Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
File: sgTq-NsT70M8-YIp0jLTMKX14lY.mft (raw, json)
Hash identifier: +XLa8FYBDf8JMNxodPdUHZ5NjQeQd4FewKlg1FxwjU0=
Subject key identifier: 95:98:46:B1:3F:EF:91:DE:3E:04:58:DE:B0:0A:15:C7:08:E9:2D:C8
Authority key identifier: B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
Certificate issuer: /CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Certificate serial: 019FA29753AEEAC9963A4B3006858511D161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 08:00:54 +0000
Manifest this update: Mon 27 Jul 2026 08:00:54 +0000
Manifest next update: Tue 28 Jul 2026 08:00:54 +0000
Files and hashes: 1: _7FUJXfD4Ngly6FguO7Icv3bnRs.roa (hash: uIw7fcvWe1lM1UlpZ2C4ZV/RLkNGSXf/iL61npEiJKw=)
2: sgTq-NsT70M8-YIp0jLTMKX14lY.crl (hash: 9iJIyVOPPuvTLZAJpRRmvdv9rO87L4JjBQ5XNTqJnYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:53:ae:ea:c9:96:3a:4b:30:06:85:85:11:d1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Validity
Not Before: Jul 27 08:00:54 2026 GMT
Not After : Jul 28 08:00:54 2026 GMT
Subject: CN=959846b13fef91de3e0458deb00a15c708e92dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:0f:b4:21:3b:9d:a7:c9:a0:68:50:7e:1d:
9d:21:f6:9d:cf:25:bc:a1:65:02:14:ec:8e:b8:ec:
3e:3e:ee:66:bc:0b:29:33:9d:9b:8f:96:34:54:4b:
27:7c:ab:92:55:e1:a7:3b:13:58:e0:d3:b4:9e:2c:
2a:90:2b:45:a6:96:5b:86:63:4f:74:d1:6c:63:9a:
f6:7c:8d:7f:a2:c5:af:85:fa:ff:4c:8c:c6:ba:49:
26:53:51:1e:b2:93:d2:4b:06:37:e3:e4:29:03:c7:
f5:77:32:68:4a:d3:52:5e:c4:91:d1:fd:0a:80:0a:
87:21:68:b5:cd:5e:a9:eb:ab:1c:13:ec:0b:97:4d:
a7:cc:e4:f2:3c:44:8c:15:ac:4e:e3:f4:31:5d:a2:
c7:1d:89:cc:e0:be:53:7e:75:0b:7e:e3:f5:4c:23:
f9:73:bf:36:d4:cf:55:c9:fb:83:2e:fa:61:fe:3e:
a7:f8:fb:e8:6b:04:72:9c:78:8a:02:eb:cc:ca:d8:
b0:13:c5:e7:8a:af:6a:5a:e6:ec:5a:e9:0c:d5:22:
bd:af:89:d5:16:aa:8e:54:0b:24:e8:12:71:b5:ba:
46:94:c3:dd:c9:68:bc:f6:e3:15:18:99:c9:8a:88:
77:b0:7a:54:68:f3:1c:55:f1:36:88:23:68:98:2b:
86:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:98:46:B1:3F:EF:91:DE:3E:04:58:DE:B0:0A:15:C7:08:E9:2D:C8
X509v3 Authority Key Identifier:
keyid:B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7b:3d:5b:0e:c0:9b:9a:48:dc:02:96:f4:0f:b9:59:d5:9e:
58:73:02:8a:95:c0:8b:df:48:15:27:ed:9d:69:94:c8:cb:85:
5a:4d:63:5e:bf:09:f2:9a:d6:9b:f7:6d:4d:9f:af:03:fa:22:
