Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier: TyNroL3HMfeJlLA0Siee8u6ZMS1LFgJrjAN+94yud4U=
Subject key identifier: DD:EC:37:F8:5B:91:80:47:91:F2:C6:1D:3E:CD:24:C9:FB:DB:EC:0A
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 019CAA8FB572704279AB229ECBF820B280CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number: 0737
Signing time: Sun 01 Mar 2026 18:01:10 +0000
Manifest this update: Sun 01 Mar 2026 18:01:10 +0000
Manifest next update: Mon 02 Mar 2026 18:01:10 +0000
Files and hashes: 1: J0MRS2e_4rzldJH7kBm0LoNHTMU.roa (hash: 7VRw4nnE4+OfHHnDkIP7YsA7G/ZEfdUGZYYUw75Pmx4=)
2: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: oZ4iDyIgtODGH6HHxm3VFC5NduwewEGHCHZbw7VQL6w=)
3: xfTxUVFSNt-Wltsx2zyoxkhDthY.roa (hash: niI0CV+uIpJ0eXK/uwBkGVqHzBzVAOxis1CXovjyjY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:b5:72:70:42:79:ab:22:9e:cb:f8:20:b2:80:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: Mar 1 18:01:10 2026 GMT
Not After : Mar 2 18:01:10 2026 GMT
Subject: CN=ddec37f85b91804791f2c61d3ecd24c9fbdbec0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:93:e9:b1:91:77:eb:80:3a:47:d7:88:52:2d:
a4:5d:73:66:b0:df:2f:f4:3e:d3:76:67:95:3c:06:
f5:04:bc:88:d7:5c:7f:11:f6:e1:eb:d5:9b:74:65:
e6:3f:07:4a:93:14:97:b8:a8:8e:20:e4:1e:c7:cf:
f1:ff:a2:5b:58:c6:8c:b2:3d:8b:2e:14:0d:11:4c:
e1:7c:f3:3f:79:39:25:2c:11:95:e9:79:e8:c3:af:
f6:e8:85:66:82:91:8d:4b:9e:71:5d:64:44:8f:39:
c2:b3:b1:45:94:32:28:a1:fd:64:cd:f6:92:d8:e3:
c9:51:e3:ec:5f:61:7f:37:a1:38:4b:ba:46:69:a8:
cc:3f:60:b7:fc:c1:77:2d:56:38:cf:09:7b:99:b3:
16:67:04:f8:cf:41:85:b2:52:6c:f5:04:fd:e3:64:
74:8e:77:56:8c:4d:6a:97:02:c8:e8:d9:45:68:52:
2e:ae:70:40:02:02:77:47:69:3a:74:fc:f7:73:14:
50:a2:51:d4:ad:73:57:57:5c:25:8a:61:77:5f:25:
1b:eb:99:9e:84:c0:a9:d2:61:5d:f6:51:b9:08:fe:
ff:50:09:f1:3a:e7:f9:69:f9:32:9f:5c:4f:22:a5:
a6:a6:e0:32:3b:9f:06:35:da:ba:5d:78:49:a5:95:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EC:37:F8:5B:91:80:47:91:F2:C6:1D:3E:CD:24:C9:FB:DB:EC:0A
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e4:9e:41:5a:25:1d:8a:a9:68:31:cd:33:c6:50:3b:2e:92:
35:4d:f8:9a:56:fb:7e:f4:97:43:c9:77:88:07:80:d5:d2:c7:
7b:98:ac:03:93:d6:c3:f8:df:b4:6d:19:32:a3:fd:7f:14:ba:
5c:8c:ef:e2:28:0c:81:df:4d:ba:ff:44:6d:07:af:06:d4:cc:
1f:22:c6:9d:ce:f7:ae:1a:ef:b3:d4:89:47:01:34:e5:e7:5a:
57:22:08:0c:ce:06:c5:56:4b:20:f6:5f:cd:e1:c1:a4:fd:e7:
a7:f0:cd:03:af:b4:7c:76:9b:15:a8:f9:6b:7a:9e:ec:81:06:
0d:ef:d3:fd:49:e8:ab:eb:28:0d:12:1f:bb:fb:4f:db:23:81:
61:bc:fd:73:6b:a2:9f:89:32:0d:f6:4d:9c:8c:7e:d0:5f:3a:
ab:da:3e:8f:e9:52:70:3b:2e:48:ad:c7:bc:65:23:7b:de:96:
41:77:99:cc:49:a2:1a:11:37:89:1d:e6:d0:17:6a:13:d2:4e:
0a:3f:77:d3:51:4a:b0:1f:92:17:ae:b0:53:28:92:a7:6f:de:
64:2e:9e:aa:5b:4f:91:24:b3:44:3b:85:76:93:2c:df:d2:de:
65:5b:c6:f8:4a:39:03:c5:27:44:04:3b:d7:a2:bd:df:64:38:
f6:97:25:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:35 2026 by rpki-client