Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
File: szmLWx2aluQRW3vPb8pj-69jnKc.mft (raw, json)
Hash identifier: CalkDAtrOJQ6HF42GmKMKn3YDfVoov5I9G8pIiAu01U=
Subject key identifier: B4:C6:E8:72:E9:63:14:AB:51:06:A3:62:E6:8A:7B:90:5B:50:00:7B
Authority key identifier: B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7
Certificate issuer: /CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
Certificate serial: 019D277299C6CA5612C0A2A8B4882C3CB36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
Manifest number: 1384
Signing time: Thu 26 Mar 2026 00:01:54 +0000
Manifest this update: Thu 26 Mar 2026 00:01:54 +0000
Manifest next update: Fri 27 Mar 2026 00:01:54 +0000
Files and hashes: 1: j8okqCAv-bm5TM6KaEHR7C-_b7I.roa (hash: Zbr8YUxVFxjKVegr6g8BaKH6zOh/4KrcP5xs+WRZJuA=)
2: szmLWx2aluQRW3vPb8pj-69jnKc.crl (hash: ZhZJqhlwiuDWvnF+Qe90hz1psdZb/SIQdHQ9L9OJqMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:99:c6:ca:56:12:c0:a2:a8:b4:88:2c:3c:b3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
Validity
Not Before: Mar 26 00:01:54 2026 GMT
Not After : Mar 27 00:01:54 2026 GMT
Subject: CN=b4c6e872e96314ab5106a362e68a7b905b50007b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:56:18:27:2d:6b:b6:96:d1:f0:d7:7f:75:94:
4e:87:c2:68:3f:20:3b:67:1b:3b:f3:67:c8:16:64:
0c:0d:a6:e7:50:b7:99:10:70:87:06:d8:97:49:85:
cb:38:3a:6c:5a:c2:df:a5:a2:9b:79:1e:bd:ee:ff:
ec:e5:53:9c:e6:50:bd:ef:c4:a9:ba:b0:a3:4d:da:
04:e4:68:53:e9:6f:03:dd:4a:66:8c:d2:f2:7e:e9:
88:5b:dc:43:91:fd:29:27:51:d5:7c:d9:32:c7:df:
b7:5b:5a:72:17:48:75:6b:9d:06:9b:a4:41:fa:be:
c2:c3:b5:db:0a:0c:1f:2f:14:4e:44:3d:70:df:2a:
5e:95:aa:5d:c7:09:41:91:2f:8e:e6:e2:0b:be:c8:
d3:b6:58:51:04:ab:78:b7:65:42:d1:a3:4b:63:f1:
80:31:a7:df:b5:3f:1a:37:17:25:d3:46:e2:b5:6b:
69:b8:75:56:d3:f2:02:d9:63:74:e5:dc:e9:67:ae:
4f:53:ea:a0:b5:65:80:20:e3:82:dc:08:00:05:b5:
a4:27:23:8e:ce:c9:38:4c:af:da:56:63:22:f4:9a:
fc:a0:65:2e:99:91:fa:e8:1b:3e:94:8a:4a:d1:f4:
ce:22:b9:85:47:b0:e6:cf:cc:2f:64:fe:5e:66:7c:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C6:E8:72:E9:63:14:AB:51:06:A3:62:E6:8A:7B:90:5B:50:00:7B
X509v3 Authority Key Identifier:
keyid:B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b4:d6:c9:59:65:36:5a:3e:88:be:b3:3c:eb:ac:6c:71:45:
02:a8:e7:ab:bc:48:e4:16:06:25:f3:44:a4:59:57:0c:6b:f3:
7c:f7:86:20:41:ad:53:b8:47:62:7e:be:c8:0d:f6:5e:2a:80:
20:a9:c1:38:52:b7:eb:a3:ca:c6:e2:66:d5:20:ad:47:38:e1:
ee:3d:56:39:e6:2b:76:a1:f1:b5:0e:88:a1:cc:e4:0c:ec:4b:
d2:b8:81:7d:e0:43:dd:57:13:46:7e:98:7b:3e:1c:6a:bc:fd:
90:af:2f:b5:e5:b6:00:4f:fe:43:d3:8e:73:65:7d:de:5e:1a:
08:84:0c:9b:4c:06:c2:b4:91:e0:cc:33:2d:89:87:47:f4:05:
da:58:f5:90:b9:74:04:fc:ee:dd:9c:2d:2e:cf:3e:b1:37:43:
7c:52:dc:ed:2e:b4:ea:77:83:c0:df:27:ce:58:fd:17:dc:4a:
08:61:25:27:74:2f:64:3e:f8:f4:66:dd:bb:ef:61:5f:04:19:
c8:83:83:77:65:ff:8c:42:55:26:6e:6e:fd:c7:f2:dc:2e:80:
ad:8b:e4:a1:b6:cf:5a:d5:28:f1:79:e5:b2:08:5f:85:44:65:
2d:40:bd:8f:95:3f:31:8d:9f:a6:31:32:c8:6f:b8:05:c3:ba:
b1:87:76:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:01 2026 by rpki-client