87:1c:e7:d8:bd:0e:0c:5a:8b:b6:7a:25:b8:a6:c3:72:ed:24:
0e:18:c9:c4:59:49:20:49:41:3b:ec:87:6d:62:76:58:d3:ad:
99:b9:5c:c8:4d:95:b5:44:8c:19:b6:70:77:db:3e:f9:44:75:
1f:53:83:bc:0d:82:84:f2:9d:a0:f4:bd:cc:93:37:42:11:d0:
72:70:ec:b1:79:30:41:af:7b:77:6e:f0:3b:e4:ac:bf:72:13:
ef:7e:70:6b:be:26:1c:48:ac:77:d9:6c:1f:4e:99:4b:2d:34:
44:0b:57:48:9c:e2:45:14:3d:b0:27:43:0f:4c:b5:6b:92:19:
fe:9e:b6:78:52:d5:65:48:45:1f:03:e2:29:c2:d6:ad:45:dd:
5d:a7:02:77:33:94:e1:76:2c:5b:76:8d:ed:32:e4:e0:f9:ce:
9e:df:92:37:96:22:d2:24:8e:a1:3b:87:fe:5b:92:a5:1c:05:
d9:f6:3e:68:b5:7f:b6:05:31:01:87:7f:f7:18:62:e6:c0:f3:
7c:42:bb:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+il1Ou6smWOkswBoWFEdFhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMDRlYWY4ZGIxM2VmNDMzY2Y5ODIyOWQyMzJkMzMwYTVm
NWUyNTYwHhcNMjYwNzI3MDgwMDU0WhcNMjYwNzI4MDgwMDU0WjAzMTEwLwYDVQQD
Eyg5NTk4NDZiMTNmZWY5MWRlM2UwNDU4ZGViMDBhMTVjNzA4ZTkyZGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBUPtCE7nafJoGhQfh2dIfadzyW8
oWUCFOyOuOw+Pu5mvAspM52bj5Y0VEsnfKuSVeGnOxNY4NO0niwqkCtFppZbhmNP
dNFsY5r2fI1/osWvhfr/TIzGukkmU1EespPSSwY34+QpA8f1dzJoStNSXsSR0f0K
gAqHIWi1zV6p66scE+wLl02nzOTyPESMFaxO4/QxXaLHHYnM4L5TfnULfuP1TCP5
c7821M9VyfuDLvph/j6n+PvoawRynHiKAuvMytiwE8Xniq9qWubsWukM1SK9r4nV
FqqOVAsk6BJxtbpGlMPdyWi89uMVGJnJioh3sHpUaPMcVfE2iCNomCuG7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWYRrE/75HePgRY3rAKFccI6S3IMB8GA1UdIwQY
MBaAFLIE6vjbE+9DPPmCKdIy0zCl9eJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2dUcS1Oc1Q3ME04LVlJcDBqTFRNS1gxNGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81OTc2MzgtNzEzYy00NGI3LTliNzAt
MjUwMTdlYzk0MDk1LzEvc2dUcS1Oc1Q3ME04LVlJcDBqTFRNS1gxNGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC81OTc2MzgtNzEzYy00NGI3LTliNzAtMjUwMTdlYzk0MDk1
LzEvc2dUcS1Oc1Q3ME04LVlJcDBqTFRNS1gxNGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3s9Ww7A
m5pI3AKW9A+5WdWeWHMCipXAi99IFSftnWmUyMuFWk1jXr8J8prWm/dtTZ+vA/oi
hxzn2L0ODFqLtnoluKbDcu0kDhjJxFlJIElBO+yHbWJ2WNOtmblcyE2VtUSMGbZw
d9s++UR1H1ODvA2ChPKdoPS9zJM3QhHQcnDssXkwQa97d27wO+Ssv3IT735wa74m
HEisd9lsH06ZSy00RAtXSJziRRQ9sCdDD0y1a5IZ/p62eFLVZUhFHwPiKcLWrUXd
XacCdzOU4XYsW3aN7TLk4PnOnt+SN5Yi0iSOoTuH/luSpRwF2fY+aLV/tgUxAYd/
9xhi5sDzfEK78g==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:46 2026 by rpki-client