Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
File: sgTq-NsT70M8-YIp0jLTMKX14lY.mft (raw, json)
Hash identifier: O5yrWGDn+4kB7PE+rGW+LHapFOIWV6bFiSqgHLht9IM=
Subject key identifier: 1B:12:B3:B3:21:50:EB:1C:59:F5:09:BB:54:D5:68:A6:F9:BA:47:7B
Authority key identifier: B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
Certificate issuer: /CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Certificate serial: 01A17DAA087621A077B995821997F4E72C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 14:00:57 +0000
Manifest this update: Tue 27 Oct 2026 14:00:57 +0000
Manifest next update: Wed 28 Oct 2026 14:00:57 +0000
Files and hashes: 1: _7FUJXfD4Ngly6FguO7Icv3bnRs.roa (hash: uIw7fcvWe1lM1UlpZ2C4ZV/RLkNGSXf/iL61npEiJKw=)
2: sgTq-NsT70M8-YIp0jLTMKX14lY.crl (hash: 8wwyDrsya/v7F20Hl89JoyY3buN9WzIC/yH7Nqgjdlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:08:76:21:a0:77:b9:95:82:19:97:f4:e7:2c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Validity
Not Before: Oct 27 14:00:57 2026 GMT
Not After : Oct 28 14:00:57 2026 GMT
Subject: CN=1b12b3b32150eb1c59f509bb54d568a6f9ba477b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:d6:4c:14:09:f9:d2:b9:57:03:47:18:a8:
b0:5b:fc:8f:ba:af:a8:ac:a8:b1:2e:2d:c3:8a:30:
97:59:f7:a6:cf:ed:50:ee:e6:78:36:06:d7:16:c1:
94:c7:0e:3c:f9:41:63:6f:d8:ff:83:60:36:dd:68:
89:87:d0:2c:df:aa:0d:7f:0e:f6:18:33:51:64:d8:
10:9b:74:86:50:a6:d3:25:8f:0a:67:3b:71:20:90:
6f:83:1a:96:d6:99:13:b6:b0:76:c6:33:a4:ab:ba:
c9:42:2b:4b:a9:36:50:ba:3a:d9:1b:e7:43:db:83:
dc:f2:35:e0:a3:6b:a4:15:b2:35:71:e8:21:b5:51:
41:86:ad:21:bf:6c:f3:33:c0:84:90:c5:06:a4:ae:
14:6b:99:77:07:02:b2:46:ad:9c:46:6f:06:30:89:
7d:37:68:27:39:c2:fc:33:9c:95:77:85:3e:28:71:
c3:5e:ed:b4:56:77:c0:eb:79:3a:af:95:4d:69:bd:
e2:a3:d5:d2:b8:ce:c0:56:5f:1e:9c:0c:b4:78:e8:
ba:b9:c8:59:7c:f2:30:11:81:a2:7b:05:a4:38:83:
25:62:56:15:83:10:5f:44:e0:d2:ab:ca:0c:db:b8:
1b:e1:05:10:be:62:8f:f2:96:a0:e5:7a:74:87:25:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:12:B3:B3:21:50:EB:1C:59:F5:09:BB:54:D5:68:A6:F9:BA:47:7B
X509v3 Authority Key Identifier:
keyid:B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3e:38:fd:dc:30:0f:1c:ff:02:70:3a:d1:60:b3:4d:8f:d8:
8b:15:4a:7d:5c:4d:fe:ce:5e:03:1c:90:c5:73:0b:ce:d2:51:
e4:27:0a:30:92:2b:87:e6:c0:9a:b0:62:ea:d5:97:27:13:e7:
9e:be:d2:a0:2d:3a:db:fd:1a:07:f8:66:6d:57:5e:86:d0:79:
f1:58:06:a0:41:f7:99:70:4d:d9:14:e0:cc:d3:07:1c:f6:91:
81:6d:06:86:29:9e:94:6d:17:3c:ff:7b:8a:df:24:ca:1a:88:
98:db:1e:98:cb:70:cc:9c:81:2c:ee:b6:bd:46:31:1b:a2:28:
01:95:b7:c4:06:ee:78:92:70:06:2b:e1:f6:af:1e:39:86:20:
ac:30:c8:ba:71:1d:d6:65:f1:c1:16:5b:df:59:58:17:60:17:
9e:f1:0a:07:87:86:2f:4c:7d:e6:49:0c:a8:05:21:c2:9d:d0:
de:a7:97:c2:83:d9:33:f2:bf:39:dd:06:ee:d9:ba:32:80:e1:
12:a7:ad:75:19:fa:f0:c8:67:0c:82:4a:d7:55:a7:0f:aa:15:
b6:bf:2c:d1:ca:26:06:b6:e2:ee:ff:55:d6:a5:4e:09:4d:31:
0b:f9:50:eb:c7:aa:50:44:23:73:71:2b:3d:33:f1:ba:d0:fc:
f4:6c:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:02:47 2026 by rpki-client