Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier: WcUO+mR3Rnhe1AOKD1sEl/LgJ4k7K7QkuZBGfJjdrYk=
Subject key identifier: D7:08:72:31:32:13:62:C8:22:72:3D:69:E4:28:66:41:28:C7:EA:27
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 019DA29BF68A91BC75F9081F55F61BD49C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number: 0C05
Signing time: Sat 18 Apr 2026 22:00:23 +0000
Manifest this update: Sat 18 Apr 2026 22:00:23 +0000
Manifest next update: Sun 19 Apr 2026 22:00:23 +0000
Files and hashes: 1: Q3blDI4wrXCjaTFpenyLf0DAMPA.roa (hash: F0bx6XJTy3iA6AQ6s8pJaOAUtTyA4K1EgB6ztrarkJU=)
2: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: 8Ko6dYEsB1AlmYbREkWTruWxD8xyFVf9B3zUcvwbAIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9b:f6:8a:91:bc:75:f9:08:1f:55:f6:1b:d4:9c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: Apr 18 22:00:23 2026 GMT
Not After : Apr 19 22:00:23 2026 GMT
Subject: CN=d7087231321362c822723d69e428664128c7ea27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:76:a0:2e:06:56:0c:a5:24:dd:86:17:ad:
a5:41:e4:1f:06:7d:9b:b6:c9:18:7a:98:c6:67:06:
a6:06:41:3a:5e:bf:4b:18:5c:b4:3e:5e:a9:5d:90:
77:71:63:02:7c:29:fe:8c:1c:93:08:d4:56:0b:2b:
c8:68:bc:58:ac:bd:b2:51:99:79:1d:1a:c0:b1:6a:
55:9f:11:06:a5:85:80:47:d7:d1:d2:4c:4c:19:2b:
ee:67:18:85:39:e7:36:6e:9a:2b:73:48:fe:7f:03:
49:89:2f:44:ef:31:3e:c3:b6:94:be:c2:b1:51:e1:
d4:5f:38:57:ff:d8:04:c2:c6:63:e6:61:09:60:7f:
1b:0e:0c:a3:36:48:e1:d4:5c:d8:e7:95:a6:eb:d4:
60:04:95:91:46:ee:36:a1:a6:2b:08:41:05:d1:37:
9c:15:8f:64:46:ee:d3:ea:5a:d1:24:4f:08:ab:cf:
55:02:75:f6:fc:e4:b6:28:50:04:07:6e:b7:d4:f5:
d8:7b:07:aa:aa:85:95:4d:45:53:a4:1b:98:41:86:
cc:4f:3e:da:1a:c6:ec:d1:3e:d1:e6:66:2d:78:04:
b2:c6:26:7e:2b:ee:0b:3e:43:0d:bb:b3:91:b8:ee:
31:41:68:8c:39:cc:ac:25:a7:5b:0b:ba:b0:fe:2d:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:08:72:31:32:13:62:C8:22:72:3D:69:E4:28:66:41:28:C7:EA:27
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:e7:31:e4:42:4d:48:7f:55:36:98:21:7b:d0:93:d7:84:7b:
f7:be:a3:b9:a8:c6:86:12:78:b3:86:5a:e3:4e:a7:53:d1:a8:
0b:65:71:63:02:23:7f:c0:a8:71:6d:7e:2b:ae:49:b4:21:52:
6c:5a:d0:14:10:6b:60:19:15:05:85:63:64:fb:58:18:5f:55:
21:f4:c5:11:f4:39:61:09:93:e9:ab:9b:9e:1b:ee:06:84:f7:
62:32:66:e0:16:b9:9a:78:c1:77:7a:f3:e5:1f:8a:f3:3a:63:
8e:75:42:ed:e1:b0:0b:dc:e9:5b:7a:56:59:24:ce:cd:8e:7b:
4f:a2:d0:bc:6a:f7:61:d4:0e:9f:40:88:c0:8c:5f:86:27:cb:
55:b0:b2:19:2d:06:6e:7f:92:37:e2:a5:e0:36:2e:c2:71:39:
cb:21:c0:9c:84:80:e3:a8:5a:fc:00:36:e4:56:95:9f:13:34:
88:64:ed:01:55:66:f1:3d:11:d2:ec:a2:75:3d:99:0f:e6:92:
a8:5b:60:41:5c:dc:3b:c1:50:34:aa:a8:7c:45:1e:9b:e3:61:
ef:d2:b7:15:44:93:2e:e0:d1:8a:f1:ca:5a:b3:78:0e:af:72:
40:65:08:7d:50:4b:55:ac:2f:83:94:3a:d6:83:45:45:b2:bd:
e1:2c:45:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2im/aKkbx1+QgfVfYb1JyLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OWY1ZDJiN2RiZjUyNDQ5YjAxMjUzYjBmODI3ZjQwMWE4
YTdjODEwHhcNMjYwNDE4MjIwMDIzWhcNMjYwNDE5MjIwMDIzWjAzMTEwLwYDVQQD
EyhkNzA4NzIzMTMyMTM2MmM4MjI3MjNkNjllNDI4NjY0MTI4YzdlYTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo652oC4GVgylJN2GF62lQeQfBn2b
tskYepjGZwamBkE6Xr9LGFy0Pl6pXZB3cWMCfCn+jByTCNRWCyvIaLxYrL2yUZl5
HRrAsWpVnxEGpYWAR9fR0kxMGSvuZxiFOec2bporc0j+fwNJiS9E7zE+w7aUvsKx
UeHUXzhX/9gEwsZj5mEJYH8bDgyjNkjh1FzY55Wm69RgBJWRRu42oaYrCEEF0Tec
FY9kRu7T6lrRJE8Iq89VAnX2/OS2KFAEB2631PXYeweqqoWVTUVTpBuYQYbMTz7a
Gsbs0T7R5mYteASyxiZ+K+4LPkMNu7ORuO4xQWiMOcysJadbC7qw/i0o/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcIcjEyE2LIInI9aeQoZkEox+onMB8GA1UdIwQY
MBaAFEmfXSt9v1JEmwElOw+Cf0AainyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYt
YjlkY2NhYjZkZjJlLzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYtYjlkY2NhYjZkZjJl
LzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyucx5EJN
SH9VNpghe9CT14R7976juajGhhJ4s4Za406nU9GoC2VxYwIjf8CocW1+K65JtCFS
bFrQFBBrYBkVBYVjZPtYGF9VIfTFEfQ5YQmT6aubnhvuBoT3YjJm4Ba5mnjBd3rz
5R+K8zpjjnVC7eGwC9zpW3pWWSTOzY57T6LQvGr3YdQOn0CIwIxfhifLVbCyGS0G
bn+SN+Kl4DYuwnE5yyHAnISA46ha/AA25FaVnxM0iGTtAVVm8T0R0uyidT2ZD+aS
qFtgQVzcO8FQNKqofEUem+Nh79K3FUSTLuDRivHKWrN4Dq9yQGUIfVBLVawvg5Q6
1oNFRbK94SxF7Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:26:58 2026 by rpki-client