Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: ODnUIvl3wMda+ba56or3Mse+5Ts2leNi7ZK80tTwIdU=
Subject key identifier: 64:16:00:96:73:7B:B4:DA:67:15:40:AA:ED:1C:B6:D1:43:44:2F:95
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 019D27A89710046F70F98D0E954ECED6EEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 0B76
Signing time: Thu 26 Mar 2026 01:00:53 +0000
Manifest this update: Thu 26 Mar 2026 01:00:53 +0000
Manifest next update: Fri 27 Mar 2026 01:00:53 +0000
Files and hashes: 1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: fMhux8TqU+guMVaii+ewkPwoL/R7vlVr3iJPR6ue0lg=)
2: kpvqRPUEAmQO0O4WaugdHW1aYng.asa (hash: OUyLx1kMPpxYu9iTqQs+D/qkf4nArIUYr0ik+YK47VA=)
3: txrJT2KB55PdfZarCNv00SvLHy4.roa (hash: 7NFHpaOx0mq8qBDCYGpG0MZudMnkTx/c60OsSdUt274=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:97:10:04:6f:70:f9:8d:0e:95:4e:ce:d6:ee:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: Mar 26 01:00:53 2026 GMT
Not After : Mar 27 01:00:53 2026 GMT
Subject: CN=64160096737bb4da671540aaed1cb6d143442f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:8a:2a:01:7f:69:2b:9d:4a:38:ca:db:8a:
ec:7e:2e:59:d1:ab:47:ec:93:25:8f:ec:31:90:e0:
6e:c6:3b:ac:b8:9b:09:d8:67:f7:f0:d2:6d:e6:27:
c4:a9:10:6c:be:7d:06:f8:1d:53:5f:24:14:ba:5e:
cf:8b:6f:fe:82:65:ca:11:d3:49:5b:35:47:df:b9:
4c:88:51:18:0c:bd:0b:78:33:2d:6f:7d:66:2a:6c:
91:09:a8:6a:25:e5:c1:1f:54:b6:21:04:69:8d:18:
bc:c2:ae:64:83:26:37:61:7b:35:d4:4b:9e:18:3f:
44:ff:3d:62:f7:a9:29:7a:e6:e1:cf:40:61:d3:66:
14:c5:27:1e:5b:47:89:4e:36:45:40:5c:15:cf:61:
8e:20:68:9f:b0:9b:b6:12:c3:62:6a:ec:cc:37:92:
25:b6:92:ee:ee:3b:57:2a:5d:80:40:40:0d:e2:b5:
c3:bc:0b:e0:6e:ff:13:ba:67:7b:21:d2:4e:ac:9e:
13:d8:8c:27:8c:f2:aa:f1:8e:12:1e:49:49:12:91:
f0:6a:cf:c3:fd:17:ff:10:d1:3f:71:0e:c3:30:ff:
27:6c:54:5c:e4:18:0f:33:46:ba:e5:3b:ef:9f:9d:
56:73:d0:cb:e4:da:f6:e2:23:40:f0:d2:81:2d:d8:
89:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:16:00:96:73:7B:B4:DA:67:15:40:AA:ED:1C:B6:D1:43:44:2F:95
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f6:56:03:bd:ae:80:b7:69:2b:0c:87:4a:33:bd:d3:5f:fc:
a6:02:f6:6a:5e:6c:5c:a9:8e:43:43:12:8c:d1:c7:12:c7:15:
33:87:6e:1a:a5:65:9b:12:5a:1a:d8:85:40:c3:37:1b:ec:c7:
f8:49:c7:69:47:d1:5c:eb:c4:ef:11:7a:f3:c2:e8:85:1d:70:
f6:be:2f:fa:c5:f3:bb:41:c3:ce:4b:02:f5:b3:f1:f9:f6:ec:
3e:d2:fe:0c:1b:c3:38:99:2f:93:76:d3:97:82:11:63:17:5d:
2b:78:4d:6d:48:84:8e:c9:8e:8b:6c:00:3f:e5:b6:36:e8:9e:
6c:bb:a5:79:3f:34:95:0b:b9:73:05:a9:c9:05:c9:04:ee:93:
0d:56:bb:90:99:de:ef:cf:65:28:67:e9:e9:65:d3:e2:53:1c:
de:f9:ff:e7:fc:7d:ca:6e:36:ab:5e:56:53:c2:57:71:97:a9:
99:ba:a6:e2:33:ba:f8:e0:b6:bf:00:f8:34:40:a3:4c:37:9b:
df:f1:84:c9:e9:1e:16:47:47:e5:fd:23:13:3e:76:70:27:47:
b9:df:02:66:d3:2b:6e:13:84:3a:7e:30:2f:33:02:56:90:94:
79:e7:58:35:ea:38:8f:4f:93:eb:96:05:37:ac:17:34:48:5d:
5c:d7:b0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:58 2026 by rpki-client