Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
File: Sz1GYT0gKWKWebKwSi-chsq8dNU.mft (raw, json)
Hash identifier: 34f8XnKFVTVOo5Vy425kgMjZFTifWrSg9HrdxrHvKg0=
Subject key identifier: FC:28:78:DD:69:27:51:EC:98:22:77:EE:7E:DA:02:45:00:3A:6D:A1
Authority key identifier: 4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
Certificate issuer: /CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Certificate serial: 019EB6C56B1BAFFDD2AF312101FEA3D4095A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
Manifest number: 1951
Signing time: Thu 11 Jun 2026 13:00:51 +0000
Manifest this update: Thu 11 Jun 2026 13:00:51 +0000
Manifest next update: Fri 12 Jun 2026 13:00:51 +0000
Files and hashes: 1: Sz1GYT0gKWKWebKwSi-chsq8dNU.crl (hash: akrGSGjJlLlKcuLHoIjmYmnllkzgguWpU1GIVoKQqLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:6b:1b:af:fd:d2:af:31:21:01:fe:a3:d4:09:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Validity
Not Before: Jun 11 13:00:51 2026 GMT
Not After : Jun 12 13:00:51 2026 GMT
Subject: CN=fc2878dd692751ec982277ee7eda0245003a6da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:7a:d1:1b:99:43:34:1c:69:f3:34:2a:96:
10:97:4c:d0:9c:88:f2:bb:e2:83:41:79:70:48:ff:
8b:a6:fd:7f:af:d6:9e:e6:f2:42:30:7e:05:12:ec:
b0:21:24:03:d2:ab:42:f3:6b:3c:98:0b:6d:74:6b:
d4:10:44:b0:90:00:2f:09:32:28:da:a6:01:63:32:
6d:94:74:2b:53:b6:08:f3:95:68:2f:08:58:18:16:
27:e6:3f:85:60:88:08:41:61:61:b0:89:03:aa:47:
50:aa:b3:e9:e0:88:4f:8e:63:f4:d7:46:31:39:cb:
02:47:5e:15:cf:3f:2c:b7:75:13:29:cd:64:4b:15:
c3:69:31:05:65:f3:3b:7f:85:33:7f:83:87:35:b9:
a3:39:6c:86:bf:e3:cf:e4:b8:e5:c4:b6:98:c5:e2:
14:2f:0d:74:fb:99:63:b0:a7:0b:98:8f:6d:31:5f:
57:08:94:2b:b0:61:a9:81:0f:24:65:ce:63:7e:1c:
1a:b3:9a:d6:5a:d9:78:25:87:71:ad:a6:57:9d:b7:
2d:32:73:3a:07:a9:69:a1:04:21:cc:8c:f9:02:d7:
0a:63:d3:d1:1c:0d:ca:8f:38:a0:95:41:34:59:31:
6c:4c:98:1a:14:15:b7:ea:fc:20:f7:c1:95:46:38:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:28:78:DD:69:27:51:EC:98:22:77:EE:7E:DA:02:45:00:3A:6D:A1
X509v3 Authority Key Identifier:
keyid:4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:79:66:6c:58:ef:15:1b:64:eb:e1:e5:27:22:f5:29:93:83:
79:16:6a:f8:8a:6f:5b:31:6e:77:1e:43:bc:ff:c0:81:bd:7e:
2b:4f:b1:e9:dd:df:c5:5a:43:57:63:ab:92:f6:a5:01:98:99:
ef:88:9e:ad:bc:58:50:4b:80:3c:2d:db:e2:2d:02:59:0c:8d:
c6:fa:ee:27:89:27:37:d0:44:35:68:ac:aa:58:a2:1c:22:eb:
f9:17:97:94:03:30:ba:bd:4f:40:04:47:4f:bb:35:b5:84:90:
98:f2:6e:fb:fc:8f:e5:f2:b7:2b:5f:43:f4:3f:e4:36:d6:e7:
19:4e:48:f6:9f:9b:30:0e:43:d0:5b:e3:8d:a9:ff:6e:0b:b5:
85:05:46:27:13:17:1f:f2:3c:ce:aa:a1:67:17:f8:d7:4f:ad:
e0:76:9f:0d:61:6f:4e:f5:4b:f3:48:6f:94:40:65:3d:e4:7e:
de:b8:73:ad:6a:9b:1b:db:ef:43:bd:8d:26:3e:64:a8:89:b6:
fb:7d:2b:bc:19:8b:0b:0c:b1:5b:d7:18:46:89:6b:b3:cd:0b:
e5:57:1e:73:b7:b7:6c:3e:0a:1f:6a:61:52:fd:61:9f:59:84:
e6:5d:ee:29:68:5b:95:53:83:73:85:a3:f2:b5:93:02:eb:f8:
97:cd:36:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:12:21 2026 by rpki-client