Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json)
Hash identifier: Xe9DsNsN9ZYdOAMqAwMmNTd2Pn3qYkndGrQrB4X0vxE=
Subject key identifier: DF:DE:B6:0C:43:8C:A5:5F:39:2E:A6:BD:06:C2:09:DC:FD:38:0E:FE
Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611
Certificate serial: 019CAB34349F28804B3A39225DA42F9A909B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
Manifest number: 1309
Signing time: Sun 01 Mar 2026 21:00:51 +0000
Manifest this update: Sun 01 Mar 2026 21:00:51 +0000
Manifest next update: Mon 02 Mar 2026 21:00:51 +0000
Files and hashes: 1: 2bTNijwXkgb4PFZZ_2P1y6mstrY.roa (hash: +XqMQ+S0hrSciI31XIUvSsunVxR9hbZap0IM1/ayVkY=)
2: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: cbiwvVFXRV2LwSgVWv3SVWORb3EtI6QXgVQ3SV/ikfs=)
3: hkaIiHaQkqbYDa21LNbiz8L8Wj8.roa (hash: hvagbX+/JYayU8QWSSXAcm9Rh91pEayJavqp+lJfgQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:34:9f:28:80:4b:3a:39:22:5d:a4:2f:9a:90:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611
Validity
Not Before: Mar 1 21:00:51 2026 GMT
Not After : Mar 2 21:00:51 2026 GMT
Subject: CN=dfdeb60c438ca55f392ea6bd06c209dcfd380efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:f1:6e:57:66:86:ce:c3:d0:3a:59:b4:09:
b3:4b:2f:2d:68:60:72:0a:53:92:4a:ea:57:c6:24:
7b:68:8d:d2:98:d3:91:4a:b1:80:8d:e9:27:10:36:
71:ec:f0:d3:e1:6f:42:a9:04:7b:13:a3:a9:03:48:
07:a1:85:4b:de:97:70:75:ee:81:0f:85:3b:17:63:
0a:68:5b:cb:0d:8d:ec:3c:5b:4b:d8:a6:10:cf:1b:
02:87:98:91:81:5a:f0:31:77:d2:07:17:f8:b6:70:
7f:41:82:8d:3c:9e:94:ee:91:cd:09:9f:95:0b:d3:
d6:de:2b:94:6a:b2:81:6f:f8:1a:c1:06:ac:8a:90:
2b:c8:45:cc:0d:3f:86:0f:06:70:e8:e1:3d:e2:5b:
75:cf:fd:ac:41:71:18:f2:45:22:65:bc:b1:9d:da:
e0:a9:d9:82:80:ba:ff:78:a2:24:c8:33:f8:96:29:
9c:6b:43:44:71:a8:32:67:2f:b9:7a:3b:50:ad:f7:
41:98:21:f1:b4:19:cb:a6:9f:5b:34:cb:e4:e5:58:
69:ed:b3:19:48:4f:93:95:6c:af:9a:df:bd:b0:ac:
da:b5:3f:10:c3:6c:00:cb:cf:03:83:29:62:87:21:
af:86:a1:e5:7f:3b:cc:eb:47:d4:09:f7:3d:32:70:
04:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DE:B6:0C:43:8C:A5:5F:39:2E:A6:BD:06:C2:09:DC:FD:38:0E:FE
X509v3 Authority Key Identifier:
keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:32:68:31:da:c2:e0:9c:e8:5b:6f:18:8f:b7:31:72:90:a6:
32:ea:71:de:ae:81:30:c0:72:65:7a:4e:36:f3:e0:b4:26:e3:
78:9e:85:74:68:ca:87:de:3a:7d:4c:c4:52:e2:14:79:87:f6:
