Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
File: sgTq-NsT70M8-YIp0jLTMKX14lY.mft (raw, json)
Hash identifier: 8+F0a/DnfLfSprQUo25FUSJAIMMVVD/pFM5G7yU4XMw=
Subject key identifier: 59:9D:D5:18:89:39:02:DE:94:74:B7:7C:71:BD:D1:E6:61:AA:8B:A1
Authority key identifier: B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
Certificate issuer: /CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Certificate serial: 01A08A5578233DF089D7D6DCC8FE48B56524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 08:00:52 +0000
Manifest this update: Thu 10 Sep 2026 08:00:52 +0000
Manifest next update: Fri 11 Sep 2026 08:00:52 +0000
Files and hashes: 1: _7FUJXfD4Ngly6FguO7Icv3bnRs.roa (hash: uIw7fcvWe1lM1UlpZ2C4ZV/RLkNGSXf/iL61npEiJKw=)
2: sgTq-NsT70M8-YIp0jLTMKX14lY.crl (hash: Or/q3TnhKlMMZHVJcJmPCZLRhwEvKJyLCsr8IzUnVNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:78:23:3d:f0:89:d7:d6:dc:c8:fe:48:b5:65:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Validity
Not Before: Sep 10 08:00:52 2026 GMT
Not After : Sep 11 08:00:52 2026 GMT
Subject: CN=599dd518893902de9474b77c71bdd1e661aa8ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:97:03:5e:c3:b1:77:38:05:4b:5f:e7:b1:
c0:1e:b8:27:d4:16:a5:36:1d:64:d7:00:d8:e7:14:
6d:90:e5:8d:a2:d7:75:e4:95:ab:0a:1b:a3:77:60:
26:36:be:45:4b:de:3e:09:49:6c:a5:75:e2:07:10:
07:e2:33:55:a0:87:3c:40:34:d1:ed:4c:13:6e:90:
c6:51:c8:2f:7c:4b:c7:e9:30:e2:cb:d1:5d:a9:1c:
cb:e3:3e:0f:55:38:08:23:2e:90:4a:40:80:8d:92:
7a:39:c8:03:2b:a4:2e:56:75:9c:38:e7:b6:7b:2c:
c3:80:ff:f9:aa:df:75:f8:c0:73:48:76:70:22:f5:
29:31:3a:68:f1:ea:dc:aa:73:c6:c6:c6:fe:c8:f5:
51:0b:ab:59:70:14:1e:06:15:c2:2d:86:b3:c1:66:
bd:3c:bf:e2:89:7d:9c:2f:e0:db:81:f2:ef:96:3f:
38:e2:1b:7d:f6:48:b3:d1:8b:00:1f:ed:28:89:bf:
15:7d:73:95:c3:40:43:3c:3f:59:65:87:71:08:1b:
20:ac:a3:d9:f3:91:a6:46:e8:c1:04:a4:ca:c4:d5:
3d:ef:f0:69:fc:40:e4:48:3b:14:95:3e:b1:b5:40:
bf:2d:30:36:31:01:22:42:11:f7:96:2f:2a:33:0b:
b7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9D:D5:18:89:39:02:DE:94:74:B7:7C:71:BD:D1:E6:61:AA:8B:A1
X509v3 Authority Key Identifier:
keyid:B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:34:c6:38:d4:f6:dd:bc:c1:c5:7b:1f:38:5d:35:04:1b:a0:
a7:d9:70:96:db:37:12:f6:21:01:84:72:10:95:a8:0e:b1:c5:
91:ab:09:3d:7b:60:2e:69:dd:21:bb:d0:07:ba:82:81:8a:f5:
0b:bc:01:dc:b1:29:e0:c1:76:44:ad:86:3c:58:77:b2:ba:88:
24:bd:96:49:96:b3:1e:0c:fc:ba:a7:7a:7e:12:f6:f7:d0:cd:
dc:30:b7:e7:d3:90:c6:cb:4c:10:05:23:84:d5:c8:cd:09:f7:
c2:94:35:17:05:a5:eb:06:9c:57:06:54:f6:08:9d:cd:2c:17:
da:ef:70:9c:d6:23:da:7e:b4:97:45:f6:92:c5:bc:4e:4f:0c:
79:2c:84:21:f7:be:fa:7e:f4:ad:a8:f1:76:5f:e1:c0:be:40:
e9:db:01:91:3b:29:4a:b8:11:c0:c9:1c:2a:38:5e:a6:a0:a6:
d7:08:a9:c7:cc:d6:3f:21:57:e4:bc:d5:e7:ac:b6:63:0c:81:
16:07:23:93:ec:0c:32:f0:c4:8e:e4:5f:7d:d2:c8:07:a3:30:
a9:b3:99:97:cf:0e:07:cb:82:4c:ea:1f:fd:a8:ac:e6:2d:25:
9b:57:dd:67:f5:29:45:5c:33:33:74:9b:09:06:39:f4:ad:06:
1c:56:27:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:54:14 2026 by rpki-client