Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier: EKbQmDoiGbVrwCBcK/KqCNM+nIbnz6Zy4BHX4y6u5yQ=
Subject key identifier: 64:73:C5:21:90:9A:C2:EC:B5:BC:97:96:1A:4A:20:6B:9F:03:C9:BE
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 019D2703FD41B174B9DF9A9AFAA6FB75EFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number: 0BC5
Signing time: Wed 25 Mar 2026 22:01:06 +0000
Manifest this update: Wed 25 Mar 2026 22:01:06 +0000
Manifest next update: Thu 26 Mar 2026 22:01:06 +0000
Files and hashes: 1: Q3blDI4wrXCjaTFpenyLf0DAMPA.roa (hash: F0bx6XJTy3iA6AQ6s8pJaOAUtTyA4K1EgB6ztrarkJU=)
2: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: Y6fLgj5I37iKG8odqOeuC1gOShUKi9J7N7WRgPCOxgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:fd:41:b1:74:b9:df:9a:9a:fa:a6:fb:75:ef:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: Mar 25 22:01:06 2026 GMT
Not After : Mar 26 22:01:06 2026 GMT
Subject: CN=6473c521909ac2ecb5bc97961a4a206b9f03c9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:83:d5:40:d2:e0:e2:a9:84:30:8f:1f:38:
d2:57:1b:dc:09:4f:f3:b3:88:86:39:5a:87:4b:3f:
74:d2:4a:5c:8a:4a:8d:72:38:c8:aa:8c:7a:96:d5:
3e:5b:cf:59:99:74:74:72:e3:4b:bc:15:90:64:fe:
9c:b9:49:73:3b:b9:d9:36:76:7b:f9:0f:66:68:29:
2c:72:75:a8:d7:5d:61:2a:02:20:0a:e8:10:3d:b0:
d2:0a:06:06:e4:a3:4e:ec:51:2f:54:57:02:c8:e2:
ac:8c:9d:68:97:4e:17:22:c6:18:cb:89:3a:0f:70:
65:3a:55:a3:2f:89:1f:b3:54:22:0d:24:ff:44:3c:
37:bc:e2:3c:47:b7:7a:8e:09:2e:f1:bf:df:b8:71:
0e:54:81:b6:48:c7:62:9d:0e:91:e4:fe:28:b8:a2:
ba:f3:66:66:c4:12:4e:49:d1:61:49:55:77:f4:87:
3d:a5:75:e8:e9:5f:92:a3:12:24:c3:b4:41:5f:76:
36:a6:be:1a:57:ee:84:5f:0c:27:38:b7:67:ef:71:
4a:9f:b7:90:2f:38:77:1f:31:0e:a8:d6:00:f6:52:
be:3e:90:e3:82:b2:f5:d1:19:a8:30:16:ae:1e:92:
c9:87:e5:30:b7:89:d6:31:16:70:23:bd:53:92:de:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:73:C5:21:90:9A:C2:EC:B5:BC:97:96:1A:4A:20:6B:9F:03:C9:BE
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ba:44:45:6a:30:e0:6c:6e:d7:9b:7d:bf:95:e6:e7:e9:de:
ef:d3:d1:f2:8e:2f:8d:ac:26:f5:30:63:74:83:29:e6:b4:67:
53:51:89:0e:0a:03:06:a2:75:d0:ad:ae:bd:aa:af:63:fe:03:
95:85:0c:fe:41:c5:82:85:15:fe:3a:59:12:ca:87:cc:f8:a0:
2f:54:01:d5:1f:fb:66:d2:22:89:7a:3c:af:05:91:32:f5:a7:
7e:20:c2:70:99:11:71:51:e5:fc:ee:bd:55:b2:28:e3:c3:78:
e5:f1:fb:80:f8:1b:a0:25:b9:25:04:97:57:48:64:dd:b3:cc:
82:db:1d:bb:7f:6d:43:a7:fb:23:51:eb:da:20:75:56:5d:b8:
08:ce:bd:57:33:79:76:ff:80:7f:fa:23:cd:42:da:f0:ef:ad:
a4:9f:57:59:23:d0:2a:ad:2a:1c:9e:7f:dc:82:c0:50:c6:7b:
4e:73:09:46:53:3f:65:09:3e:2d:80:34:77:59:d5:63:32:e5:
8c:0c:55:55:41:35:fd:ad:a2:2b:2d:60:a4:23:9b:f0:cf:95:
26:86:f2:31:3d:00:ee:49:7c:6d:4b:7d:33:1e:1c:a1:83:9d:
58:6c:aa:9f:2a:8d:4d:e0:81:0a:19:a2:74:f8:71:d2:1d:7a:
9c:e8:c9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:40 2026 by rpki-client