Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
File: Sz1GYT0gKWKWebKwSi-chsq8dNU.mft (raw, json)
Hash identifier: W0c0rac4zSzuKfpifWk92UFTXgR2b4y750n2D3Fm2es=
Subject key identifier: 8B:6C:D4:34:41:56:99:C9:49:AE:33:63:37:E0:15:59:F8:F8:B3:65
Authority key identifier: 4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
Certificate issuer: /CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Certificate serial: 019D2703DF67B72F2228688114D2BDF3B572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:00:58 +0000
Manifest this update: Wed 25 Mar 2026 22:00:58 +0000
Manifest next update: Thu 26 Mar 2026 22:00:58 +0000
Files and hashes: 1: Sz1GYT0gKWKWebKwSi-chsq8dNU.crl (hash: s9tiDlwendvO0ZWgoUOBgei4X5/C10OIoRtqXxr+oag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:df:67:b7:2f:22:28:68:81:14:d2:bd:f3:b5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Validity
Not Before: Mar 25 22:00:58 2026 GMT
Not After : Mar 26 22:00:58 2026 GMT
Subject: CN=8b6cd434415699c949ae336337e01559f8f8b365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:e5:e1:01:82:82:d0:26:a7:12:04:68:d0:
f8:33:60:9b:af:0f:a6:bc:aa:8f:f6:70:12:04:58:
3b:b4:25:9c:d9:e7:58:cb:09:da:e1:dc:3f:94:56:
9b:81:4b:c5:54:73:7a:86:95:a3:2f:91:96:77:41:
e0:67:c4:b0:0b:e2:ba:4d:2e:42:f0:5f:fa:a6:4a:
4e:37:fe:c9:f4:f3:15:1c:f7:b3:c8:b0:18:f5:b7:
b6:7d:fb:88:f3:98:7c:e0:d7:55:90:72:f3:47:9b:
25:7e:5f:c5:50:c9:4f:64:17:eb:a3:64:ed:bb:71:
51:a6:87:f8:70:26:43:fb:64:64:02:94:c7:25:f1:
81:3b:91:d3:22:94:8e:b5:f5:af:23:01:d8:e1:5d:
7b:e2:da:c1:74:6e:6b:b2:8a:f5:1f:d1:7a:35:e4:
e0:57:98:d6:fd:16:5f:b5:2d:d9:84:18:a2:09:6a:
8f:7d:ef:f1:8b:41:57:f0:49:37:b0:2e:a7:49:26:
e9:d8:ec:80:42:78:84:0e:57:e6:ef:70:f6:45:3b:
45:48:47:32:54:24:76:10:eb:05:84:2d:8d:f0:23:
e0:b0:f7:a9:86:08:b3:4d:19:d9:bc:70:6c:9d:e3:
2a:50:c2:4e:93:6e:ed:fe:ce:18:bc:91:9d:43:55:
c1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6C:D4:34:41:56:99:C9:49:AE:33:63:37:E0:15:59:F8:F8:B3:65
X509v3 Authority Key Identifier:
keyid:4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:31:4f:38:1a:3b:91:37:89:d0:08:23:2b:b3:5f:0b:b0:e0:
c8:f9:20:48:32:26:0a:47:28:17:93:e2:de:9c:f8:f1:c7:32:
e3:a2:3b:98:d5:e4:05:34:b7:81:25:3a:69:6b:4b:28:d1:2a:
30:59:42:f7:9c:7a:ee:47:4c:c4:30:bd:7c:16:2e:60:aa:70:
8f:2e:7e:5d:42:16:51:f4:e6:50:18:c9:67:cd:29:36:96:6c:
18:86:82:dd:b4:29:2e:66:94:3c:4c:ab:a9:46:99:d9:66:d9:
b3:63:90:e7:23:03:2c:cd:36:ab:b8:26:83:65:a7:cd:3f:b8:
d5:ce:e8:ce:3c:57:68:72:75:fa:08:b0:51:57:3e:6c:8d:54:
2d:ae:00:f7:df:85:07:7e:8f:56:52:81:29:dd:c9:e9:e2:96:
fc:53:39:ed:86:47:5e:c4:73:9b:1f:9b:38:c5:d8:76:87:df:
3a:d9:08:7a:67:7a:96:6b:57:80:61:51:67:3d:b6:0e:4c:bd:
55:64:54:01:9c:d4:21:fb:ff:51:4f:47:5d:17:e8:fe:18:06:
f4:a7:36:1e:92:20:0c:93:19:ce:f1:f5:e8:7e:fa:2e:33:c4:
c8:70:33:a2:48:20:3d:0b:47:80:c7:63:fc:1e:e3:ae:7e:46:
76:5c:8c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:50 2026 by rpki-client