Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier: VoCAhBOBEuYWw4rCC4eZAc3iF44fd0zJ/u4SpVA6puo=
Subject key identifier: FE:DF:F6:37:F9:7F:0D:55:E9:7A:71:63:B1:4F:CB:73:6D:69:E3:40
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 019CE7496FE78F12A447141206ED287B4D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number: 0BA4
Signing time: Fri 13 Mar 2026 13:01:15 +0000
Manifest this update: Fri 13 Mar 2026 13:01:15 +0000
Manifest next update: Sat 14 Mar 2026 13:01:15 +0000
Files and hashes: 1: Q3blDI4wrXCjaTFpenyLf0DAMPA.roa (hash: F0bx6XJTy3iA6AQ6s8pJaOAUtTyA4K1EgB6ztrarkJU=)
2: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: 9TzH17v/ccEYQXPhDPE3gSH+FLQJrRymZ4qj2zre5uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:49:6f:e7:8f:12:a4:47:14:12:06:ed:28:7b:4d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: Mar 13 13:01:15 2026 GMT
Not After : Mar 14 13:01:15 2026 GMT
Subject: CN=fedff637f97f0d55e97a7163b14fcb736d69e340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:0b:33:ad:16:02:56:93:0c:f3:e4:58:73:
c0:a9:22:d8:c7:58:d3:f6:dd:d1:1a:8e:1b:6d:b0:
50:c5:ff:bc:a8:fc:5f:79:cc:56:13:3b:fb:45:19:
9b:06:84:78:3d:54:e5:13:8c:0c:1c:90:f9:e9:c4:
88:6c:d8:1a:7f:7c:2a:64:76:01:bf:07:c9:37:35:
41:b3:14:81:5b:ba:4e:6c:44:05:07:a6:8e:92:7a:
df:bd:d1:13:7a:b4:dc:7d:c9:89:1f:e3:ad:1d:01:
d8:3f:02:46:f1:26:02:ce:3c:fd:47:a9:b2:f7:bc:
64:7c:8b:c0:87:a7:ec:a1:57:23:8c:63:d9:12:3c:
db:b0:90:97:42:f1:43:6d:c8:f5:da:03:61:e9:10:
3b:25:f2:58:18:e1:a1:7d:bf:a5:99:c3:ad:cc:b4:
c0:94:0a:d0:50:6b:1f:d7:14:96:c7:2c:76:c2:16:
26:b6:0f:04:c8:ea:b1:f3:62:00:27:08:1d:2c:99:
9c:e7:99:b9:37:54:c2:e5:7e:d4:64:0a:e3:91:41:
fd:ba:c4:c6:30:64:a5:af:1a:95:ac:59:ca:e2:b5:
11:4f:71:9d:41:f5:62:81:04:83:8b:55:6a:8b:d3:
03:a8:1b:83:31:51:07:aa:9b:84:11:78:79:a8:c7:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DF:F6:37:F9:7F:0D:55:E9:7A:71:63:B1:4F:CB:73:6D:69:E3:40
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:25:9d:78:d3:52:5b:ae:86:f7:2e:4a:f3:6a:6d:05:c7:3e:
2a:58:15:54:f0:8e:88:b7:2a:a3:d9:7f:fd:fd:9b:24:78:0d:
32:9c:99:ee:ba:a4:9a:7b:05:3f:14:cb:dd:52:1c:e0:12:ae:
44:99:1e:2e:74:ab:2c:af:49:9b:f0:f8:b1:e0:fb:a5:4d:b0:
0a:f2:0b:7f:1f:cd:a8:90:75:7d:5c:dd:d2:f7:9d:3f:56:96:
f6:fd:bd:e8:a7:36:63:8a:ae:b6:ee:4d:76:24:b5:16:56:7e:
2e:0b:c9:dd:23:f8:86:51:91:46:c1:a5:b3:d5:40:8a:32:fa:
af:de:50:6f:b7:22:94:85:56:c0:95:52:35:04:78:23:9c:6d:
d6:6b:fb:3f:3b:90:94:93:6d:f7:ac:9e:c5:d1:5a:43:82:23:
bd:33:ec:98:6c:d7:db:78:93:86:f8:5b:87:ea:3d:31:b4:13:
29:07:89:f1:6d:3f:55:b0:3a:ec:73:07:60:0c:d5:2c:b9:75:
f9:22:e5:ce:05:8c:d0:49:39:da:e6:35:5b:78:d7:fd:05:ea:
be:ef:32:ed:b0:98:7b:4e:a4:1c:90:de:c4:b6:11:bf:df:b7:
01:87:db:3d:13:22:43:1e:07:87:6a:5c:03:fa:25:80:1e:b7:
2a:a3:e8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:57:00 2026 by rpki-client