Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier: 39ogWTXH/crfo0y4DHcg8cfbI6E2qOxPM/iwc6dnU/4=
Subject key identifier: 61:AE:77:9C:43:E5:87:35:31:B8:6F:94:E5:AC:67:83:72:13:60:F1
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 01A0E218F79207AC025B5B77947371E1FF69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number: 0966
Signing time: Sun 27 Sep 2026 09:01:22 +0000
Manifest this update: Sun 27 Sep 2026 09:01:22 +0000
Manifest next update: Mon 28 Sep 2026 09:01:22 +0000
Files and hashes: 1: J0MRS2e_4rzldJH7kBm0LoNHTMU.roa (hash: 7VRw4nnE4+OfHHnDkIP7YsA7G/ZEfdUGZYYUw75Pmx4=)
2: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: XwEG4INrpfAa7H78+r+3/4Yu/y3kxfGnYiANeVxGeq8=)
3: xfTxUVFSNt-Wltsx2zyoxkhDthY.roa (hash: niI0CV+uIpJ0eXK/uwBkGVqHzBzVAOxis1CXovjyjY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:18:f7:92:07:ac:02:5b:5b:77:94:73:71:e1:ff:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: Sep 27 09:01:22 2026 GMT
Not After : Sep 28 09:01:22 2026 GMT
Subject: CN=61ae779c43e5873531b86f94e5ac6783721360f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:30:9b:97:f1:ff:13:be:31:3e:de:de:43:
3d:f3:d4:32:be:16:f5:41:05:63:fa:ce:20:0a:d4:
e0:0a:e3:fc:bc:50:11:2c:71:c3:33:41:2b:eb:5f:
fe:9c:55:d5:7f:eb:1f:08:4b:4f:b7:b6:ce:a5:73:
68:da:ab:4a:b5:fd:e6:af:99:58:aa:58:97:5b:de:
7c:a5:1c:2e:d6:0e:72:92:7b:37:7a:7a:c8:c2:34:
df:08:ef:83:38:d3:32:d0:8f:cc:6a:54:0d:d7:02:
d9:f2:2e:20:b1:86:17:ab:31:13:31:71:4d:e5:0d:
11:8e:4b:7d:30:a8:7a:73:8b:ca:67:b7:c3:77:a0:
5c:6c:9f:2a:22:f1:2e:70:04:fc:cc:c7:42:05:a6:
b5:08:af:c0:8e:cb:c6:26:54:fc:1d:ba:44:37:49:
cb:72:80:ed:4a:06:24:cf:7c:ee:24:45:ee:e9:fa:
b1:19:9c:58:0c:4d:d1:ef:a9:52:17:97:03:86:f4:
4a:4d:1b:ce:9f:8d:8a:8c:6c:4a:ec:94:c5:99:ae:
c5:5d:4a:a7:3d:bd:51:8c:e6:ce:0b:91:58:c0:1c:
c4:cf:83:a9:94:d2:e3:43:48:80:04:aa:56:bd:4e:
f8:bd:ff:26:85:43:64:c7:54:e7:cd:ef:49:05:a0:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AE:77:9C:43:E5:87:35:31:B8:6F:94:E5:AC:67:83:72:13:60:F1
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c6:71:ad:1d:05:d8:59:a7:40:d7:b5:51:13:0b:76:37:60:
17:fc:5d:e2:f2:ae:a7:c1:d2:99:c4:bb:66:f7:d9:10:75:6e:
1e:ea:56:83:33:84:6f:97:61:3a:d7:05:11:04:ff:cc:c7:d9:
68:2f:c2:a6:c7:f9:1b:31:e9:23:a4:35:a4:02:32:37:8d:94:
3b:23:2d:0a:3a:ef:07:a9:33:be:f7:ac:f1:82:67:aa:69:4a:
33:d1:04:50:a1:e1:86:dc:03:4b:87:0e:85:c8:bd:ee:ca:25:
e9:7f:2a:a0:3f:e8:b2:59:77:e2:ff:24:7a:6c:f6:d8:ff:b0:
94:0c:4b:d4:61:91:7d:bd:52:b1:23:4b:61:db:36:bf:c8:3c:
c0:d0:b3:2d:f9:26:32:69:29:9f:0b:0b:c7:f7:fd:b9:e8:f3:
b1:bb:b5:e5:e0:4f:21:ba:32:78:6d:3e:bc:54:48:ae:6c:85:
bd:f9:23:36:19:83:86:9a:e9:1f:77:63:d5:13:f2:fe:9c:c5:
29:9d:5e:0b:7f:d7:35:3e:0f:ad:5b:a8:c7:b4:06:b0:e7:13:
fd:40:be:fc:6a:b9:f2:99:d0:93:39:08:38:2f:7c:95:cd:bf:
1c:9f:fc:f2:6c:7c:96:5a:a3:36:56:af:35:a7:ed:22:50:3f:
49:fb:75:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:08:46 2026 by rpki-client