Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
File: Szx5xlXI4rA6V-A78tED6BdUy-I.mft (raw, json)
Hash identifier: JzZiq3XtYEBkfHEVTfsu0u9Zv/5O2Jtqmv50F4+S09I=
Subject key identifier: 95:F8:A9:A1:7F:AD:23:38:04:73:F0:86:88:B2:91:20:AB:04:4F:26
Authority key identifier: 4B:3C:79:C6:55:C8:E2:B0:3A:57:E0:3B:F2:D1:03:E8:17:54:CB:E2
Certificate issuer: /CN=4b3c79c655c8e2b03a57e03bf2d103e81754cbe2
Certificate serial: 01A1A7B9130A62F109669C1A576771AEF6F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
Manifest number: 01B1
Signing time: Wed 04 Nov 2026 18:01:26 +0000
Manifest this update: Wed 04 Nov 2026 18:01:26 +0000
Manifest next update: Thu 05 Nov 2026 18:01:26 +0000
Files and hashes: 1: Szx5xlXI4rA6V-A78tED6BdUy-I.crl (hash: wsrdn8QYYsu9MVq2Pj0PJ1VBxZ6rqZGzQWSKtZki0gg=)
2: p29WWOqywdZEwcDbTEnqNVwGdsc.asa (hash: Sho+2gNqiG63dYui6BqvBHj91ltphciQPD5MNT7/8eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 18:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:b9:13:0a:62:f1:09:66:9c:1a:57:67:71:ae:f6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3c79c655c8e2b03a57e03bf2d103e81754cbe2
Validity
Not Before: Nov 4 18:01:26 2026 GMT
Not After : Nov 5 18:01:26 2026 GMT
Subject: CN=95f8a9a17fad23380473f08688b29120ab044f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:06:44:1f:05:9b:a1:e7:b2:bc:c7:a8:5e:
28:bc:23:99:94:92:b9:0d:84:57:5c:04:3a:25:78:
8e:1a:37:95:c3:f4:f8:a5:50:70:97:3c:9c:84:c8:
18:87:09:de:e6:ad:e8:91:c8:40:b1:6a:bc:8d:d7:
34:44:ae:72:dc:30:1d:e5:7a:a3:b4:be:84:4e:a3:
03:57:af:e7:c2:80:75:15:59:74:b1:ee:8d:b9:88:
c4:9f:3c:da:0e:22:50:30:2c:2d:28:ef:28:45:34:
a0:81:44:9b:97:f4:53:ed:c4:42:40:db:56:21:6d:
a4:d8:68:d7:e7:c4:e8:30:70:4b:2d:6d:a4:36:7b:
27:2a:81:1f:2d:5f:9d:bf:35:2d:7a:5c:64:bb:d8:
6b:b9:a1:f4:70:18:3c:de:72:1b:7a:4d:fc:83:3e:
aa:18:05:f1:1c:84:27:30:7b:e9:d7:90:2d:0d:e7:
d8:78:13:c8:2c:41:14:9f:f3:be:9d:ec:9b:f0:6b:
e3:e3:aa:da:c9:d6:79:9c:fd:4c:b1:d1:9c:ed:f7:
c8:b7:93:b5:fc:8e:32:ab:4a:79:69:55:cb:f5:db:
08:9e:8a:ab:06:c4:38:8b:47:72:a0:f3:2a:c4:37:
c5:62:d3:3c:cb:8f:c2:ef:5a:7a:54:d6:08:59:25:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F8:A9:A1:7F:AD:23:38:04:73:F0:86:88:B2:91:20:AB:04:4F:26
X509v3 Authority Key Identifier:
keyid:4B:3C:79:C6:55:C8:E2:B0:3A:57:E0:3B:F2:D1:03:E8:17:54:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f1:0e:6e:09:79:e4:01:45:83:4c:7d:08:24:cf:20:97:12:
a1:84:17:e2:15:33:b9:66:eb:9b:bd:1e:6b:c6:17:6d:a5:4a:
ab:2f:e0:b0:c0:e6:65:43:f5:cb:42:0e:4e:48:db:11:25:1f:
e0:86:f3:38:e8:68:9a:2b:8f:8c:fd:5a:2c:cd:e7:4b:93:2d:
24:97:07:10:37:c3:9d:d9:d7:17:3e:c6:00:87:1d:86:fa:13:
a6:0c:54:4a:87:8a:d3:0a:49:54:ea:3f:91:c7:15:ad:8c:df:
ea:ae:a2:63:0f:8b:70:82:0a:13:9b:29:ba:a5:f0:45:79:ea:
3e:97:99:8a:59:9a:f3:a1:81:dd:89:df:ac:c3:4b:a2:47:b8:
11:43:50:a0:c2:3a:e6:a4:b2:55:6a:49:3a:74:4f:a3:a0:aa:
ef:d4:e4:59:d7:94:f2:67:c2:27:6f:ff:7d:74:f7:5b:1b:41:
40:d9:c6:bc:cb:40:fe:3f:c1:5e:d8:95:64:2f:6f:2c:11:80:
48:1f:5d:fe:f6:61:79:e2:28:f3:1a:49:d6:4f:cb:ae:d3:26:
d0:f5:14:73:13:27:99:ef:11:b6:4d:80:a8:70:fe:84:3a:16:
93:d7:4a:8c:bb:3d:66:ac:78:8c:8f:1e:ab:49:74:2b:1a:10:
89:9b:22:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:03:19 2026 by rpki-client