Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: SFL9eEQQAEcgL5bDY+bF4uhHgw4VRgSBHDkM2K/nfLA=
Subject key identifier: 05:24:AA:16:1E:F3:2D:04:32:F9:40:CF:5C:00:39:59:A0:1E:0F:DD
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 019CABA1DAD8846347919E95B9320139DB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 147C
Signing time: Sun 01 Mar 2026 23:00:37 +0000
Manifest this update: Sun 01 Mar 2026 23:00:37 +0000
Manifest next update: Mon 02 Mar 2026 23:00:37 +0000
Files and hashes: 1: 0Pztl2uTXxD16fJwYOZmUomSR-I.roa (hash: qxpOdzA38as8ew7phtI3wkwt8cWmyBdRvvdNKvSSdvU=)
2: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: dchO87ZMJLyzqtieiJeeBYO++UnHKv9v1LHd2OVwqdU=)
3: zNQ3P3IMHTJolqRce_or6IY_YBw.roa (hash: IouHvQG0QV0oy1fKKHRyhRE9NfsCBgE0xFqm0b1F5QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:da:d8:84:63:47:91:9e:95:b9:32:01:39:db:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Mar 1 23:00:37 2026 GMT
Not After : Mar 2 23:00:37 2026 GMT
Subject: CN=0524aa161ef32d0432f940cf5c003959a01e0fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:61:ab:14:1c:51:75:9b:3d:78:f9:7c:9c:
84:bc:a8:7d:f8:f4:bf:a7:d5:56:a0:fd:10:c1:e5:
1f:ad:ef:cc:8c:5f:0d:f1:9a:37:82:45:07:de:9f:
89:c1:2f:a3:8d:b6:e4:d0:40:0b:05:3f:bd:cb:53:
2d:cc:d2:16:50:df:2e:5c:bd:42:cc:26:51:47:37:
f8:be:c1:20:3e:fa:49:3c:7e:0c:13:9c:9e:41:dc:
64:f2:7b:49:b5:5e:ae:12:bd:79:a2:7d:7c:55:4e:
cb:34:90:cd:72:16:b7:08:ec:b2:6b:76:37:0e:57:
d2:cb:30:85:0b:51:01:c2:a2:cd:36:4c:37:16:1f:
14:1e:ea:a6:7d:c8:8c:3d:81:7e:b8:a7:36:df:7a:
a1:b9:45:dc:69:ee:35:ec:84:91:ee:89:d2:fd:0a:
e1:cf:bd:03:a6:f5:0c:d7:a1:b1:cf:f1:45:39:25:
39:c6:ed:c7:40:21:02:75:ab:5d:27:28:59:00:55:
15:bf:cd:0a:2c:67:b3:55:69:c7:94:9e:7a:c3:55:
5b:10:ca:2e:6f:4f:89:88:c2:cf:ca:eb:27:6f:99:
9d:34:c0:a9:e2:b4:3e:5b:ae:41:f7:72:6e:ef:5e:
7b:c2:70:44:b2:21:e3:9f:cd:1e:7e:ca:d2:0c:76:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:24:AA:16:1E:F3:2D:04:32:F9:40:CF:5C:00:39:59:A0:1E:0F:DD
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:72:dc:5f:56:5e:0b:af:c4:27:d9:6b:11:91:90:e2:8e:c8:
a0:da:b7:10:7c:e4:19:b0:41:4f:1d:50:9e:d8:c1:0f:f4:9a:
e9:eb:83:a8:ac:f7:10:20:bc:87:6e:56:8d:58:84:2b:a8:72:
ce:7a:69:ea:fb:c3:a1:00:64:b4:3e:1a:4b:13:9c:0e:a7:84:
af:d4:02:ba:88:35:f5:a4:db:0f:54:5c:44:45:0f:2f:e1:cb:
1c:97:26:11:e8:c8:b3:f5:5f:32:81:da:8c:3e:f1:a3:50:50:
f9:72:c5:36:29:a3:5e:cc:03:22:17:0e:08:60:66:cc:0b:aa:
c8:c6:02:9e:d8:e1:bd:df:fa:67:36:63:68:94:d7:e9:60:2f:
d1:4b:25:ff:da:76:d4:f2:ca:4e:e5:b4:ae:d9:6b:d6:a4:7f:
3a:8d:26:ee:38:6b:7c:b5:5f:c3:79:77:fd:d7:e0:c1:bc:32:
58:3b:43:ca:c9:ca:de:8c:71:1d:f7:95:1e:39:0f:4c:ab:7e:
dc:03:8c:75:95:1a:f1:e1:6f:74:00:b9:14:98:36:df:2c:24:
53:32:a7:0d:1d:ca:8b:07:2d:61:48:33:f3:8b:b2:bc:c3:ca:
e2:b0:c0:da:52:e9:ad:25:71:68:42:e3:11:c3:3a:5d:4d:6d:
9b:e8:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:21:16 2026 by rpki-client