Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier: oYU10WIuXsBsRFw9r4AFkNwQZKxmrP6XZiNIRw9UdN4=
Subject key identifier: 35:AA:CB:11:96:5E:4B:01:2F:71:24:29:51:EA:69:88:87:12:56:7B
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 019DA1C0BB0542F87026E2961AF58DAC0E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number: 07B7
Signing time: Sat 18 Apr 2026 18:00:55 +0000
Manifest this update: Sat 18 Apr 2026 18:00:55 +0000
Manifest next update: Sun 19 Apr 2026 18:00:55 +0000
Files and hashes: 1: J0MRS2e_4rzldJH7kBm0LoNHTMU.roa (hash: 7VRw4nnE4+OfHHnDkIP7YsA7G/ZEfdUGZYYUw75Pmx4=)
2: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: c8CBOB3YC6oENeTNyz+VybJ4Xx1eB9xFd/xuPyfpRDc=)
3: xfTxUVFSNt-Wltsx2zyoxkhDthY.roa (hash: niI0CV+uIpJ0eXK/uwBkGVqHzBzVAOxis1CXovjyjY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:c0:bb:05:42:f8:70:26:e2:96:1a:f5:8d:ac:0e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: Apr 18 18:00:55 2026 GMT
Not After : Apr 19 18:00:55 2026 GMT
Subject: CN=35aacb11965e4b012f71242951ea69888712567b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:96:06:78:3f:21:cc:95:0e:c8:ce:0e:9b:
17:e4:97:f0:7c:c9:ab:86:a8:76:f2:fb:0e:eb:a4:
63:3d:d9:cb:bb:92:6e:11:8e:ea:f6:cd:ea:f5:dd:
6a:0d:5a:aa:51:7c:70:1d:60:8b:8b:9d:3d:de:cf:
f5:38:5a:77:8d:4e:e1:eb:a3:11:79:3a:50:58:6d:
df:ef:b6:e2:e3:34:7a:1d:4e:23:95:bb:3e:ee:ea:
25:99:f9:6c:1e:c0:13:9b:13:c7:ee:46:75:a8:e2:
81:d7:7d:3c:06:df:d8:01:0e:37:78:02:ec:7c:e2:
b5:0d:e2:64:87:dd:7c:ca:80:62:2e:a4:fd:e2:04:
25:95:3b:d6:a3:c9:67:0f:53:dc:e5:af:09:26:e1:
8d:3d:9d:18:55:fe:5e:9d:b5:88:df:ef:fc:46:2a:
bb:7c:0a:08:09:e6:ca:27:5f:06:35:90:cb:9e:1b:
bd:3a:1e:c8:e6:5d:fe:fc:96:b3:c2:94:ec:99:63:
49:0b:a9:b3:90:44:6b:f0:7e:73:bb:1e:8c:77:af:
cd:7c:05:be:17:23:70:f8:1f:2c:e4:42:5f:31:fe:
6a:de:c2:b0:71:66:65:e0:55:77:14:0c:1a:00:71:
1c:88:20:f2:c2:84:80:32:b8:dc:04:eb:94:5f:aa:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:CB:11:96:5E:4B:01:2F:71:24:29:51:EA:69:88:87:12:56:7B
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bd:7d:52:31:02:ba:4c:9d:cd:f8:ac:a6:05:bf:d8:9e:16:
02:76:70:99:90:0c:f3:2b:2c:70:33:27:e9:07:3b:a3:ae:b0:
ab:22:60:39:9d:f6:12:e1:56:5b:8f:f4:7d:fc:73:8b:c9:30:
d2:f2:45:ab:5a:2f:42:d5:dc:7c:69:ea:4d:3d:89:6b:62:cc:
08:07:79:d8:05:ec:5f:88:49:f6:15:dd:35:22:38:2a:c8:84:
99:0e:d8:b9:dc:44:8f:92:7b:30:ca:3d:49:86:a4:2a:44:a8:
25:1d:57:1d:f9:d1:de:46:79:b4:a5:b2:f7:7a:95:77:de:4c:
97:73:51:b3:47:86:9a:02:6b:55:4e:f2:92:ad:62:57:89:a9:
59:fe:b1:71:1f:42:1f:0f:49:a9:e6:e2:ae:be:8d:6c:e1:0d:
06:5c:0e:7e:0d:b7:e8:ac:4b:31:fe:4f:8d:94:65:62:46:f0:
a4:85:23:72:05:50:74:9d:79:36:1b:cf:c4:e6:2e:0d:5b:62:
92:8b:25:fb:42:62:d9:55:1c:5c:36:25:62:5f:e3:92:d6:d6:
a8:10:a1:9e:0f:7d:b4:db:3d:ed:6f:e3:56:3e:42:ca:a2:71:
54:25:e4:18:bd:23:e0:5f:88:77:c4:80:c3:6b:5f:00:96:5a:
35:c6:e2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:02 2026 by rpki-client