Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json)
Hash identifier: 3ZBXfRp1ivKTPAVlPvsk2BDJio+jgud1N/ofdO3oBWU=
Subject key identifier: 07:A3:47:15:53:E0:B6:34:23:8F:EC:78:4E:C6:D3:19:99:8F:B7:57
Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611
Certificate serial: 019DA453A90EC27DAEB75DF4A2D764F00C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
Manifest number: 138A
Signing time: Sun 19 Apr 2026 06:00:39 +0000
Manifest this update: Sun 19 Apr 2026 06:00:39 +0000
Manifest next update: Mon 20 Apr 2026 06:00:39 +0000
Files and hashes: 1: 2bTNijwXkgb4PFZZ_2P1y6mstrY.roa (hash: +XqMQ+S0hrSciI31XIUvSsunVxR9hbZap0IM1/ayVkY=)
2: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: AnFhQa0jR4bJBcOfjCcQXR5dXZjEWTeZ3NPEaRs3Xug=)
3: hkaIiHaQkqbYDa21LNbiz8L8Wj8.roa (hash: hvagbX+/JYayU8QWSSXAcm9Rh91pEayJavqp+lJfgQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:a9:0e:c2:7d:ae:b7:5d:f4:a2:d7:64:f0:0c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611
Validity
Not Before: Apr 19 06:00:39 2026 GMT
Not After : Apr 20 06:00:39 2026 GMT
Subject: CN=07a3471553e0b634238fec784ec6d319998fb757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:1e:d7:14:5b:45:0e:2f:e1:90:09:16:18:
3f:7a:e6:25:2b:dc:85:6b:8d:6c:03:86:3b:1f:ec:
7a:e8:38:57:e0:1f:2e:44:d3:5f:b2:69:1d:7b:47:
45:93:2f:a1:57:1a:6f:eb:10:f9:ab:13:4b:73:37:
53:3f:81:9c:93:73:11:1a:d4:5f:20:ba:6e:51:ff:
f0:15:77:7c:e1:8f:21:19:b5:2e:48:b6:60:61:51:
a4:c2:27:9c:bd:04:72:dc:ba:a6:56:f8:8c:c3:5d:
0a:a7:62:c0:8f:93:80:3b:f3:a3:65:55:1f:89:35:
be:53:3b:01:94:75:42:58:75:b5:db:4b:5d:bc:b7:
d6:5a:09:70:31:ca:19:1f:d3:03:ae:1a:4b:7e:8b:
d6:7b:7a:06:02:3b:52:bf:35:b2:60:36:44:ac:7a:
ce:b2:f9:18:fe:f2:c9:9d:6b:a1:f6:15:2c:0b:b1:
c7:af:79:ec:60:3a:ea:36:a8:15:74:97:6d:f4:9b:
f8:b6:df:30:69:4b:2c:ba:5c:03:2b:22:28:87:83:
d9:8f:a8:fe:61:b4:75:0b:97:a3:d8:18:ee:11:21:
33:0b:8e:c7:bb:ee:0e:51:1b:10:02:a7:ec:3e:0b:
32:e3:59:ed:40:f0:ab:d8:c5:c7:d5:2b:1a:cb:cd:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A3:47:15:53:E0:B6:34:23:8F:EC:78:4E:C6:D3:19:99:8F:B7:57
X509v3 Authority Key Identifier:
keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:55:2a:27:03:14:1a:2a:74:3a:91:c3:00:b0:28:cd:a2:b7:
f7:2a:7c:93:25:7e:dc:71:e0:e2:2c:78:45:03:99:df:04:64:
d1:43:7a:d8:5b:7e:0a:c8:3c:c7:f5:e3:d7:38:f4:ac:1c:9c:
75:78:2c:be:29:15:c6:d8:99:4d:a1:2c:6e:87:74:fc:14:49:
c8:56:9a:4f:b4:e4:8b:dc:6e:b5:62:91:5d:6b:da:3f:76:06:
c7:67:2c:b0:96:59:1d:2c:61:dc:18:7c:40:e6:ff:35:d7:30:
70:8b:bc:9a:3f:56:5b:cb:af:22:ad:1a:03:79:d4:f8:98:1c:
26:9b:46:60:3d:7d:24:d4:e7:11:8c:56:40:01:d7:f5:90:7e:
66:9d:f4:2f:31:77:62:db:35:10:7b:cf:6b:7d:0a:e2:1b:d1:
a5:1f:b0:26:8a:6f:83:20:12:8d:91:17:1f:f7:5b:15:2b:7d:
14:09:15:7c:58:cb:f0:f2:6f:ce:de:64:12:42:e5:39:ea:4c:
19:08:ec:42:69:7c:b6:31:c6:d4:2f:19:c6:95:c0:fd:f2:de:
96:b7:ae:d1:41:e6:58:38:90:44:3e:6c:70:25:d3:6d:84:3a:
2e:a3:2c:1f:7b:08:d2:b9:bc:03:b4:c2:72:b1:4c:96:d5:cd:
ad:01:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:39 2026 by rpki-client