Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.mft
File: sNnizl5psqH543QB08UFXF09584.mft (raw, json)
Hash identifier: 1SWTFy4P37jttzkQxNALlkM35h2sb2JQ1OtMp+QAnho=
Subject key identifier: 63:1D:5A:C9:68:77:B6:9E:E1:48:34:CF:29:62:C4:5F:AA:35:62:14
Authority key identifier: B0:D9:E2:CE:5E:69:B2:A1:F9:E3:74:01:D3:C5:05:5C:5D:3D:E7:CE
Certificate issuer: /CN=b0d9e2ce5e69b2a1f9e37401d3c5055c5d3de7ce
Certificate serial: 019D326311406C01CD9B27F84C4637AFC76B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNnizl5psqH543QB08UFXF09584.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.mft
Manifest number: 88
Signing time: Sat 28 Mar 2026 03:00:46 +0000
Manifest this update: Sat 28 Mar 2026 03:00:46 +0000
Manifest next update: Sun 29 Mar 2026 03:00:46 +0000
Files and hashes: 1: lU5CFSCqh5EhHLA6o7I-2LSPKPg.roa (hash: 8NkRUHu69JiUheqFS7oS32VLyi1jncdM+1WEdpyOzwU=)
2: sNnizl5psqH543QB08UFXF09584.crl (hash: ng7V8cJBq4rqhaaKRfowVZLf6Nqx4s0O8wNhzPVhe3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNnizl5psqH543QB08UFXF09584.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:11:40:6c:01:cd:9b:27:f8:4c:46:37:af:c7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d9e2ce5e69b2a1f9e37401d3c5055c5d3de7ce
Validity
Not Before: Mar 28 03:00:46 2026 GMT
Not After : Mar 29 03:00:46 2026 GMT
Subject: CN=631d5ac96877b69ee14834cf2962c45faa356214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:17:17:a0:69:72:43:e0:f5:13:95:b7:11:99:
bd:45:dd:b1:8f:65:3d:45:2f:1c:b7:76:b6:f8:7f:
77:ee:c6:24:98:bc:80:c4:db:e7:4e:f5:c1:b8:2a:
8a:12:d4:10:b6:a3:c6:b5:7d:51:da:5f:8f:fe:b4:
e5:d9:ec:8e:43:25:46:54:00:56:44:5f:92:aa:8c:
10:d1:9e:6d:5d:2a:47:ea:52:83:73:50:4c:26:d7:
fa:79:8c:c5:05:45:d3:c6:80:e4:45:f8:a2:e7:14:
c8:c0:0c:f0:4f:b8:b7:fe:16:ae:52:42:c9:2d:95:
aa:dc:50:68:02:e6:06:c2:2f:55:06:14:07:f3:c2:
28:80:e6:79:81:dd:57:45:82:f1:e6:48:8e:f3:72:
ca:d0:a6:7d:9c:1f:1e:1d:ad:20:7d:c7:f5:53:e3:
bb:51:ac:ed:a0:50:eb:d1:37:ff:74:10:87:75:8c:
21:ce:47:09:85:c0:f5:be:ce:4d:c4:1f:0d:24:12:
7c:c7:34:9b:b3:47:5f:dc:22:b5:4d:f9:38:06:f7:
b2:32:56:67:1e:5e:ca:f6:db:ee:4e:22:29:b6:f5:
bd:2f:59:a4:00:6b:58:54:2f:a2:12:72:c8:12:6f:
87:cc:10:8e:65:75:f9:34:5f:ad:28:ec:7c:76:e3:
de:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1D:5A:C9:68:77:B6:9E:E1:48:34:CF:29:62:C4:5F:AA:35:62:14
X509v3 Authority Key Identifier:
keyid:B0:D9:E2:CE:5E:69:B2:A1:F9:E3:74:01:D3:C5:05:5C:5D:3D:E7:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNnizl5psqH543QB08UFXF09584.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0f5d46-2950-4135-84f3-2e964e97ff88/1/sNnizl5psqH543QB08UFXF09584.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:51:57:7a:ed:86:ba:fa:2b:e9:4e:6d:95:db:75:18:46:be:
4d:4f:b4:c7:5b:1e:dd:e0:dc:ee:6e:3f:c7:b5:69:ba:87:28:
96:0c:4d:d1:a4:28:73:49:23:cd:e7:74:c9:10:9e:02:9a:4f:
d4:f3:c3:6f:88:89:95:24:3e:eb:e7:5c:4c:a8:b7:ec:d6:06:
3f:3b:7c:5a:8d:5c:54:2b:e7:6e:42:2e:4b:99:14:03:22:4e:
35:83:1d:0a:4a:ed:b2:a8:9c:5f:0b:d9:8c:20:9f:d7:43:7a:
31:f8:9e:cb:73:db:01:17:f6:09:12:6e:37:02:b6:4b:2a:d9:
2c:23:59:56:36:03:db:8f:93:76:af:27:92:f2:ec:39:0b:08:
ac:b1:e3:a5:2b:6c:1c:43:ee:ed:a6:26:ff:fa:43:fc:26:64:
4e:42:9c:b0:9e:90:bf:2d:8c:fd:dd:fa:75:3b:82:f7:b7:fa:
f9:77:32:ec:8d:6c:be:1e:c5:41:a8:b0:cc:f1:86:7e:cd:74:
6c:53:fa:53:a1:8b:45:45:fe:fd:90:ff:ab:ab:39:4f:7b:bd:
19:69:fd:fe:e8:b6:1c:1c:f2:c3:d1:29:8a:56:70:bb:77:66:
9d:08:ee:e6:8c:29:7e:f3:a7:a7:01:50:56:14:ae:1f:98:6a:
f9:fb:6b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:43 2026 by rpki-client