Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
File: SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft (raw, json)
Hash identifier: BGa454IVFe7KQAWDsyKSf+1F66PLDRROXsd5xomjMm8=
Subject key identifier: 8E:31:26:4D:E7:2A:9D:9B:EE:9E:3E:EB:34:CC:95:B5:07:43:75:9F
Authority key identifier: 4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
Certificate issuer: /CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Certificate serial: 019CABD91FC4A857D26EF46E94FE9D99A05E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
Manifest number: 10CE
Signing time: Mon 02 Mar 2026 00:00:59 +0000
Manifest this update: Mon 02 Mar 2026 00:00:59 +0000
Manifest next update: Tue 03 Mar 2026 00:00:59 +0000
Files and hashes: 1: SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl (hash: gUpwA9dsfvtrYiiz1Q0poP0JpQliFCfSprh7BuCao9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:1f:c4:a8:57:d2:6e:f4:6e:94:fe:9d:99:a0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Validity
Not Before: Mar 2 00:00:59 2026 GMT
Not After : Mar 3 00:00:59 2026 GMT
Subject: CN=8e31264de72a9d9bee9e3eeb34cc95b50743759f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:3d:55:ea:34:4c:9f:85:97:6e:89:b9:46:
7a:3d:67:3e:c0:00:50:e5:41:4a:94:b3:28:1b:40:
b0:ad:fb:8e:d4:6d:cb:36:44:a0:43:55:20:21:1d:
37:25:0e:04:ff:a0:2b:51:bc:a5:56:55:71:9b:84:
da:f2:9e:f2:6e:bf:be:0c:42:22:98:44:28:df:c1:
b5:7d:f2:69:bc:5a:2c:78:3c:42:6b:cd:e0:de:02:
70:5b:85:0c:d0:d2:f0:1d:49:ae:46:43:63:4f:9e:
d2:47:3d:45:8c:e5:1c:85:15:bb:c2:7a:a2:6c:81:
96:1e:53:74:f9:a6:a9:5b:1f:4e:c7:4c:5e:cb:00:
b8:a0:30:db:2c:f4:c9:0d:30:07:76:6d:1e:75:02:
1c:52:60:fc:8b:94:aa:54:f9:05:8d:5d:4c:74:cf:
9f:87:75:93:56:2b:95:c9:1f:d8:cd:e2:20:d2:03:
96:6c:a7:9d:32:f5:52:e4:e7:41:0b:30:8b:34:ce:
1e:03:9f:60:bd:a4:68:f2:67:41:3a:04:bf:6c:9f:
eb:ea:3f:70:c2:0f:5d:be:e8:32:dd:43:a2:f9:db:
aa:e5:d7:c4:60:27:64:87:97:85:82:c2:83:72:38:
27:13:8f:2d:6e:d9:6f:fe:51:f0:aa:9f:2c:54:98:
87:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:31:26:4D:E7:2A:9D:9B:EE:9E:3E:EB:34:CC:95:B5:07:43:75:9F
X509v3 Authority Key Identifier:
keyid:4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:22:eb:3d:df:be:fa:5b:c3:f8:68:ee:34:30:1f:99:59:c6:
39:81:b9:79:0d:83:c1:08:63:7c:c9:28:2c:5d:48:86:ff:3b:
3c:17:76:b1:00:b1:8b:02:24:3f:ea:df:d2:d8:cc:38:ff:9b:
bb:bd:30:97:f2:be:76:37:c9:da:3e:8c:ea:df:0c:44:f4:a1:
c9:ec:6b:f0:45:93:c0:42:88:f8:2c:92:c0:13:13:2f:55:09:
f4:2e:7b:eb:c6:c8:6f:0a:c0:f2:d7:05:9e:ac:58:85:38:b1:
68:fc:a6:fe:62:0b:9a:05:72:5c:07:50:8c:79:56:61:4d:4b:
4d:3f:0f:9a:a8:cb:d5:79:fc:4b:23:b3:0d:9e:ff:c1:28:8b:
3f:2d:f0:32:8e:73:e8:18:31:19:d8:50:d7:b9:e9:6a:a3:2a:
50:c3:45:e5:ac:7d:f4:fd:08:6a:29:d1:16:fd:c4:26:ac:74:
6f:93:07:44:b7:a4:10:25:90:26:01:b7:24:37:4c:7b:f2:fb:
ce:29:d0:ac:78:88:f4:b7:07:7d:13:fb:80:ec:0a:5b:55:cf:
f6:04:71:c4:f0:f6:ae:33:d5:2c:78:da:97:3c:fd:d8:24:a5:
65:f0:95:36:39:06:1a:22:a9:e1:bb:31:e0:4b:b4:2d:6a:85:
b7:ed:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:37:51 2026 by rpki-client