Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier: JzV7g6073OVqzauxJkcp4WHkKHj8iU7e7XgOHDkrIlM=
Subject key identifier: 85:4F:BC:F6:39:7C:5A:46:DD:78:DE:2E:28:28:B5:8C:92:B2:66:E5
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 019DCF07CFD1B88786C3E41DDE5014091405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number: 0C1C
Signing time: Mon 27 Apr 2026 13:01:28 +0000
Manifest this update: Mon 27 Apr 2026 13:01:28 +0000
Manifest next update: Tue 28 Apr 2026 13:01:28 +0000
Files and hashes: 1: Q3blDI4wrXCjaTFpenyLf0DAMPA.roa (hash: F0bx6XJTy3iA6AQ6s8pJaOAUtTyA4K1EgB6ztrarkJU=)
2: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: zDHaByWsznDkSgwjHguP1onsKKhem7ZGFjYSEudqSQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:cf:d1:b8:87:86:c3:e4:1d:de:50:14:09:14:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: Apr 27 13:01:28 2026 GMT
Not After : Apr 28 13:01:28 2026 GMT
Subject: CN=854fbcf6397c5a46dd78de2e2828b58c92b266e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:43:bd:bd:b0:0f:8e:51:ec:bc:10:99:a0:
88:34:5e:79:13:f7:92:af:cb:3b:19:34:ea:2c:17:
4b:2a:8e:1f:40:d1:26:14:70:53:5b:b7:c9:b1:73:
7b:2f:70:fb:7a:72:9b:27:80:67:62:ea:3a:24:f5:
68:50:48:3e:16:4d:b8:7c:b2:ca:01:d5:9b:63:23:
97:50:95:3a:a7:97:a5:c7:f1:f3:f6:ad:ce:b1:7b:
bf:f8:7d:e4:4a:e7:71:c5:c5:32:f8:03:af:27:9b:
58:e7:e8:bf:00:db:8f:61:05:94:36:67:b7:17:5d:
15:88:78:8e:14:e5:8d:53:b3:8e:1a:c5:0a:0e:30:
34:fa:1f:fc:86:bd:c4:ba:18:da:b1:39:bd:ac:c6:
b3:6f:bb:09:88:55:5b:4a:52:2a:d0:99:ed:c1:49:
07:0b:4f:e2:30:9f:59:1c:3b:ee:5e:72:b2:2f:4b:
d9:15:fe:ff:f8:39:45:04:f4:ce:e1:a7:e0:56:c1:
bf:56:5a:a0:b1:5f:48:61:7e:f7:d9:8c:71:55:4d:
37:4e:3f:18:f6:6d:85:71:a7:3f:3d:f9:a1:48:a8:
3d:b8:aa:9f:61:4c:47:a1:50:41:a0:54:00:e7:a8:
8c:a9:10:94:29:54:ae:27:7b:6b:a0:97:c4:7f:ca:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4F:BC:F6:39:7C:5A:46:DD:78:DE:2E:28:28:B5:8C:92:B2:66:E5
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5f:91:4d:27:a4:2f:c0:1a:aa:26:80:d9:87:88:b7:7b:8d:
67:86:89:1e:b1:45:86:24:fe:d0:6c:96:b1:49:ea:ea:0e:94:
74:5f:35:92:d8:34:ba:bf:10:53:f3:b9:80:ce:59:0f:87:66:
34:8f:92:d8:58:39:0f:39:68:61:9d:56:c9:77:f4:36:a1:e6:
5a:ff:5a:4c:e9:71:00:48:81:f5:cb:de:e6:62:fb:69:ca:ca:
92:f5:de:a3:94:4c:45:e8:47:bf:6b:13:44:1b:bd:73:72:0b:
c7:5f:14:5f:ed:cc:77:a0:ee:62:7c:e1:83:9f:52:e3:f5:11:
2e:2a:64:f6:f3:80:aa:64:73:c7:c2:15:ed:d1:6d:27:9c:b0:
fe:4a:99:cf:3c:64:29:4f:d0:9b:07:cb:74:3c:37:a9:04:5a:
8b:85:bc:07:1a:88:15:cc:4d:fd:f4:e9:fa:19:8c:0e:60:e2:
65:78:b2:d0:5d:92:26:a4:9f:12:02:42:8a:11:41:15:44:ad:
e9:ae:64:7d:b2:36:31:20:1d:e1:05:ea:bc:26:55:a6:bc:48:
91:5f:8c:00:34:95:bf:0a:60:c1:dd:a5:ef:f8:1b:d5:4e:bf:
18:9b:31:25:24:b8:79:c3:46:a1:b7:59:8d:48:08:28:64:46:
45:ba:e3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:03:03 2026 by rpki-client