Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier: ZQkLx1FHyWs0jEpwAl1Ic6tKOUoDQ6SZzA1pOCFUwT8=
Subject key identifier: 4E:08:46:5D:5A:8D:3F:BB:C8:6E:FD:31:57:E2:4D:5B:6A:BB:88:47
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 01A0C331E6B0ABD01C0CE42B697A97649FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number: 0956
Signing time: Mon 21 Sep 2026 09:00:22 +0000
Manifest this update: Mon 21 Sep 2026 09:00:22 +0000
Manifest next update: Tue 22 Sep 2026 09:00:22 +0000
Files and hashes: 1: J0MRS2e_4rzldJH7kBm0LoNHTMU.roa (hash: 7VRw4nnE4+OfHHnDkIP7YsA7G/ZEfdUGZYYUw75Pmx4=)
2: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: at2Opq1VRrHeMbfCvOZ4CrufQsJO2T7A4In/WPwL6Zk=)
3: xfTxUVFSNt-Wltsx2zyoxkhDthY.roa (hash: niI0CV+uIpJ0eXK/uwBkGVqHzBzVAOxis1CXovjyjY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:e6:b0:ab:d0:1c:0c:e4:2b:69:7a:97:64:9f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: Sep 21 09:00:22 2026 GMT
Not After : Sep 22 09:00:22 2026 GMT
Subject: CN=4e08465d5a8d3fbbc86efd3157e24d5b6abb8847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:f4:28:c6:b6:f3:c5:cb:a7:57:63:06:70:
4d:40:b5:e4:66:e2:fe:c4:4b:07:1e:10:e0:71:3b:
7d:33:69:65:b6:73:36:ae:45:b8:ee:97:ce:65:bd:
23:b4:3f:32:6b:5a:26:87:3e:72:ad:27:84:3c:32:
bc:f9:db:77:d6:ee:85:cf:f1:e1:2e:8b:b8:94:48:
cc:e0:68:7b:e7:4b:97:3f:cf:4b:a0:82:34:54:3f:
f0:c5:c6:1b:d3:d0:ed:89:b2:a2:a2:ee:a6:32:e9:
36:a8:a9:47:f9:19:31:80:82:58:2d:44:a5:9c:ac:
7d:fb:d2:2d:85:c0:4a:6a:1f:a4:0e:38:db:45:19:
f5:73:97:24:46:c5:6a:2b:f6:a2:a2:ed:91:62:c1:
23:3a:3c:47:f3:9d:6c:97:e1:63:05:32:d9:43:91:
f8:ce:4e:a2:6d:58:52:0e:27:4a:a2:9b:11:51:f5:
ba:13:21:08:37:ac:6c:45:3b:f9:3e:6d:4a:d9:3c:
6f:44:d9:f6:cc:28:88:ee:c6:9f:d0:8b:38:d6:16:
16:0d:a1:5f:a4:df:1e:d2:b2:fc:ca:af:86:0a:75:
5d:18:81:05:2c:f1:d0:c6:f3:3e:b5:3a:bb:2a:72:
58:d4:71:fb:5a:eb:a2:48:14:4d:01:e5:71:ff:8e:
a0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:08:46:5D:5A:8D:3F:BB:C8:6E:FD:31:57:E2:4D:5B:6A:BB:88:47
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:29:21:f2:a3:de:ff:b7:bb:00:e2:3a:ac:37:a8:0f:c2:31:
34:ff:92:53:69:89:07:e3:ed:ce:34:e1:4c:69:28:f9:62:c5:
96:17:53:f0:c8:16:62:1e:98:4f:3a:88:6c:6d:3a:21:27:c6:
24:65:9d:f9:f9:ce:3c:3b:1f:dd:03:ab:79:c0:a5:ba:58:19:
02:f6:0d:19:87:b8:cc:cb:50:25:f1:3b:d0:11:f2:56:06:63:
2a:20:6d:09:ce:a0:2f:15:89:1c:f3:56:7e:3f:99:7a:5b:af:
03:c4:65:13:27:76:ea:a9:55:46:e9:13:ad:39:1f:73:43:c4:
11:6e:2a:32:e5:8f:cc:01:a6:c9:b4:be:d7:de:3d:bd:7e:28:
1b:54:65:fe:67:36:a9:9c:e7:6e:3f:69:53:c7:97:f5:22:50:
6b:80:d6:d2:15:33:41:7b:22:5a:0a:96:8a:50:95:66:93:df:
cc:64:0a:51:d2:de:55:73:ce:8f:ca:f1:5c:a5:ec:b0:96:54:
39:a6:ea:91:12:0d:7f:34:dd:f8:f7:db:15:f3:75:7e:05:00:
5f:09:ed:24:5d:84:40:90:cf:a2:54:18:c9:19:24:8b:54:f9:
bd:3d:19:2b:da:06:ae:e0:e0:e3:2f:3e:fe:99:67:fb:28:d3:
38:ab:a2:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDMeawq9AcDOQraXqXZJ+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMzMyMGUwYmI1ZGJlMmJhOTcyNjkxYjc1ZDY4ZjQ4ZjZl
NTdmODgwHhcNMjYwOTIxMDkwMDIyWhcNMjYwOTIyMDkwMDIyWjAzMTEwLwYDVQQD
Eyg0ZTA4NDY1ZDVhOGQzZmJiYzg2ZWZkMzE1N2UyNGQ1YjZhYmI4ODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5T0KMa288XLp1djBnBNQLXkZuL+
xEsHHhDgcTt9M2lltnM2rkW47pfOZb0jtD8ya1omhz5yrSeEPDK8+dt31u6Fz/Hh
Lou4lEjM4Gh750uXP89LoII0VD/wxcYb09DtibKiou6mMuk2qKlH+RkxgIJYLUSl
nKx9+9IthcBKah+kDjjbRRn1c5ckRsVqK/aiou2RYsEjOjxH851sl+FjBTLZQ5H4
zk6ibVhSDidKopsRUfW6EyEIN6xsRTv5Pm1K2TxvRNn2zCiI7saf0Is41hYWDaFf
pN8e0rL8yq+GCnVdGIEFLPHQxvM+tTq7KnJY1HH7WuuiSBRNAeVx/46gEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4IRl1ajT+7yG79MVfiTVtqu4hHMB8GA1UdIwQY
MBaAFEszIOC7Xb4rqXJpG3XWj0j25X+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2Ut
YTg5NzU5ZDcwNzFjLzEvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2UtYTg5NzU5ZDcwNzFj
LzEvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCkh8qPe
/7e7AOI6rDeoD8IxNP+SU2mJB+PtzjThTGko+WLFlhdT8MgWYh6YTzqIbG06ISfG
JGWd+fnOPDsf3QOrecClulgZAvYNGYe4zMtQJfE70BHyVgZjKiBtCc6gLxWJHPNW
fj+ZeluvA8RlEyd26qlVRukTrTkfc0PEEW4qMuWPzAGmybS+1949vX4oG1Rl/mc2
qZznbj9pU8eX9SJQa4DW0hUzQXsiWgqWilCVZpPfzGQKUdLeVXPOj8rxXKXssJZU
OabqkRINfzTd+PfbFfN1fgUAXwntJF2EQJDPolQYyRkki1T5vT0ZK9oGruDg4y8+
/pln+yjTOKuiaQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:58:41 2026 by rpki-client