Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
File: SGeaItDbyYDV1ZszNnn5ObmuPyU.mft (raw, json)
Hash identifier: 5TbpJE2DT64CjvGx7Yo7K14wT7+3nCAjOJCrFgoG05w=
Subject key identifier: 40:96:41:3B:78:6E:24:0D:C5:D9:EE:DE:9E:2D:F0:2E:59:FC:C3:06
Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Certificate serial: 01A0F30C9456D66464D620AC5ABBD6752452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
Manifest number: 1A80
Signing time: Wed 30 Sep 2026 16:01:22 +0000
Manifest this update: Wed 30 Sep 2026 16:01:22 +0000
Manifest next update: Thu 01 Oct 2026 16:01:22 +0000
Files and hashes: 1: Cb3GNV7sEZagImQ0z2CzEtPQStc.roa (hash: WKt5YxPaUYaqlF+1A2ePA/t2PiJgruaRiTwSTzv9PKY=)
2: QgUGh2GJ1-JelSbN4pH0Q_1IOrw.asa (hash: JDQrvbF/UTSyK+KaVQFzmDlvQmxRQg7cAs9vDLu048g=)
3: SGeaItDbyYDV1ZszNnn5ObmuPyU.crl (hash: zMu1fQgbEfDMi19YasEd8GmlHCA/1B0FG/Q+5mok4kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:0c:94:56:d6:64:64:d6:20:ac:5a:bb:d6:75:24:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Validity
Not Before: Sep 30 16:01:22 2026 GMT
Not After : Oct 1 16:01:22 2026 GMT
Subject: CN=4096413b786e240dc5d9eede9e2df02e59fcc306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:18:1f:9f:2a:4b:e4:d7:d5:5f:a1:ee:61:
bf:3d:94:df:e0:2d:3f:a7:ec:eb:9a:b1:55:c3:34:
9d:29:53:eb:d8:33:a8:50:34:95:fd:66:98:70:dd:
30:fb:de:56:f6:c9:3e:51:c5:44:10:ba:b8:e2:d8:
7e:fe:63:7a:6a:63:0a:3a:6b:d5:57:df:1a:65:54:
c0:17:d8:cc:40:ab:95:f3:aa:ee:e2:e7:05:f0:03:
8f:3a:25:39:44:78:ae:08:3e:2c:53:3c:a1:c3:61:
c4:93:17:6d:84:7b:d0:e1:02:24:e2:82:b1:3b:bb:
a6:e8:88:7d:d0:d4:ad:58:91:2d:5b:ee:56:18:4d:
a2:ce:d2:02:a8:d6:2d:2d:94:4e:5d:4f:0c:87:ed:
f6:01:84:3d:cb:7b:9b:6c:0d:31:ed:01:92:c7:73:
40:20:60:1f:1e:59:7b:6a:dc:2e:a6:d3:1b:bb:60:
99:1b:ec:8b:00:59:40:a7:86:4c:23:e8:84:81:76:
e5:ed:41:7b:df:7e:9d:5b:bd:7b:94:f0:cb:2b:79:
7a:1e:bc:26:d4:3f:d8:ed:a4:2a:cf:1e:0b:89:cf:
12:57:76:3a:59:ca:c4:2a:15:26:08:9f:97:92:c3:
e3:6e:37:47:c3:d4:77:07:dd:df:28:70:68:8a:de:
97:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:96:41:3B:78:6E:24:0D:C5:D9:EE:DE:9E:2D:F0:2E:59:FC:C3:06
X509v3 Authority Key Identifier:
keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a4:6c:5f:95:9b:98:6b:af:0e:63:8e:cd:95:18:6a:b4:80:
f6:ce:05:ba:c4:f1:11:32:32:7c:d5:31:1f:bf:8b:38:3b:0a:
75:7a:75:9c:f2:ab:e8:3f:0a:d5:0d:fc:b3:4c:f1:55:35:4b:
e2:de:01:4d:07:13:b9:5d:9e:2c:dd:cc:95:b2:30:b9:ae:7d:
a9:79:e7:7c:1f:85:34:f4:cf:5c:34:9d:dc:f2:28:2c:ca:a8:
9d:93:33:3d:07:68:8e:b5:c0:e9:cc:fd:91:15:ee:37:d1:68:
8f:c1:ac:57:8f:11:38:48:0a:be:2a:49:5f:be:11:0f:6e:8c:
70:54:88:80:ae:68:ed:b7:2b:5d:00:c7:5d:23:83:34:25:54:
7c:aa:f6:3d:d3:e2:c6:f6:2b:f4:80:f7:5a:fb:1a:d8:67:8a:
b2:de:4d:b4:c4:b0:c4:4c:f6:d4:85:9c:e1:28:68:57:e9:37:
70:89:16:fa:00:56:17:28:e5:11:9c:17:a3:57:81:df:78:5c:
bf:66:89:d7:24:c0:c7:8e:09:e2:ed:b9:ce:e6:8d:57:fa:76:
33:df:fe:59:62:66:0e:a8:63:ac:d6:91:80:d5:d0:5e:3c:72:
e0:89:9d:9d:96:d5:7e:e1:2e:06:17:02:b3:ed:6e:eb:8e:5b:
5b:ea:48:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:07:10 2026 by rpki-client