Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
File: Sz1GYT0gKWKWebKwSi-chsq8dNU.mft (raw, json)
Hash identifier: WvQWtnaTWCfAKhhRyWA4HArIZO5v4E12ZebWwj1NYiA=
Subject key identifier: 7A:4A:9A:55:D6:39:E9:46:5B:A4:32:1D:A0:EE:20:A4:4F:9E:40:56
Authority key identifier: 4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
Certificate issuer: /CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Certificate serial: 01A17B83F3B02FE25C431004BA82DC865086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
Manifest number: 1AC0
Signing time: Tue 27 Oct 2026 04:00:07 +0000
Manifest this update: Tue 27 Oct 2026 04:00:07 +0000
Manifest next update: Wed 28 Oct 2026 04:00:07 +0000
Files and hashes: 1: Sz1GYT0gKWKWebKwSi-chsq8dNU.crl (hash: Be4SgH6qr88NVQp5xEsnVmE0W6oZHzw3DXgWrtyYC4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:83:f3:b0:2f:e2:5c:43:10:04:ba:82:dc:86:50:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Validity
Not Before: Oct 27 04:00:07 2026 GMT
Not After : Oct 28 04:00:07 2026 GMT
Subject: CN=7a4a9a55d639e9465ba4321da0ee20a44f9e4056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:dc:de:54:68:77:49:2a:f8:4e:9b:9f:64:
f0:d9:ff:98:02:60:33:68:e9:1e:f2:e2:62:1e:07:
68:00:c7:63:86:b1:23:bd:7b:82:88:da:7b:00:6f:
ef:7a:b6:92:94:eb:37:e3:b0:c8:9f:cf:49:1b:11:
1c:2b:2b:b6:76:8c:b6:8f:4a:07:93:38:11:11:ea:
1d:3f:50:76:66:c9:b1:70:8c:e9:70:10:cd:b8:60:
b8:71:68:de:c4:79:b2:a3:3b:f5:41:0a:eb:2d:d4:
66:92:2e:08:ec:67:87:be:c6:76:68:34:42:75:f5:
55:02:3f:cb:fc:df:b5:fb:28:66:77:62:38:74:f4:
89:5f:d6:7e:eb:4a:67:96:14:13:a4:40:6e:b4:2f:
e1:3d:81:70:31:80:59:9d:d9:4a:8e:93:c9:03:48:
f6:1f:f6:00:1a:38:03:68:bc:4f:04:7d:e2:2c:e9:
6e:71:75:ee:f8:6c:3b:9f:77:c1:4a:ac:b0:fd:f1:
da:2a:99:f7:37:a9:17:9a:ca:ed:b0:ef:47:7f:41:
a5:79:c2:0f:ae:d5:81:85:74:8e:7c:e3:3e:26:a1:
71:da:a7:17:c6:59:1c:8b:f3:dd:09:58:ee:2a:6f:
3c:b0:09:9c:98:38:e1:bd:0b:d1:9b:10:ab:5c:18:
31:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4A:9A:55:D6:39:E9:46:5B:A4:32:1D:A0:EE:20:A4:4F:9E:40:56
X509v3 Authority Key Identifier:
keyid:4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0d:fc:b1:36:ba:77:76:df:67:33:89:e8:13:a1:bc:61:85:
f4:3b:1a:05:81:32:58:18:30:68:9a:75:9d:78:63:aa:2b:10:
4c:30:3f:78:c6:8b:d3:f4:cf:fe:fa:40:da:55:1d:8a:b9:18:
35:51:13:01:c5:b2:f2:49:ca:39:f4:8e:28:ab:9a:29:b7:9f:
5a:bf:5d:fe:b8:d5:57:ed:11:80:58:29:26:16:96:8d:3c:2e:
68:01:6a:dd:48:9e:9d:d0:1f:c3:49:30:a2:4d:3a:6d:34:9c:
38:dd:c1:5c:a0:ef:42:6d:2a:b7:c0:5c:e1:9a:b0:d3:61:fa:
1d:cf:a2:48:9d:21:58:59:46:eb:ea:51:76:d5:0e:65:92:b1:
1b:13:46:65:17:2b:f3:ad:cd:af:52:03:2f:b5:be:26:5f:0b:
a1:52:4a:18:c2:1e:a0:fd:fd:27:88:28:33:4b:7f:1b:98:c2:
d7:49:47:68:83:7c:8a:1c:00:bc:bd:ff:bd:25:ac:13:d1:02:
e9:86:9e:92:d9:9d:72:64:c7:a8:9c:56:b5:85:cc:fa:16:d3:
ae:7d:9d:5c:8f:7f:5b:4e:9a:32:40:4c:00:b0:1d:4a:27:15:
47:6c:81:22:61:07:17:06:65:e8:a3:9b:dd:dd:8a:05:02:9f:
27:65:ff:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7g/OwL+JcQxAEuoLchlCGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiM2Q0NjYxM2QyMDI5NjI5Njc5YjJiMDRhMmY5Yzg2Y2Fi
Yzc0ZDUwHhcNMjYxMDI3MDQwMDA3WhcNMjYxMDI4MDQwMDA3WjAzMTEwLwYDVQQD
Eyg3YTRhOWE1NWQ2MzllOTQ2NWJhNDMyMWRhMGVlMjBhNDRmOWU0MDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt7c3lRod0kq+E6bn2Tw2f+YAmAz
aOke8uJiHgdoAMdjhrEjvXuCiNp7AG/veraSlOs347DIn89JGxEcKyu2doy2j0oH
kzgREeodP1B2ZsmxcIzpcBDNuGC4cWjexHmyozv1QQrrLdRmki4I7GeHvsZ2aDRC
dfVVAj/L/N+1+yhmd2I4dPSJX9Z+60pnlhQTpEButC/hPYFwMYBZndlKjpPJA0j2
H/YAGjgDaLxPBH3iLOlucXXu+Gw7n3fBSqyw/fHaKpn3N6kXmsrtsO9Hf0GlecIP
rtWBhXSOfOM+JqFx2qcXxlkci/PdCVjuKm88sAmcmDjhvQvRmxCrXBgxOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpKmlXWOelGW6QyHaDuIKRPnkBWMB8GA1UdIwQY
MBaAFEs9RmE9IClilnmysEovnIbKvHTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3oxR1lUMGdLV0tXZWJLd1NpLWNoc3E4ZE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZDc4MmUtMDFlMi00YjczLWJmODAt
Yjk3OWU2NWJjMGQ2LzEvU3oxR1lUMGdLV0tXZWJLd1NpLWNoc3E4ZE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yZDc4MmUtMDFlMi00YjczLWJmODAtYjk3OWU2NWJjMGQ2
LzEvU3oxR1lUMGdLV0tXZWJLd1NpLWNoc3E4ZE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQ38sTa6
d3bfZzOJ6BOhvGGF9DsaBYEyWBgwaJp1nXhjqisQTDA/eMaL0/TP/vpA2lUdirkY
NVETAcWy8knKOfSOKKuaKbefWr9d/rjVV+0RgFgpJhaWjTwuaAFq3UiendAfw0kw
ok06bTScON3BXKDvQm0qt8Bc4Zqw02H6Hc+iSJ0hWFlG6+pRdtUOZZKxGxNGZRcr
863Nr1IDL7W+Jl8LoVJKGMIeoP39J4goM0t/G5jC10lHaIN8ihwAvL3/vSWsE9EC
6YaektmdcmTHqJxWtYXM+hbTrn2dXI9/W06aMkBMALAdSicVR2yBImEHFwZl6KOb
3d2KBQKfJ2X/dQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:37 2026 by rpki-client