
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
File: SnDhvI7t2UeGELGv8JMPQDR1JuU.mft (raw, json)
Hash identifier: 1E+1+mC01KERc4J9jPDfJa86MFtbO/fEKHQNg/z1Zxg=
Subject key identifier: 00:72:74:05:EE:A0:C3:B8:DC:13:91:03:15:4B:8C:6D:2E:ED:B7:2E
Authority key identifier: 4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5
Certificate issuer: /CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
Certificate serial: 01A0D200EAEDEEAC300E5D617876C33C1A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
Manifest number: 0235
Signing time: Thu 24 Sep 2026 06:01:10 +0000
Manifest this update: Thu 24 Sep 2026 06:01:10 +0000
Manifest next update: Fri 25 Sep 2026 06:01:10 +0000
Files and hashes: 1: SnDhvI7t2UeGELGv8JMPQDR1JuU.crl (hash: E3r3znBsec9lmK1Z2Jp1dyh3r4ztR3t/PFhk5szQMqM=)
2: mbfy7L8D_2UAGm_dalRDD5X5-5k.roa (hash: QA1iyiTc+hx3IttbGaQYktAkhZefaHnHg6PgY6o1wcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:ea:ed:ee:ac:30:0e:5d:61:78:76:c3:3c:1a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
Validity
Not Before: Sep 24 06:01:10 2026 GMT
Not After : Sep 25 06:01:10 2026 GMT
Subject: CN=00727405eea0c3b8dc139103154b8c6d2eedb72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:8c:10:03:93:17:c1:fc:a8:8e:c5:40:8b:
72:b3:f6:30:fb:b9:40:99:2f:7f:0a:cd:7d:48:2b:
12:31:15:de:67:bf:d5:92:da:ba:ac:30:05:c4:15:
a2:6a:f1:20:fa:12:0b:9b:1d:54:07:a8:c1:65:76:
1b:7c:5b:f4:54:fb:43:a7:46:68:55:d4:11:38:47:
4a:31:04:2e:9c:1c:5f:c3:b6:2b:44:60:0d:85:25:
93:3e:d0:ab:df:4d:e8:7d:94:9a:3d:c0:b2:3e:db:
92:87:c7:c4:fa:9b:db:47:2c:41:a3:47:40:22:96:
36:c9:41:20:aa:f3:21:6c:c8:5c:1c:ad:e5:be:7f:
9b:e9:3b:2b:0a:49:97:fe:a6:42:e9:38:7c:6a:41:
87:dd:0d:0e:e7:90:ea:a5:b6:d4:ba:57:e1:85:60:
fb:6b:9c:ac:2b:00:ee:3a:64:33:ae:60:99:55:10:
28:4d:22:d8:38:bb:2b:78:27:cd:20:24:e8:d3:49:
c2:ea:03:90:12:b5:e1:5c:95:d5:13:66:3e:a7:b6:
bf:80:2b:ba:64:43:33:75:ac:1c:9e:8a:ea:f9:4d:
55:4e:38:f0:d6:07:c0:f8:ff:b0:bf:08:69:25:01:
ff:69:16:89:fc:4c:80:5b:f1:61:f9:fa:d0:26:fe:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:72:74:05:EE:A0:C3:B8:DC:13:91:03:15:4B:8C:6D:2E:ED:B7:2E
X509v3 Authority Key Identifier:
keyid:4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9c:4d:12:1b:6c:d4:74:0d:40:63:67:2c:5f:38:1a:83:1b:
09:e6:cd:fc:50:38:00:62:43:dc:09:5d:21:63:bb:7d:76:9b:
96:2b:31:d1:78:67:58:5d:64:ea:d2:d7:e8:3b:cf:86:98:30:
ea:dc:fe:9f:02:67:e9:89:39:1b:99:18:77:ed:a0:bf:d7:8c:
25:60:b3:32:6c:b5:f6:8e:26:9d:ea:72:b3:7c:2e:2f:9d:3e:
68:86:7c:fa:16:3a:83:6a:e5:fd:42:53:2b:59:8d:11:63:f2:
22:0b:9a:a8:50:78:5d:61:ca:b3:82:0a:88:b0:9f:4e:df:a6:
54:56:6f:ae:ac:2a:01:4d:f4:51:57:01:74:ce:cd:c9:f8:b1:
24:d5:02:1a:83:ec:a1:c4:5c:95:ba:e7:e3:54:84:34:05:65:
3f:d8:89:20:02:79:ac:ba:c5:7f:99:01:13:4e:1c:43:a7:4c:
1f:1f:c7:4a:70:7d:31:01:60:83:11:d3:4b:9f:c9:93:0d:8f:
d2:f6:12:99:54:ce:b3:22:f2:a9:82:96:a4:c5:92:57:91:56:
6c:29:18:e2:85:7d:ba:82:cb:0b:82:6a:2f:f2:9c:14:93:99:
be:9b:3d:6e:1b:06:ca:85:29:da:2d:58:e8:66:8e:64:7b:52:
07:cd:e0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:24:49 2026 by rpki-client