Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
File: sgTq-NsT70M8-YIp0jLTMKX14lY.mft (raw, json)
Hash identifier: +M/TICCpOmmGhgLx89TjbzaydornJybMD7iI6XpnpOQ=
Subject key identifier: AA:14:2D:30:F8:A0:F9:F1:39:5E:D2:D5:A7:69:10:F0:2E:45:0E:8F
Authority key identifier: B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
Certificate issuer: /CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Certificate serial: 01A17BBB030DA1F49F1154CF0347A3D507BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 05:00:15 +0000
Manifest this update: Tue 27 Oct 2026 05:00:15 +0000
Manifest next update: Wed 28 Oct 2026 05:00:15 +0000
Files and hashes: 1: _7FUJXfD4Ngly6FguO7Icv3bnRs.roa (hash: uIw7fcvWe1lM1UlpZ2C4ZV/RLkNGSXf/iL61npEiJKw=)
2: sgTq-NsT70M8-YIp0jLTMKX14lY.crl (hash: /YnQEdiDhXrTeaQxmx7VR+sRB9IXj7u1wUaYt4R+m+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:03:0d:a1:f4:9f:11:54:cf:03:47:a3:d5:07:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Validity
Not Before: Oct 27 05:00:15 2026 GMT
Not After : Oct 28 05:00:15 2026 GMT
Subject: CN=aa142d30f8a0f9f1395ed2d5a76910f02e450e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:43:ac:f3:78:75:15:26:89:80:43:f2:b9:20:
5c:cd:a9:e0:e4:e0:4d:7d:f5:cc:06:e4:b5:a8:43:
75:bb:45:67:60:bd:30:91:43:a3:82:38:0d:1b:7f:
18:19:3a:f6:1d:1f:e4:09:d0:da:4d:8f:7e:59:51:
5c:a6:59:08:e9:01:0d:37:8a:f5:15:3f:a5:9f:f2:
5d:4c:e2:a2:d1:f5:32:4a:e3:8c:db:42:b1:1f:f8:
e5:1e:a4:54:ab:25:e4:99:97:84:58:1f:15:ae:79:
7e:ad:8d:79:1b:34:1f:eb:14:4e:0a:7d:be:f7:98:
49:a1:a9:3d:f3:ba:8d:d3:ea:e1:99:d5:f8:a6:b8:
e5:36:b0:d2:9c:be:77:68:9c:5c:ef:b1:15:0e:78:
38:33:13:dc:26:68:97:41:6c:1b:31:f4:13:9e:6d:
1f:46:49:e9:28:06:df:18:d0:58:3a:7b:b1:94:6b:
fd:91:b7:7c:2e:96:31:90:3f:0d:3f:b3:d2:09:59:
36:12:65:00:c2:fe:5d:89:0a:84:fb:c0:12:3f:80:
75:df:d1:1d:01:bf:cb:ec:5e:b4:46:6f:33:1e:3d:
a1:72:75:4a:5e:d1:53:5f:ca:08:ab:75:11:61:97:
35:ee:0f:f8:15:c1:23:7c:06:ae:90:64:b5:e2:ee:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:14:2D:30:F8:A0:F9:F1:39:5E:D2:D5:A7:69:10:F0:2E:45:0E:8F
X509v3 Authority Key Identifier:
keyid:B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:cf:cf:b9:c0:ff:b0:43:90:19:c4:57:30:04:46:ac:63:ae:
41:f3:58:f6:3f:b9:42:d8:e9:f2:60:f5:30:e6:65:cb:d0:0e:
5b:38:34:62:1f:14:88:64:be:ad:ad:6b:1f:b2:61:a3:e3:54:
8d:13:3e:e4:93:9c:6d:48:cf:37:49:03:d4:99:14:5c:dc:9c:
1c:57:71:89:a5:d0:38:82:14:c0:1d:59:0f:bd:76:ad:5b:5b:
ec:1a:f7:1e:60:76:65:f9:27:95:46:c0:68:b9:d8:8e:06:37:
7a:b4:53:94:5c:3f:de:05:1a:84:c3:a7:b3:83:97:d6:c9:37:
ef:eb:7e:9b:18:4d:59:63:b5:af:5c:33:73:c2:9c:a4:f6:56:
08:3d:44:7d:4d:76:89:32:c6:ee:f5:bc:5e:87:6f:ae:ce:ff:
1e:0a:91:08:fc:dc:87:b5:19:50:d1:a1:21:03:45:95:88:7c:
c8:35:95:4b:d9:54:3a:36:09:ea:64:fa:28:6a:47:d5:28:00:
e8:72:cd:65:fc:22:a5:ae:2c:13:c6:16:7d:14:91:45:b3:95:
80:3b:e5:bb:5c:fb:94:28:4c:d4:b4:c9:86:9f:04:90:b5:e5:
5c:95:49:e6:63:00:f7:da:39:4f:71:8c:30:34:45:5d:80:d2:
b7:7e:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:33:01 2026 by rpki-client