Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
File: snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json)
Hash identifier: zmv0+uyWWpZnZU005PKD16z6Rc+MWvuaS8w0Cel6g7o=
Subject key identifier: 1A:0A:90:35:6A:3B:9F:20:B6:9D:FE:75:F9:16:A4:CD:47:58:16:02
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial: 019D3375D2C598E6A5B6E5B520CFDD8AD202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
Manifest number: 10C0
Signing time: Sat 28 Mar 2026 08:00:52 +0000
Manifest this update: Sat 28 Mar 2026 08:00:52 +0000
Manifest next update: Sun 29 Mar 2026 08:00:52 +0000
Files and hashes: 1: HyYIQlysdxbEjMCMjTsZDnQh6eA.roa (hash: g3hpyf9/HAqIKib0Sw0ECcCcqaYC2Rz7TpU4xEiIjbs=)
2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: OGr9FHtRg6hKvkcZF2+BIaGDhPw2ICo4opB0DSirTVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:d2:c5:98:e6:a5:b6:e5:b5:20:cf:dd:8a:d2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
Validity
Not Before: Mar 28 08:00:52 2026 GMT
Not After : Mar 29 08:00:52 2026 GMT
Subject: CN=1a0a90356a3b9f20b69dfe75f916a4cd47581602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:f9:db:60:2d:1a:7f:f1:cf:f6:95:df:24:
87:7c:59:0d:f3:d6:cc:09:2d:0f:01:14:7d:26:a9:
7f:d9:44:70:21:a1:5a:0f:55:90:b0:96:db:26:a5:
85:25:7d:95:01:ad:36:eb:ec:55:9b:31:2a:62:2b:
5d:98:ad:38:7d:ef:64:9c:c2:9b:b6:46:fc:02:eb:
f6:84:8a:48:bd:bb:d0:a9:c3:32:01:74:a2:f9:ec:
cf:0e:13:85:95:ee:0c:98:da:b5:cc:55:8c:a8:d1:
89:40:6a:8a:77:c8:82:13:60:e2:e4:5c:a1:8b:2b:
b1:d6:36:9d:3e:26:3a:54:86:4c:3e:87:22:23:fc:
98:63:4d:68:28:d2:1d:23:12:c3:fd:97:dc:f6:7b:
22:d5:6a:c5:d9:4b:e0:be:35:e2:ab:f9:18:49:70:
58:ac:76:5a:a7:a5:49:ff:42:6c:a3:75:3f:36:15:
ee:aa:e4:33:82:3b:b7:65:03:7e:21:35:b4:6e:cd:
b8:e7:46:50:d5:97:fe:8a:a9:aa:79:eb:de:89:ab:
6f:2e:5f:20:ef:5b:77:7f:7a:39:0b:ac:c0:3d:35:
0b:52:6e:c7:43:b9:80:ed:4a:8c:47:c5:07:5f:fc:
04:ca:39:66:79:11:45:40:5f:fe:8d:41:2c:49:01:
8d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0A:90:35:6A:3B:9F:20:B6:9D:FE:75:F9:16:A4:CD:47:58:16:02
X509v3 Authority Key Identifier:
keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:da:9f:fe:69:32:05:80:88:29:0f:89:30:0e:2c:61:dc:ff:
6e:b1:87:21:c9:31:89:42:34:05:f3:5f:4a:5f:b5:80:d5:2d:
04:65:b6:6f:b0:65:70:9e:0b:e6:2f:12:a6:4a:8f:3c:ed:f6:
fa:75:8e:99:d6:ec:6a:bc:1d:c9:83:bf:6b:fb:41:8e:82:95:
47:6e:c7:6f:cc:c9:2c:22:4d:4a:b6:c8:25:55:9f:77:9e:49:
ef:0c:81:b7:e9:cb:a8:c0:ab:a4:b6:d7:b7:3c:9f:86:ed:73:
90:77:fe:38:f7:84:77:95:b5:70:e6:3b:51:94:31:5f:21:77:
58:f7:42:23:49:ca:ab:74:16:5b:98:a2:77:da:b6:48:b9:9e:
83:07:02:58:ba:5d:bf:8d:60:20:1e:78:43:20:74:08:88:3c:
95:75:e0:c0:c6:9e:80:11:f8:c7:73:c8:e9:73:a3:70:08:c9:
a5:6d:ac:6e:0e:e5:99:4b:02:06:81:5e:8b:75:dd:24:9c:2d:
92:a7:3d:fd:0e:b8:58:4c:2c:cf:4f:55:1f:42:d9:35:f1:07:
9b:a3:58:a1:5b:ac:1e:5d:83:1b:6f:74:c8:3b:28:f0:34:9c:
54:4c:5d:1a:8a:22:5d:d5:89:1e:58:58:cc:50:4b:c7:01:bf:
b5:f0:3f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:49 2026 by rpki-client