Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier: HcABvuuMcKesUwPtPcJ81okto42qEI4Ujcuk3DqUf6w=
Subject key identifier: D2:D2:E2:8A:4D:6D:64:9E:01:A3:17:03:B2:C6:74:76:88:21:4B:DD
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 01A157E69324060DA13856672833D696F2DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number: 09A3
Signing time: Tue 20 Oct 2026 06:01:31 +0000
Manifest this update: Tue 20 Oct 2026 06:01:31 +0000
Manifest next update: Wed 21 Oct 2026 06:01:31 +0000
Files and hashes: 1: J0MRS2e_4rzldJH7kBm0LoNHTMU.roa (hash: 7VRw4nnE4+OfHHnDkIP7YsA7G/ZEfdUGZYYUw75Pmx4=)
2: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: pkuHAB2ZW4R/XFD5kVdWWAQud8kariOpa+tWRwQJ9Jw=)
3: xfTxUVFSNt-Wltsx2zyoxkhDthY.roa (hash: niI0CV+uIpJ0eXK/uwBkGVqHzBzVAOxis1CXovjyjY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:e6:93:24:06:0d:a1:38:56:67:28:33:d6:96:f2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: Oct 20 06:01:31 2026 GMT
Not After : Oct 21 06:01:31 2026 GMT
Subject: CN=d2d2e28a4d6d649e01a31703b2c6747688214bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:f5:60:e0:69:57:aa:38:8e:96:da:47:d5:
d6:9c:1a:23:8a:b7:25:ba:3e:bd:e8:91:fa:98:f2:
e3:26:23:f2:74:d8:ba:50:f7:b5:69:c7:3f:ed:45:
ad:a3:e2:6f:87:27:21:70:ab:91:f5:ee:7b:11:1d:
6a:a6:df:14:2d:e1:a9:94:02:d8:b3:2f:ec:11:a1:
6e:0a:b4:82:2e:f9:ae:ff:a5:19:52:ff:23:f1:19:
10:06:28:3e:31:22:15:f9:74:75:7e:38:34:c6:5a:
68:7b:02:21:1a:de:73:41:d4:9a:82:19:a7:af:17:
6a:95:48:56:fa:b9:90:ce:ee:3c:71:73:fc:89:b6:
5b:0a:41:38:68:96:b7:bc:2b:c4:8d:f1:5b:7c:88:
f2:a7:c0:de:cf:a2:35:b3:da:99:db:aa:5b:37:0a:
94:34:60:78:41:b1:9b:53:02:5e:12:08:fe:0c:4c:
3e:b8:b8:f9:52:45:28:8c:82:f8:14:bc:18:24:25:
43:53:f5:26:b6:60:51:eb:ff:43:36:ca:51:7d:18:
0e:c0:66:a1:79:cd:3c:49:aa:9d:bd:6d:26:69:34:
8c:09:b4:78:e2:7a:79:31:b5:ed:8b:b0:95:26:ea:
01:0a:8a:d0:00:34:24:9c:37:a2:36:8d:14:a0:61:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D2:E2:8A:4D:6D:64:9E:01:A3:17:03:B2:C6:74:76:88:21:4B:DD
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c9:86:3c:33:5f:6b:29:f0:d8:9f:cc:c3:67:92:b3:76:04:
14:45:1b:ec:0b:5a:92:ba:3f:bf:c0:50:33:0b:a1:71:2c:38:
39:58:a1:89:a7:a2:36:32:9f:b9:23:dc:61:08:ff:07:51:a0:
52:2b:a9:3c:73:a9:13:52:a6:05:3a:cd:d7:6c:e9:0c:48:8a:
43:56:aa:42:4c:14:3a:9b:06:13:13:75:be:5a:63:8e:a0:f5:
dd:43:31:fa:72:e6:97:94:19:85:e6:77:1b:71:bf:b4:c3:6d:
b1:74:91:d2:76:5d:71:1a:36:65:b0:0a:94:6e:98:c6:a2:dc:
8b:0d:59:04:dd:56:b3:90:cc:89:e9:01:6e:80:0d:7d:a0:a8:
a8:4a:27:45:c2:54:5d:5f:5c:62:b7:de:5b:33:14:0c:49:88:
eb:8f:e8:01:74:92:e1:36:20:8f:c6:64:04:22:d5:35:05:f7:
54:10:6a:ef:19:d6:39:4e:fc:8a:20:3e:a4:17:02:4f:cd:77:
2b:a8:b9:13:89:55:fd:6c:c9:48:e5:b0:b7:1c:97:b8:a7:5a:
81:ce:5c:ba:e3:a4:bb:47:81:48:b7:ea:21:a9:9e:da:97:22:
b7:b9:8b:eb:78:80:50:33:c8:9b:82:f9:16:87:79:54:b2:96:
a7:c4:5e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:30:44 2026 by rpki-client