8a:d5:b5:6e:ca:dc:4b:5b:f2:d2:d0:4c:86:8c:3d:59:f9:a8:
d8:30:a6:50:2b:d3:4e:04:86:13:01:8f:8d:b4:c9:62:22:22:
a8:8e:8c:6b:fa:a4:f7:8e:f5:e2:cc:6a:b3:c7:60:b6:e2:0d:
24:c9:0b:93:a9:51:cf:de:39:d0:6e:21:5b:3d:5a:02:3b:1b:
7d:5f:38:f6:83:a9:cb:c4:7a:38:ad:7c:2c:5a:5d:39:d0:97:
87:d1:a7:7c:27:e0:fb:eb:4b:1e:df:3a:f4:7a:a4:17:a9:46:
c6:27:3d:a9:e1:49:a6:25:06:f9:e8:4f:d9:c8:12:ea:93:e6:
1b:6e:a3:f0:08:4f:12:b0:f9:38:4b:b8:65:37:3f:b7:8a:a5:
82:2b:fb:88:5b:dd:cc:c9:39:ca:23:6e:a8:e4:d3:88:fc:ce:
18:9b:3a:73:c0:cb:bb:7b:21:10:eb:18:5d:07:d1:8f:11:53:
4e:79:fe:39:56:4e:a1:1b:3e:93:47:4e:ed:5a:dd:ab:16:f7:
6f:5e:72:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNDSfKIBLOjkiXaQvmpCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OTkwMTBiYmIxZjQ4NzA5YWVhYzAyZTg0MzM4YTQ5Yjc3
NzQ2MTEwHhcNMjYwMzAxMjEwMDUxWhcNMjYwMzAyMjEwMDUxWjAzMTEwLwYDVQQD
EyhkZmRlYjYwYzQzOGNhNTVmMzkyZWE2YmQwNmMyMDlkY2ZkMzgwZWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBHxbldmhs7D0DpZtAmzSy8taGBy
ClOSSupXxiR7aI3SmNORSrGAjeknEDZx7PDT4W9CqQR7E6OpA0gHoYVL3pdwde6B
D4U7F2MKaFvLDY3sPFtL2KYQzxsCh5iRgVrwMXfSBxf4tnB/QYKNPJ6U7pHNCZ+V
C9PW3iuUarKBb/gawQasipAryEXMDT+GDwZw6OE94lt1z/2sQXEY8kUiZbyxndrg
qdmCgLr/eKIkyDP4limca0NEcagyZy+5ejtQrfdBmCHxtBnLpp9bNMvk5Vhp7bMZ
SE+TlWyvmt+9sKzatT8Qw2wAy88DgylihyGvhqHlfzvM60fUCfc9MnAEywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/etgxDjKVfOS6mvQbCCdz9OA7+MB8GA1UdIwQY
MBaAFEmZAQu7H0hwmurALoQzikm3d0YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1prQkM3c2ZTSENhNnNBdWhET0tTYmQzUmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYzFmY2YtMmM3NS00MWE2LTgxZjkt
NWZlOGFmYTM1ZGY2LzEvU1prQkM3c2ZTSENhNnNBdWhET0tTYmQzUmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mYzFmY2YtMmM3NS00MWE2LTgxZjktNWZlOGFmYTM1ZGY2
LzEvU1prQkM3c2ZTSENhNnNBdWhET0tTYmQzUmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazJoMdrC
4JzoW28Yj7cxcpCmMupx3q6BMMByZXpONvPgtCbjeJ6FdGjKh946fUzEUuIUeYf2
itW1bsrcS1vy0tBMhow9Wfmo2DCmUCvTTgSGEwGPjbTJYiIiqI6Ma/qk94714sxq
s8dgtuINJMkLk6lRz9450G4hWz1aAjsbfV849oOpy8R6OK18LFpdOdCXh9GnfCfg
++tLHt869HqkF6lGxic9qeFJpiUG+ehP2cgS6pPmG26j8AhPErD5OEu4ZTc/t4ql
giv7iFvdzMk5yiNuqOTTiPzOGJs6c8DLu3shEOsYXQfRjxFTTnn+OVZOoRs+k0dO
7Vrdqxb3b15yuw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:32 2026 by rpki-client