Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json)
Hash identifier: WdS/BCFzBSyQQyFrb7/5+tXMfSUf68Bq44eGq2asTfs=
Subject key identifier: 5C:9A:C0:13:B4:5E:33:36:B3:13:8B:E6:FB:FA:63:E6:A0:92:8F:B3
Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611
Certificate serial: 019D26CD16E7AE5404C35C1A666821BDE23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
Manifest number: 1349
Signing time: Wed 25 Mar 2026 21:01:08 +0000
Manifest this update: Wed 25 Mar 2026 21:01:08 +0000
Manifest next update: Thu 26 Mar 2026 21:01:08 +0000
Files and hashes: 1: 2bTNijwXkgb4PFZZ_2P1y6mstrY.roa (hash: +XqMQ+S0hrSciI31XIUvSsunVxR9hbZap0IM1/ayVkY=)
2: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: azcrMudBmnEPVMju1kwhlwa3ITBihH3H6Wckxqu7ONY=)
3: hkaIiHaQkqbYDa21LNbiz8L8Wj8.roa (hash: hvagbX+/JYayU8QWSSXAcm9Rh91pEayJavqp+lJfgQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:16:e7:ae:54:04:c3:5c:1a:66:68:21:bd:e2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611
Validity
Not Before: Mar 25 21:01:08 2026 GMT
Not After : Mar 26 21:01:08 2026 GMT
Subject: CN=5c9ac013b45e3336b3138be6fbfa63e6a0928fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:c4:98:ad:f7:b2:f2:15:a8:a9:5c:13:58:
5a:bb:e7:f2:2f:e2:50:10:49:29:6e:54:f1:78:16:
8c:39:f8:e7:03:3c:3e:8c:36:2f:a7:69:25:a0:be:
e2:0b:8d:d1:87:bf:bf:19:f1:5a:87:bb:cb:a9:44:
48:ed:fd:a5:1e:35:29:5d:a5:d6:18:71:46:94:7a:
0b:7b:2f:2e:a1:3a:e6:8c:65:26:a8:4f:9a:5e:e3:
12:fc:fe:a1:86:07:7b:92:88:25:83:fb:b5:28:36:
f0:92:ed:74:d9:6d:f5:e3:00:4a:d5:79:e4:f7:4c:
ae:67:e4:37:ee:bf:20:d3:ea:f8:48:18:80:9c:57:
46:9c:7a:c5:55:5f:88:d0:e7:f6:92:55:b1:d0:98:
4d:7d:c5:3b:53:82:90:21:c8:bb:c7:ae:88:5a:fa:
20:8f:ce:23:e4:17:03:08:9c:ce:e0:19:92:82:6c:
0e:90:f1:27:22:9a:90:16:f1:eb:64:88:44:25:90:
b7:c4:7c:b4:14:37:e4:f1:69:53:63:35:51:24:5d:
d3:b1:c1:0f:2e:9d:3e:d5:44:e5:59:6c:13:8e:1b:
d3:c0:e5:82:b3:6b:92:07:e7:6d:99:42:b9:ca:35:
a1:26:8f:59:bd:24:41:68:32:08:27:c4:6a:99:56:
bd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9A:C0:13:B4:5E:33:36:B3:13:8B:E6:FB:FA:63:E6:A0:92:8F:B3
X509v3 Authority Key Identifier:
keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:25:e6:37:78:cb:a7:7b:41:78:1d:ce:ab:da:cd:ac:54:ff:
e6:f2:0c:5e:ed:fa:85:8c:10:c9:e0:58:3c:7d:aa:7b:ff:29:
67:4d:9e:52:4c:79:39:18:6c:89:6d:db:1e:d0:9d:d1:7f:6f:
98:29:dd:46:d5:15:5b:a7:a2:6f:47:ce:23:ad:37:9b:46:be:
47:08:ef:1f:6e:03:c3:4e:93:a8:e2:f8:bb:a1:4c:d8:5d:ab:
38:65:f8:00:a8:66:46:86:ee:b3:43:12:21:f8:c3:39:1e:ee:
7c:ca:60:a6:4e:a4:5b:9c:0f:b7:e2:3a:51:27:1b:81:29:ab:
d4:c9:3b:ec:65:9f:1a:65:03:ae:10:5b:be:4e:82:8a:fb:29:
58:73:b8:fa:09:06:85:a0:f6:f0:68:8f:69:d5:8b:78:94:f5:
12:be:ad:5a:f4:c1:a0:3e:24:f5:53:7b:73:2e:a1:11:74:1c:
fd:59:a2:86:be:e1:8c:7e:5c:e5:77:a9:e5:ab:be:e4:fe:11:
db:3f:6c:3d:f0:90:7a:dc:c5:23:35:1f:20:2a:a9:91:13:87:
c7:88:3f:bb:c0:9c:6a:75:dd:94:ae:bc:f9:9e:ca:6a:0f:73:
d9:9a:48:61:1f:8b:23:a3:8e:f1:fd:34:1d:d4:ef:89:2c:fa:
73:a3:51:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:07 2026 by rpki-client