Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier: cdv3ySAvB3wyugrILNShTSJwOphqeDeBXZ+pjVHDQik=
Subject key identifier: 71:EC:69:12:A3:BF:98:71:8B:12:C7:98:6F:54:6A:FB:E2:A6:DC:23
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 019F9211B2E70520E125554A5EAD7F2D43E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number: 08B8
Signing time: Fri 24 Jul 2026 03:01:01 +0000
Manifest this update: Fri 24 Jul 2026 03:01:01 +0000
Manifest next update: Sat 25 Jul 2026 03:01:01 +0000
Files and hashes: 1: J0MRS2e_4rzldJH7kBm0LoNHTMU.roa (hash: 7VRw4nnE4+OfHHnDkIP7YsA7G/ZEfdUGZYYUw75Pmx4=)
2: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: W6BXZrGLxUSp0rGbNe8ISOBIPfNwvTLuUrIajUpoiD4=)
3: xfTxUVFSNt-Wltsx2zyoxkhDthY.roa (hash: niI0CV+uIpJ0eXK/uwBkGVqHzBzVAOxis1CXovjyjY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:b2:e7:05:20:e1:25:55:4a:5e:ad:7f:2d:43:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: Jul 24 03:01:01 2026 GMT
Not After : Jul 25 03:01:01 2026 GMT
Subject: CN=71ec6912a3bf98718b12c7986f546afbe2a6dc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:f9:0c:c7:97:ed:fe:ff:42:c4:d0:c7:82:
5a:90:12:99:be:6c:73:df:f4:b4:23:c1:70:a2:8f:
db:b1:a3:37:29:c2:3e:42:3c:ee:9d:cb:6d:d5:7a:
a5:09:22:a7:26:e5:be:f4:ea:a3:f0:76:72:10:6f:
6e:47:7c:93:90:47:30:bb:a2:cf:66:17:34:65:df:
71:22:29:ea:5f:a7:c2:fe:04:07:3f:61:6e:8a:ac:
2d:8a:8b:56:7b:e4:06:e1:81:92:9c:11:a9:84:16:
f0:c4:0d:ed:04:5a:03:bf:f3:12:10:8b:b6:cf:37:
8e:e7:74:0e:42:70:52:f6:7d:7c:c5:7e:5f:36:7d:
c8:da:60:62:82:7f:8a:5d:99:af:9f:5c:ea:4b:8c:
ec:fe:d8:0a:69:c2:b9:1b:53:20:05:89:7c:ac:ad:
0f:ff:eb:61:69:8f:42:82:89:f5:97:ca:53:09:ae:
6f:51:67:0d:2b:fa:e2:6d:37:29:6c:ff:38:9e:ed:
35:ce:6d:c4:73:64:c1:b2:0a:e5:72:25:97:5f:d8:
1a:9e:89:bb:b7:f4:2d:2b:e0:29:35:db:21:0c:ec:
4d:73:0c:24:6f:9d:53:2c:3e:29:e1:5a:cb:b4:08:
dc:f0:94:22:08:86:61:bc:58:b7:65:cd:fb:65:65:
62:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EC:69:12:A3:BF:98:71:8B:12:C7:98:6F:54:6A:FB:E2:A6:DC:23
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b0:0f:ae:2a:56:fc:f9:19:1b:4c:d6:db:ea:bf:b3:5b:f0:
0f:5a:de:d8:d0:61:11:48:02:d8:6c:47:da:07:78:be:d3:8c:
5d:45:3b:24:e8:e0:f4:b2:49:71:1e:30:9f:f8:95:e6:c9:e6:
a4:38:b8:e6:c3:7f:14:60:d4:d7:dd:d1:5e:ee:4b:03:bb:93:
24:de:e5:af:b8:e0:da:14:e3:a4:5e:07:6d:79:ed:96:28:17:
a2:60:bf:ee:11:18:01:d3:98:5c:fa:84:2a:38:69:97:0b:10:
f4:a9:b5:54:22:cc:b8:86:a8:a2:0c:fb:03:26:98:5c:24:ee:
6f:56:cd:e5:b7:f8:80:dc:9b:79:a9:4d:ce:5a:c4:1d:0f:76:
72:98:54:cd:88:73:75:45:87:b2:90:db:8f:cb:54:9b:3c:20:
cd:0e:6e:d1:ec:cc:ca:50:a1:b6:09:74:c3:19:ea:ec:1f:09:
a2:0f:7f:8d:d2:cc:de:a9:0f:0a:f4:db:c2:c5:ca:21:76:97:
99:db:3a:02:47:1c:bc:c4:b6:8f:66:b9:ff:0f:bf:cb:2e:c7:
d4:91:04:c0:a3:ea:21:c0:94:ff:c3:76:01:a1:47:be:37:e8:
6f:c2:a0:e8:be:22:e9:82:33:9d:4e:38:13:b0:20:9e:53:fe:
c5:f2:07:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEbLnBSDhJVVKXq1/LUPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMzMyMGUwYmI1ZGJlMmJhOTcyNjkxYjc1ZDY4ZjQ4ZjZl
NTdmODgwHhcNMjYwNzI0MDMwMTAxWhcNMjYwNzI1MDMwMTAxWjAzMTEwLwYDVQQD
Eyg3MWVjNjkxMmEzYmY5ODcxOGIxMmM3OTg2ZjU0NmFmYmUyYTZkYzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aL5DMeX7f7/QsTQx4JakBKZvmxz
3/S0I8Fwoo/bsaM3KcI+Qjzunctt1XqlCSKnJuW+9Oqj8HZyEG9uR3yTkEcwu6LP
Zhc0Zd9xIinqX6fC/gQHP2FuiqwtiotWe+QG4YGSnBGphBbwxA3tBFoDv/MSEIu2
zzeO53QOQnBS9n18xX5fNn3I2mBign+KXZmvn1zqS4zs/tgKacK5G1MgBYl8rK0P
/+thaY9Cgon1l8pTCa5vUWcNK/ribTcpbP84nu01zm3Ec2TBsgrlciWXX9ganom7
t/QtK+ApNdshDOxNcwwkb51TLD4p4VrLtAjc8JQiCIZhvFi3Zc37ZWViDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHsaRKjv5hxixLHmG9UavviptwjMB8GA1UdIwQY
MBaAFEszIOC7Xb4rqXJpG3XWj0j25X+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2Ut
YTg5NzU5ZDcwNzFjLzEvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2UtYTg5NzU5ZDcwNzFj
LzEvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7APripW
/PkZG0zW2+q/s1vwD1re2NBhEUgC2GxH2gd4vtOMXUU7JOjg9LJJcR4wn/iV5snm
pDi45sN/FGDU193RXu5LA7uTJN7lr7jg2hTjpF4HbXntligXomC/7hEYAdOYXPqE
KjhplwsQ9Km1VCLMuIaoogz7AyaYXCTub1bN5bf4gNybealNzlrEHQ92cphUzYhz
dUWHspDbj8tUmzwgzQ5u0ezMylChtgl0wxnq7B8Jog9/jdLM3qkPCvTbwsXKIXaX
mds6AkccvMS2j2a5/w+/yy7H1JEEwKPqIcCU/8N2AaFHvjfob8Kg6L4i6YIznU44
E7AgnlP+xfIHew==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:24 2026 by rpki-client