
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
File: Szx5xlXI4rA6V-A78tED6BdUy-I.mft (raw, json)
Hash identifier: nNeK4AftIa0a7dE1S6v5H1OT58dSKDzU9pJm4Gvb1C0=
Subject key identifier: 06:99:06:5B:0E:FA:A0:C8:A1:71:BD:53:9A:79:66:BD:81:8F:34:D4
Authority key identifier: 4B:3C:79:C6:55:C8:E2:B0:3A:57:E0:3B:F2:D1:03:E8:17:54:CB:E2
Certificate issuer: /CN=4b3c79c655c8e2b03a57e03bf2d103e81754cbe2
Certificate serial: 019FA9ABD226109BA2AF572B2EDA43B70D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
Manifest number: A8
Signing time: Tue 28 Jul 2026 17:00:37 +0000
Manifest this update: Tue 28 Jul 2026 17:00:37 +0000
Manifest next update: Wed 29 Jul 2026 17:00:37 +0000
Files and hashes: 1: PI0F8x9CPayW399Vvg4Zxhy5Mzo.asa (hash: HDptImqZldK6ZOWVfpx8UrKAynGnTippOHJQCxKk/aY=)
2: Szx5xlXI4rA6V-A78tED6BdUy-I.crl (hash: VuICcmg610hF2b+AkhWNhXx9mCjpPxFL1ShrsyhcH1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:d2:26:10:9b:a2:af:57:2b:2e:da:43:b7:0d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3c79c655c8e2b03a57e03bf2d103e81754cbe2
Validity
Not Before: Jul 28 17:00:37 2026 GMT
Not After : Jul 29 17:00:37 2026 GMT
Subject: CN=0699065b0efaa0c8a171bd539a7966bd818f34d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:af:69:36:62:89:ac:1f:ad:4c:71:a6:a4:
1c:88:5a:db:ed:b9:c7:1c:2d:18:0f:d4:2c:ed:0b:
df:5a:19:23:27:58:4a:18:2e:b0:6d:26:b6:21:dc:
7b:47:58:da:47:3c:8c:48:76:94:4f:ba:fb:4d:21:
1d:05:fb:1f:ee:21:82:9c:bb:ca:b6:cc:ae:98:ed:
4b:43:66:3f:ca:9f:b5:59:c1:c9:dd:51:4e:ad:67:
fc:e3:06:5a:5a:e9:e0:af:1a:0e:f4:c7:2a:15:3c:
83:bf:fb:91:30:32:51:ad:51:e2:9b:fa:df:0b:99:
65:ce:f8:5a:98:55:d7:45:1e:0d:f7:5c:62:c1:12:
51:37:ef:fc:09:8d:fb:19:2d:ab:78:6e:28:d5:62:
33:77:eb:6a:f6:74:08:1a:01:1a:a0:fa:1b:29:6f:
f2:ae:d9:ce:ea:b7:45:19:32:88:6f:ea:84:d1:81:
1a:3d:6e:43:95:99:c0:4b:ef:32:b6:cd:fd:f5:ad:
7f:a9:26:52:a3:7c:ea:ae:e8:92:1b:f6:0a:6d:6e:
dd:b3:59:b0:25:32:42:9b:a0:d4:30:00:56:3c:88:
b2:11:6c:d4:7f:41:4b:16:e9:3e:e6:32:1a:54:7f:
55:9e:68:b8:0d:da:67:df:23:ae:c0:0b:58:49:35:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:99:06:5B:0E:FA:A0:C8:A1:71:BD:53:9A:79:66:BD:81:8F:34:D4
X509v3 Authority Key Identifier:
keyid:4B:3C:79:C6:55:C8:E2:B0:3A:57:E0:3B:F2:D1:03:E8:17:54:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:51:ff:eb:84:d7:46:c5:78:a6:d4:c6:19:fd:1e:8c:23:d4:
37:54:7c:0d:b0:6c:1b:6e:80:0c:03:8b:9e:32:29:ee:6f:04:
77:ee:e6:09:fb:f3:d0:e3:57:f6:5f:34:de:2f:a7:f8:23:fd:
83:c6:27:1e:8c:46:ef:bf:e6:cc:e8:68:67:ba:0c:03:db:04:
b3:72:9d:a3:2d:ad:c6:f7:ed:5e:4e:a9:5a:05:2f:66:69:17:
0c:30:3e:26:cd:ea:b2:08:20:f6:e9:d6:fa:cd:ae:aa:c3:20:
0c:bc:69:b2:87:90:db:b3:d1:a7:3c:f1:36:40:cc:76:82:0a:
a1:71:8a:5e:12:af:cd:03:7b:b5:f3:a0:62:c6:b2:6b:28:a5:
df:d4:9b:5e:8f:6a:97:b1:58:fd:21:93:a1:9e:07:3c:fe:21:
d2:28:d2:4e:a8:87:c5:f6:cf:c1:2c:e2:43:17:a0:4d:f8:9b:
db:e1:e4:5a:dd:fa:28:5a:60:44:6d:b5:4d:d0:74:3f:b5:2e:
65:46:a9:4e:ac:17:76:3d:ca:10:55:17:7d:27:08:f1:99:11:
e8:d0:5f:1a:3d:9b:ed:d6:63:1b:aa:68:46:78:e3:54:8d:1c:
ae:db:9e:47:d4:ff:21:19:8d:37:b4:8b:e1:c5:de:77:87:da:
4c:e8:ff:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:19 2026 by rpki-client