Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json)
Hash identifier: LKOx+3+sNwOFSCFL+u3J/F/fp/ELMpu4EFy62b/Ip1Y=
Subject key identifier: 7E:7F:5B:9C:09:35:BE:5E:50:BC:6A:15:88:BE:3F:60:A3:F9:D6:FA
Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611
Certificate serial: 019D382E1F01718F0D376FF9FCC156E7FD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
Manifest number: 1352
Signing time: Sun 29 Mar 2026 06:00:39 +0000
Manifest this update: Sun 29 Mar 2026 06:00:39 +0000
Manifest next update: Mon 30 Mar 2026 06:00:39 +0000
Files and hashes: 1: 2bTNijwXkgb4PFZZ_2P1y6mstrY.roa (hash: +XqMQ+S0hrSciI31XIUvSsunVxR9hbZap0IM1/ayVkY=)
2: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: pMh3N3/kFSSs4v7JKwPvgo8jg0hvrlL8VYcfgHzx99s=)
3: hkaIiHaQkqbYDa21LNbiz8L8Wj8.roa (hash: hvagbX+/JYayU8QWSSXAcm9Rh91pEayJavqp+lJfgQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:1f:01:71:8f:0d:37:6f:f9:fc:c1:56:e7:fd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611
Validity
Not Before: Mar 29 06:00:39 2026 GMT
Not After : Mar 30 06:00:39 2026 GMT
Subject: CN=7e7f5b9c0935be5e50bc6a1588be3f60a3f9d6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:37:5e:de:d7:f7:d5:7f:37:b0:1b:fb:ab:
8c:16:de:e3:42:12:e2:cd:b1:8e:0d:25:f3:d0:ae:
06:3e:f8:d2:d8:56:e9:ba:6b:08:30:a1:20:1e:c1:
20:ca:e6:24:c9:39:15:9a:1d:37:17:fd:11:e2:b0:
1b:74:d6:73:41:2c:11:f7:1b:f0:ee:b8:9f:4f:c6:
0b:38:9a:6e:0a:e6:44:58:10:d0:00:f7:4b:e3:07:
d1:ad:8a:bc:a0:de:04:90:07:59:4f:2c:ee:dd:0a:
63:cf:91:91:14:ab:1e:e5:1b:b3:92:2d:dc:01:f4:
18:a9:33:6c:0e:37:fd:75:12:f9:f5:98:4c:0d:f3:
12:ee:2f:df:97:2b:68:c5:83:b2:9f:21:d5:8b:2a:
ce:9f:6f:f7:99:30:bf:db:32:99:04:8f:48:d9:2d:
cd:fc:61:5c:92:9a:49:13:eb:df:38:9d:6a:d7:6d:
fe:1c:4a:5a:e7:10:e5:b0:54:0b:cd:40:50:b9:0a:
68:82:7a:6c:4f:0a:7b:56:27:8e:be:e7:e9:a8:93:
f7:4a:dd:36:22:ee:90:15:17:48:f3:e7:97:f9:35:
5d:46:de:9e:21:bd:5c:37:77:7b:45:09:25:97:54:
86:85:8c:e4:0d:69:c5:e0:fc:73:9c:b4:eb:12:71:
ea:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7F:5B:9C:09:35:BE:5E:50:BC:6A:15:88:BE:3F:60:A3:F9:D6:FA
X509v3 Authority Key Identifier:
keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a9:db:d3:12:ad:30:8f:89:07:52:a4:56:7d:ee:7b:08:16:
99:a3:fd:f2:94:cb:f0:41:b9:8c:12:58:33:93:e4:88:ab:72:
11:73:36:b0:49:d9:71:ba:39:b4:b0:10:e8:66:04:ce:d4:0c:
5a:1e:23:d7:5c:57:0f:cf:cd:a5:ac:6f:c8:ae:6c:bd:a0:2d:
61:c2:7a:ca:0e:39:89:41:4f:3f:38:ef:25:4b:da:23:cd:d6:
85:c9:ba:69:30:3e:8e:b5:89:ce:ec:24:b1:21:b3:d7:3f:e8:
49:b0:ab:95:0b:2b:1c:fc:bd:49:45:a9:d9:aa:71:4c:1d:c6:
36:fd:cd:ca:70:98:77:f4:f8:20:72:72:fb:9a:05:48:c5:ab:
08:a7:ad:75:4d:b0:0b:db:e4:9f:23:02:6b:e1:56:0d:dc:b8:
4d:6f:fc:a8:b8:bf:4c:41:fb:3a:d7:45:57:36:06:e7:71:fd:
3b:f4:16:66:38:7f:44:71:e3:5c:9f:d1:38:33:7a:f8:0b:b9:
bc:a1:d0:7d:4a:42:70:75:8e:a6:59:5d:5d:12:bb:26:7c:c6:
3b:71:73:2b:97:77:9a:87:4b:d5:d1:1c:f0:a9:0f:29:fe:46:
28:18:2f:d4:f2:79:70:e0:d8:8b:c4:c9:1e:2b:07:d2:9d:61:
1c:7a:d2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:18 2026 by rpki-client