Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: br0I5lXfHydUSTbfWEq49l57vf8iXzyhF8scaS5SIz0=
Subject key identifier: 07:EE:E4:B5:58:10:72:75:1D:14:4B:D9:23:49:2B:97:91:E0:EA:90
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 019F909089BBC52B3EAF38B3F5B0B5C768FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 0CB6
Signing time: Thu 23 Jul 2026 20:00:19 +0000
Manifest this update: Thu 23 Jul 2026 20:00:19 +0000
Manifest next update: Fri 24 Jul 2026 20:00:19 +0000
Files and hashes: 1: Cw3evW-6yESknE9BpT1L9kWZjRE.asa (hash: oBahNEzx8P7hP2ItMlP1MDr33FMJPRkds2MOauVpLXw=)
2: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: k9fvn70MRoowPojCsFpho5VpJn9WyJpYzd9PL5TN2kg=)
3: sjVRYtz4jH9eKfw8Efr3wGt_oeI.roa (hash: P8Aovfss+2O/AKMSRS+SqD+lQMU75jfoO2E2lQksJcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:89:bb:c5:2b:3e:af:38:b3:f5:b0:b5:c7:68:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: Jul 23 20:00:19 2026 GMT
Not After : Jul 24 20:00:19 2026 GMT
Subject: CN=07eee4b5581072751d144bd923492b9791e0ea90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:3f:06:2a:04:9f:52:07:d1:bd:98:89:9e:
36:cd:9e:f3:d5:1d:f1:89:ec:be:48:c8:22:4e:d8:
be:9e:43:c0:b5:a9:09:83:ca:8d:ab:b1:1a:54:ee:
5e:b2:fa:ce:19:86:3c:7b:19:dc:b7:9d:43:53:c0:
0b:3e:86:a9:80:c2:31:d4:24:1b:c0:0c:a6:ab:8b:
94:87:b1:a2:56:09:db:91:ae:1c:b7:52:a9:0c:c8:
2d:df:0a:7d:42:23:7c:fc:96:8a:25:9b:d2:46:98:
56:c9:8a:12:0d:02:49:a6:94:23:88:0e:2e:a3:08:
0c:6d:5a:e2:b3:e6:fa:68:9f:6f:82:17:87:4a:be:
1c:c3:cd:4e:1d:87:e2:05:55:b8:75:35:5c:c9:7d:
e8:f4:dd:18:aa:2a:c4:f5:6e:7b:9b:41:bf:2c:f8:
50:ac:0d:04:21:d6:50:a1:f9:7a:bf:3f:7d:1e:96:
c4:ee:03:3c:7a:5b:cf:16:b2:b7:1d:c4:f8:ce:34:
8f:21:4e:68:f4:59:62:11:5a:6e:ee:49:e2:ff:ff:
a9:70:97:53:61:5e:9f:f7:07:3d:a5:bf:02:a3:bd:
20:92:a6:57:34:b3:ea:0f:13:0b:90:63:5d:3c:e0:
48:86:73:a8:9c:0d:79:bf:07:a4:10:1e:3d:71:a9:
42:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EE:E4:B5:58:10:72:75:1D:14:4B:D9:23:49:2B:97:91:E0:EA:90
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6d:f4:2c:1e:97:7c:d5:ad:a4:4c:26:47:48:6b:7e:ee:85:
56:1b:80:eb:29:87:4f:1f:39:25:67:64:88:85:87:b0:a9:dc:
c3:ed:86:42:70:4c:f4:80:34:05:67:83:8d:61:e7:39:63:97:
59:4f:9b:a1:fb:82:08:42:fd:78:11:94:8b:68:93:b7:6a:bd:
44:4c:e8:c8:38:fd:49:16:61:ae:4c:9f:ec:7a:26:21:86:38:
2a:fb:6e:0f:d4:8b:b8:de:2c:89:fb:8a:c1:d1:0c:ab:ca:8c:
56:39:87:b5:bb:e5:3d:f8:05:ec:a2:bf:35:c1:67:d6:88:92:
0c:64:de:9a:ae:b5:de:79:27:eb:47:3e:98:7b:40:82:9f:33:
db:eb:f7:87:a8:f2:fd:d1:1d:a6:c2:04:f2:fd:23:d2:df:07:
e3:d8:ab:2c:59:19:a7:40:6c:df:8d:12:8f:16:05:6b:ec:58:
c4:ff:e0:1e:6f:51:bd:ac:69:a4:c9:e0:92:4f:09:96:d9:8c:
7a:9d:45:80:a0:c7:d1:27:9d:fd:96:a0:87:00:0d:f6:d6:29:
c2:6f:ca:f2:e7:49:ec:71:17:7f:83:30:bf:5b:49:b6:d4:71:
94:30:86:19:41:4f:de:87:3b:c0:19:18:c4:c4:f5:61:a1:89:
9b:14:24:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:36 2026 by rpki-client