Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
File: sgTq-NsT70M8-YIp0jLTMKX14lY.mft (raw, json)
Hash identifier: yofa8nY3dcRSoFOVlfiLtfaFzYn3yxO2JYhtHuBQebE=
Subject key identifier: 8F:7B:6A:D7:D6:21:92:C2:CB:79:86:D5:9E:AF:9F:91:86:2A:9E:39
Authority key identifier: B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
Certificate issuer: /CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Certificate serial: 019FA0A908C4CB04566D7604E6CAE572A4FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
Manifest number: 19CF
Signing time: Sun 26 Jul 2026 23:00:59 +0000
Manifest this update: Sun 26 Jul 2026 23:00:59 +0000
Manifest next update: Mon 27 Jul 2026 23:00:59 +0000
Files and hashes: 1: _7FUJXfD4Ngly6FguO7Icv3bnRs.roa (hash: uIw7fcvWe1lM1UlpZ2C4ZV/RLkNGSXf/iL61npEiJKw=)
2: sgTq-NsT70M8-YIp0jLTMKX14lY.crl (hash: lvmgxcfIQuAFxIG+J2HG1QKK8DfZWJnTrzibuYmg38c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a9:08:c4:cb:04:56:6d:76:04:e6:ca:e5:72:a4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Validity
Not Before: Jul 26 23:00:59 2026 GMT
Not After : Jul 27 23:00:59 2026 GMT
Subject: CN=8f7b6ad7d62192c2cb7986d59eaf9f91862a9e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6f:c5:a2:55:6a:6f:08:4f:05:1f:44:35:a4:
69:59:a8:9a:2d:76:36:42:95:44:27:5d:29:c9:83:
c9:c5:24:d0:a2:44:90:30:2d:0b:c4:67:31:dd:81:
e5:f0:46:a1:70:9e:a2:47:cf:05:09:58:83:48:f5:
2f:ae:6b:cd:77:71:0f:49:65:de:63:61:9e:25:03:
52:7b:3f:db:cd:bd:ed:37:e4:97:da:af:c7:52:5c:
00:e6:19:2a:7c:2a:85:79:77:98:06:a4:3d:67:35:
2d:d2:0f:98:fd:b3:87:e6:21:78:2c:83:84:f0:82:
3f:82:bf:07:24:7a:a8:84:3e:31:75:79:9e:3b:42:
37:92:07:53:13:9a:78:00:2f:a0:89:38:ad:e4:35:
b4:b6:56:9d:e9:bc:4d:49:67:22:2e:fe:6e:02:9f:
c1:8c:04:1c:c7:3b:6d:bd:3a:19:23:f3:00:12:87:
a7:e2:78:c9:a1:3d:94:f4:50:15:a5:e2:61:b4:16:
c6:fb:89:61:4d:b5:8f:f6:d8:7f:5f:b0:fa:4b:29:
39:e2:b3:89:e3:7d:c7:b8:7e:d1:9b:22:d9:a6:8b:
74:b4:d2:f9:7c:f7:eb:97:df:6d:6f:98:e4:f9:67:
50:b8:0b:36:1f:b7:8b:a2:fa:36:98:b3:3f:a1:c8:
e8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7B:6A:D7:D6:21:92:C2:CB:79:86:D5:9E:AF:9F:91:86:2A:9E:39
X509v3 Authority Key Identifier:
keyid:B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5d:a3:bc:aa:e6:9a:08:38:09:8a:8b:47:38:5d:40:3c:be:
cd:58:49:6b:ed:bc:df:33:66:e0:e4:a4:aa:12:ba:cb:7f:86:
04:c3:4d:7b:ff:98:b5:7d:ef:67:26:67:1f:96:44:1e:31:5c:
5e:8f:71:b5:c0:9e:c1:1f:f8:67:58:30:91:cd:c7:2e:eb:34:
4e:08:5f:63:a6:1a:af:57:13:a4:39:0c:43:e1:b8:52:a0:77:
6a:03:8e:34:1f:9f:c2:2c:b8:d4:65:a3:3a:79:75:be:5d:1d:
24:ec:06:8e:ff:33:1f:82:ec:a7:26:13:4e:db:3b:ac:ed:5d:
a6:ac:c1:2b:25:e3:49:c2:2a:64:d8:f0:23:2a:fd:18:71:90:
f3:40:c5:09:fd:08:0a:77:b2:f6:3d:91:48:71:7b:9f:ac:50:
b5:33:09:8d:1b:62:c1:cc:d0:17:01:c0:98:4b:d1:14:fc:a9:
bb:b7:ae:d7:51:c3:10:af:90:b5:45:e0:e1:31:d3:3e:0f:6a:
d2:8b:c0:25:2d:8f:5b:a0:96:e0:3d:21:08:9b:86:c0:7d:0c:
2b:d0:84:06:78:7f:a7:32:ae:dd:30:c0:08:23:ec:fd:06:85:
78:05:c9:94:37:2b:33:69:a4:92:04:ec:e7:79:ad:c5:98:af:
a7:26:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:31:40 2026 by rpki-client