Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: /T0aWpynsynb+TIpYYzxhqIMGifSBqW3+h2PDJg/X/U=
Subject key identifier: 33:B4:D8:41:53:4C:18:E4:49:DD:2F:48:AE:A9:EF:4E:92:0A:88:CC
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 01A0C444808041F987C9782884F5A7C32408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 169B
Signing time: Mon 21 Sep 2026 14:00:18 +0000
Manifest this update: Mon 21 Sep 2026 14:00:18 +0000
Manifest next update: Tue 22 Sep 2026 14:00:18 +0000
Files and hashes: 1: 0Pztl2uTXxD16fJwYOZmUomSR-I.roa (hash: qxpOdzA38as8ew7phtI3wkwt8cWmyBdRvvdNKvSSdvU=)
2: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: IomMWVX0YmBEgTGrE/o03wcConqewC4EP4t2+8mTmDo=)
3: zNQ3P3IMHTJolqRce_or6IY_YBw.roa (hash: IouHvQG0QV0oy1fKKHRyhRE9NfsCBgE0xFqm0b1F5QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:80:80:41:f9:87:c9:78:28:84:f5:a7:c3:24:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Sep 21 14:00:18 2026 GMT
Not After : Sep 22 14:00:18 2026 GMT
Subject: CN=33b4d841534c18e449dd2f48aea9ef4e920a88cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:08:df:d4:e8:cf:41:5e:34:fa:0d:4b:ce:3b:
6d:97:40:65:fe:24:fc:6d:d6:dd:ea:53:5a:f8:8a:
72:1c:f2:80:ed:9c:9e:3a:76:7a:76:79:19:e3:6a:
27:fc:dd:9e:30:39:e7:ee:3d:45:92:09:e9:8b:5b:
12:8c:34:7c:74:5f:c4:f8:8f:14:86:82:0d:a1:09:
c3:b1:ff:67:8e:7f:33:43:80:1a:de:96:ec:b1:e9:
70:de:42:14:3c:bc:2a:68:e0:8d:a3:e3:3f:f3:1e:
3c:8d:db:32:dd:00:c4:7c:94:fb:60:a1:2c:98:9e:
20:4c:76:8f:09:64:ab:ae:e4:25:15:b9:c9:b8:c1:
42:4b:f4:d0:d5:9b:56:f8:eb:fa:2a:d8:e3:1b:8b:
55:0f:9e:d5:d0:2c:2d:0b:76:05:79:a3:58:86:f8:
c7:b4:9d:13:c2:8c:7a:fc:85:84:c3:c9:9e:e0:8d:
e3:4b:c6:ae:7d:26:78:7d:0a:65:5e:17:68:f1:3c:
a8:d5:96:ad:20:6d:8d:42:96:ef:44:44:c8:36:ce:
03:66:4b:3a:d9:41:6d:ba:8a:59:f0:69:c1:17:1b:
93:b6:2f:e1:34:5b:a4:76:76:71:04:6b:ed:46:eb:
2a:88:22:6c:d5:27:3e:0c:ef:df:82:78:3b:60:3d:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B4:D8:41:53:4C:18:E4:49:DD:2F:48:AE:A9:EF:4E:92:0A:88:CC
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:77:70:49:36:ec:00:92:fc:c2:5f:97:fe:2b:72:e5:19:fd:
2b:1a:b8:e7:d9:bd:77:25:cb:94:d7:58:4a:8a:6c:ce:fe:67:
93:60:e3:1c:02:d2:59:a0:0f:11:f3:9a:85:c9:e5:dd:bb:7c:
00:09:3e:24:4d:8e:d9:7f:46:9c:41:59:06:6c:8b:c0:95:4f:
f5:11:5f:18:42:3f:ae:1f:39:c9:98:ac:dc:ec:ed:6c:eb:93:
10:64:37:7a:60:4b:50:ed:f1:f0:36:80:20:d2:77:c1:86:27:
e8:0c:43:b8:38:c5:c7:48:8d:94:31:21:d3:dd:2e:a9:e5:a8:
03:67:d4:d0:3e:cd:27:59:da:65:f4:03:36:cd:1f:1a:77:fe:
1f:28:42:a1:57:74:ee:3a:bb:dc:76:72:fc:2a:90:d8:e6:6e:
19:71:44:2e:aa:fd:72:9b:0a:9f:96:1c:da:5a:84:6f:7b:9b:
4b:c0:17:4f:15:be:93:6b:be:81:fd:70:ed:4c:b7:0c:22:53:
ce:02:68:d0:5a:4b:a0:3d:45:4c:05:10:55:0a:49:5d:11:45:
af:27:b3:dd:9f:7a:b8:a0:e0:01:ef:e0:59:3b:6c:69:a0:eb:
a4:00:cc:f1:60:1a:61:a8:0a:f0:0a:2f:09:2e:19:98:91:53:
e5:67:86:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDERICAQfmHyXgohPWnwyQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNzQ5YmM5Y2QyY2Y4ZGZmY2YyZmZlZDc4ODRmYmMxM2Ni
M2U0NWQwHhcNMjYwOTIxMTQwMDE4WhcNMjYwOTIyMTQwMDE4WjAzMTEwLwYDVQQD
EygzM2I0ZDg0MTUzNGMxOGU0NDlkZDJmNDhhZWE5ZWY0ZTkyMGE4OGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQjf1OjPQV40+g1Lzjttl0Bl/iT8
bdbd6lNa+IpyHPKA7ZyeOnZ6dnkZ42on/N2eMDnn7j1Fkgnpi1sSjDR8dF/E+I8U
hoINoQnDsf9njn8zQ4Aa3pbsselw3kIUPLwqaOCNo+M/8x48jdsy3QDEfJT7YKEs
mJ4gTHaPCWSrruQlFbnJuMFCS/TQ1ZtW+Ov6KtjjG4tVD57V0CwtC3YFeaNYhvjH
tJ0Twox6/IWEw8me4I3jS8aufSZ4fQplXhdo8Tyo1ZatIG2NQpbvRETINs4DZks6
2UFtuopZ8GnBFxuTti/hNFukdnZxBGvtRusqiCJs1Sc+DO/fgng7YD3tbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDO02EFTTBjkSd0vSK6p706SCojMMB8GA1UdIwQY
MBaAFLJ0m8nNLPjf/PL/7XiE+8E8s+RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYzhmZGMtOWQ1NS00NWRiLWEyNDMt
ZjE2Njk3ZDcyYTcxLzEvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hYzhmZGMtOWQ1NS00NWRiLWEyNDMtZjE2Njk3ZDcyYTcx
LzEvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnndwSTbs
AJL8wl+X/ity5Rn9Kxq459m9dyXLlNdYSopszv5nk2DjHALSWaAPEfOahcnl3bt8
AAk+JE2O2X9GnEFZBmyLwJVP9RFfGEI/rh85yZis3OztbOuTEGQ3emBLUO3x8DaA
INJ3wYYn6AxDuDjFx0iNlDEh090uqeWoA2fU0D7NJ1naZfQDNs0fGnf+HyhCoVd0
7jq73HZy/CqQ2OZuGXFELqr9cpsKn5Yc2lqEb3ubS8AXTxW+k2u+gf1w7Uy3DCJT
zgJo0FpLoD1FTAUQVQpJXRFFryez3Z96uKDgAe/gWTtsaaDrpADM8WAaYagK8Aov
CS4ZmJFT5WeGmA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 00:45:16 2026 by rpki-client