Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: xkiGXhoTGID2B4S6o7cVYnNpq7Ntgri/TNHhf+5tcVs=
Subject key identifier: 0F:C4:F6:A5:D7:54:31:8B:73:01:0D:15:97:C1:C0:F2:69:EA:54:0A
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 019D273A8EF16A5807B6B6C1B6362AB94A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 14BC
Signing time: Wed 25 Mar 2026 23:00:42 +0000
Manifest this update: Wed 25 Mar 2026 23:00:42 +0000
Manifest next update: Thu 26 Mar 2026 23:00:42 +0000
Files and hashes: 1: 0Pztl2uTXxD16fJwYOZmUomSR-I.roa (hash: qxpOdzA38as8ew7phtI3wkwt8cWmyBdRvvdNKvSSdvU=)
2: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: josgiRoX3hQqSUoV351ls5Kd2bPLiV2dLY7ThXy/zlk=)
3: zNQ3P3IMHTJolqRce_or6IY_YBw.roa (hash: IouHvQG0QV0oy1fKKHRyhRE9NfsCBgE0xFqm0b1F5QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:8e:f1:6a:58:07:b6:b6:c1:b6:36:2a:b9:4a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Mar 25 23:00:42 2026 GMT
Not After : Mar 26 23:00:42 2026 GMT
Subject: CN=0fc4f6a5d754318b73010d1597c1c0f269ea540a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:97:7a:23:c2:1f:90:eb:bf:c9:eb:c5:47:
bc:09:19:32:41:28:65:5e:8e:0d:ab:d1:00:2f:0d:
e3:7e:5a:55:cc:cb:8d:64:4b:54:87:6a:eb:83:80:
ca:56:9c:1e:1e:fb:23:03:f3:ab:34:c3:68:ef:2a:
f7:21:63:3f:fb:c3:f2:4d:9d:9d:c1:71:b5:f2:e0:
27:ee:05:e1:e9:e5:c2:2d:07:d1:bb:23:b1:ce:7a:
e2:47:f0:3c:d6:41:9d:8c:9d:e3:dd:4d:33:d6:d8:
60:77:b5:95:c7:41:de:1d:a8:08:6a:8c:c3:0a:20:
6d:04:ac:84:76:2d:0e:d4:a6:45:93:7c:d9:33:42:
09:2f:98:dd:9e:fc:3e:21:c8:62:ff:29:77:7c:4a:
61:0f:6c:e5:17:4f:89:dd:b4:38:0e:96:12:ad:c8:
25:06:01:c6:b2:77:a4:31:50:db:cd:2e:89:05:f7:
b6:d0:22:d2:27:85:5f:ab:5c:1e:a9:a1:03:d2:68:
e0:74:0a:f3:77:77:76:62:3b:c2:12:48:b5:b2:aa:
25:c2:b8:93:a6:95:6d:94:f9:f1:75:10:fc:6b:78:
7e:6d:e7:18:e5:52:db:6e:bf:bf:0f:33:10:cc:16:
7a:8d:c9:b4:0e:a6:ee:7f:15:1c:a4:ff:ba:3b:d4:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C4:F6:A5:D7:54:31:8B:73:01:0D:15:97:C1:C0:F2:69:EA:54:0A
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d9:b1:f7:9e:38:e9:1a:5d:e8:df:af:6e:e6:b1:24:1a:73:
a5:68:79:6f:ab:e5:2f:cd:c8:a8:e7:07:63:6d:a3:03:c2:91:
ba:27:6f:52:9c:9e:93:46:39:9f:be:48:b2:ea:a8:30:46:05:
f1:d5:a1:8e:86:99:91:59:30:0a:b4:4a:44:03:06:52:a2:b4:
db:17:2c:78:25:6d:ab:4d:58:46:94:b8:92:54:eb:cf:13:a4:
db:d7:9f:89:ae:c9:bf:05:07:54:6a:b0:58:a8:c9:5f:e4:33:
2f:87:1f:65:46:3f:79:f1:6a:34:d1:89:5d:ce:72:6d:7e:45:
6a:92:02:7d:dc:73:97:7e:cd:5e:ff:4a:f7:39:e5:c3:ab:e2:
bd:06:c5:0e:98:95:11:ec:5b:e0:6e:58:69:21:d7:b2:20:4f:
e8:1c:3a:3b:52:1a:6c:a4:f1:25:df:de:ff:88:e2:f4:32:69:
d8:ab:94:82:c8:04:9c:ac:82:8e:37:6a:79:4b:04:67:6e:29:
12:7c:20:4c:3e:b8:50:fd:2b:01:cd:60:af:72:40:84:a8:82:
62:f2:ea:34:73:5c:b7:8e:e0:c7:48:43:b0:69:bc:f8:d8:14:
fc:c7:e4:3a:4b:ec:0d:7b:b4:cf:d4:fb:67:42:6c:7c:e0:33:
8b:79:96:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOo7xalgHtrbBtjYquUobMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNzQ5YmM5Y2QyY2Y4ZGZmY2YyZmZlZDc4ODRmYmMxM2Ni
M2U0NWQwHhcNMjYwMzI1MjMwMDQyWhcNMjYwMzI2MjMwMDQyWjAzMTEwLwYDVQQD
EygwZmM0ZjZhNWQ3NTQzMThiNzMwMTBkMTU5N2MxYzBmMjY5ZWE1NDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXSXeiPCH5Drv8nrxUe8CRkyQShl
Xo4Nq9EALw3jflpVzMuNZEtUh2rrg4DKVpweHvsjA/OrNMNo7yr3IWM/+8PyTZ2d
wXG18uAn7gXh6eXCLQfRuyOxznriR/A81kGdjJ3j3U0z1thgd7WVx0HeHagIaozD
CiBtBKyEdi0O1KZFk3zZM0IJL5jdnvw+Ichi/yl3fEphD2zlF0+J3bQ4DpYSrcgl
BgHGsnekMVDbzS6JBfe20CLSJ4Vfq1weqaED0mjgdArzd3d2YjvCEki1sqolwriT
ppVtlPnxdRD8a3h+becY5VLbbr+/DzMQzBZ6jcm0DqbufxUcpP+6O9T0fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/E9qXXVDGLcwENFZfBwPJp6lQKMB8GA1UdIwQY
MBaAFLJ0m8nNLPjf/PL/7XiE+8E8s+RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYzhmZGMtOWQ1NS00NWRiLWEyNDMt
ZjE2Njk3ZDcyYTcxLzEvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hYzhmZGMtOWQ1NS00NWRiLWEyNDMtZjE2Njk3ZDcyYTcx
LzEvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdmx9544
6Rpd6N+vbuaxJBpzpWh5b6vlL83IqOcHY22jA8KRuidvUpyek0Y5n75IsuqoMEYF
8dWhjoaZkVkwCrRKRAMGUqK02xcseCVtq01YRpS4klTrzxOk29efia7JvwUHVGqw
WKjJX+QzL4cfZUY/efFqNNGJXc5ybX5FapICfdxzl37NXv9K9znlw6vivQbFDpiV
Eexb4G5YaSHXsiBP6Bw6O1IabKTxJd/e/4ji9DJp2KuUgsgEnKyCjjdqeUsEZ24p
EnwgTD64UP0rAc1gr3JAhKiCYvLqNHNct47gx0hDsGm8+NgU/MfkOkvsDXu0z9T7
Z0JsfOAzi3mWnw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:38:52 2026 by rpki-client