5F+WqxP+6ACMMNVZYGzdBP+LEKaLX+7mLXtRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDshMPK6/fmkHMFLAcqt+SUSIqJMB8GA1UdIwQY
MBaAFLJ0m8nNLPjf/PL/7XiE+8E8s+RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYzhmZGMtOWQ1NS00NWRiLWEyNDMt
ZjE2Njk3ZDcyYTcxLzEvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hYzhmZGMtOWQ1NS00NWRiLWEyNDMtZjE2Njk3ZDcyYTcx
LzEvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP27otWs4
IROx9eoj6t8ODvI6Q+wbXE1CMZj3ijB0gyTr69hf2MAREF0hAf7BajHbmtjilsLS
8KxoH/f4SFb4aAV796pAR3FIaV5vOIIjIhDMAXXCwlYB6s7bp7MTXHchqxVwnREz
Xxahkl95rKUp/BBXLddX8gCI+D/uqz52pVHwjVEigEHbO9T5q6Nmux+Fz7uipj59
0oFfI4YZ72ueQP384gWHXlQP7NpScg9JcbbaWfcFl2+e3wTNg/YM0rAnAQcW+vEM
vNFyeMdLz6mNMIR/RxuToKhVyJJ0HMFF3Ww07t+CtzwSxrxCQEufK338EBjRQxnt
RGuADYxm3uIN/A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:06 2026 by rpki-client