Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json)
Hash identifier: bvzxs8ZUC7u8AM3lsfguGRMxHKwI/2melojgYVrRm6I=
Subject key identifier: E4:1C:DF:41:64:28:39:42:A8:42:0E:89:03:DD:8C:99:E4:3E:87:74
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 01A0E7405ABB3F9162A2AD0765D5C35D0F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
Manifest number: 0AB5
Signing time: Mon 28 Sep 2026 09:02:29 +0000
Manifest this update: Mon 28 Sep 2026 09:02:29 +0000
Manifest next update: Tue 29 Sep 2026 09:02:29 +0000
Files and hashes: 1: NwezYN_SSVVpS4ySwEt_yFRi-PQ.asa (hash: 6ugYz31WQf5MvMC/gtFmfZIhbfo2pPGMfKiHyLgTL0c=)
2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: SdycL16giM9RizQyV8be0WXuFVjFFcFiMLby3tVVaSI=)
3: vjQq9UampGvBxWRw_V3sL7pHCyY.roa (hash: TlwNEPo1u7VkHjLKctu36XpzTUSwJOLmKhGzSZcego4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:40:5a:bb:3f:91:62:a2:ad:07:65:d5:c3:5d:0f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: Sep 28 09:02:29 2026 GMT
Not After : Sep 29 09:02:29 2026 GMT
Subject: CN=e41cdf4164283942a8420e8903dd8c99e43e8774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:4f:9a:1c:27:a9:49:da:74:2b:50:0b:52:
3f:8f:10:fb:cc:45:85:d9:3c:75:b8:96:d3:c4:32:
19:74:e0:58:0e:4b:48:4f:fb:64:6e:84:a4:4c:c6:
a5:91:9e:c2:66:2c:e5:ad:19:f4:45:77:6e:25:e9:
e9:63:87:27:69:b8:c6:0b:14:85:1d:f7:6c:7d:23:
79:f6:23:50:3d:b4:29:f2:c9:6c:bf:db:95:e1:2b:
8b:08:45:c1:67:62:eb:0e:fc:52:b0:a3:29:4e:70:
3d:9f:bf:80:6f:1f:c3:51:46:11:1c:df:e7:95:17:
a3:68:3f:41:ac:21:18:a4:e5:a8:5f:f5:aa:a0:3e:
8e:ca:fc:9d:1b:a3:f3:b5:cd:7b:66:fe:59:ae:cd:
49:a2:54:4b:fb:f1:43:54:fa:05:dd:24:91:16:fe:
cd:79:b4:30:a9:dc:6b:69:10:96:12:ce:d8:d9:b5:
13:49:38:ee:56:31:b1:40:25:33:13:3f:5e:41:e5:
8b:b0:f8:f3:eb:51:90:d3:96:5f:46:64:d4:63:5b:
e9:43:b6:29:57:20:95:7e:11:af:b2:a4:ad:69:b5:
fb:54:ae:1f:72:89:e5:02:1e:4e:9f:87:ec:09:2e:
8b:24:74:ed:b0:95:7b:2e:64:c0:72:de:fe:4b:96:
9a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1C:DF:41:64:28:39:42:A8:42:0E:89:03:DD:8C:99:E4:3E:87:74
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c4:fa:5d:64:34:e7:2e:31:d6:ea:9a:35:3c:93:53:13:9a:
16:8e:87:3d:16:22:f9:48:91:bb:2c:83:1f:24:08:34:55:d6:
45:29:43:7a:52:f6:e6:1e:ee:0b:6e:4b:62:2e:32:8c:27:a3:
cf:c9:b5:1c:ca:5a:21:89:a1:4f:85:b5:8a:92:92:53:04:d6:
93:f3:60:e5:ee:54:02:cd:c5:3c:35:d3:a7:02:50:72:5a:23:
78:fe:3b:55:5b:28:9c:04:c0:ae:a3:d5:48:42:a7:d1:69:64:
6c:5a:21:19:3e:1e:60:1b:99:14:c4:3d:2f:5c:ac:52:56:11:
57:7d:b9:b8:1b:48:48:24:8d:65:ed:4a:e5:b4:7b:ad:21:7a:
2f:62:e9:d2:b3:86:ce:c4:f0:48:8c:ed:ce:2e:c2:ac:96:72:
9b:0a:50:1a:95:31:94:88:7d:0f:0c:3c:05:0d:f4:8f:b3:f2:
da:c4:56:34:c4:f3:6f:37:af:94:9a:74:ca:38:ab:25:63:59:
9d:a2:92:d4:8f:42:8c:5e:1e:93:d5:b8:4e:57:6f:aa:ae:b4:
ba:75:80:3f:26:c4:ce:65:1b:a4:6f:7e:f9:32:0f:c9:80:5d:
53:96:47:fb:1b:b0:67:e7:e8:e3:3d:66:8c:5c:78:33:e8:24:
8c:e9:3e:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnQFq7P5Fioq0HZdXDXQ8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZDgwMjY2Nzk4MDk0NGRmNGRhMmFiNGIwOGU5ZDM0YjIw
YThkMTEwHhcNMjYwOTI4MDkwMjI5WhcNMjYwOTI5MDkwMjI5WjAzMTEwLwYDVQQD
EyhlNDFjZGY0MTY0MjgzOTQyYTg0MjBlODkwM2RkOGM5OWU0M2U4Nzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndJPmhwnqUnadCtQC1I/jxD7zEWF
2Tx1uJbTxDIZdOBYDktIT/tkboSkTMalkZ7CZizlrRn0RXduJenpY4cnabjGCxSF
HfdsfSN59iNQPbQp8slsv9uV4SuLCEXBZ2LrDvxSsKMpTnA9n7+Abx/DUUYRHN/n
lRejaD9BrCEYpOWoX/WqoD6OyvydG6Pztc17Zv5Zrs1JolRL+/FDVPoF3SSRFv7N
ebQwqdxraRCWEs7Y2bUTSTjuVjGxQCUzEz9eQeWLsPjz61GQ05ZfRmTUY1vpQ7Yp
VyCVfhGvsqStabX7VK4fconlAh5On4fsCS6LJHTtsJV7LmTAct7+S5aaEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQc30FkKDlCqEIOiQPdjJnkPod0MB8GA1UdIwQY
MBaAFLHYAmZ5gJRN9NoqtLCOnTSyCo0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQt
Y2JlYzQzZmQ5MmExLzEvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQtY2JlYzQzZmQ5MmEx
LzEvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMT6XWQ0
5y4x1uqaNTyTUxOaFo6HPRYi+UiRuyyDHyQINFXWRSlDelL25h7uC25LYi4yjCej
z8m1HMpaIYmhT4W1ipKSUwTWk/Ng5e5UAs3FPDXTpwJQclojeP47VVsonATArqPV
SEKn0WlkbFohGT4eYBuZFMQ9L1ysUlYRV325uBtISCSNZe1K5bR7rSF6L2Lp0rOG
zsTwSIztzi7CrJZymwpQGpUxlIh9Dww8BQ30j7Py2sRWNMTzbzevlJp0yjirJWNZ
naKS1I9CjF4ek9W4Tldvqq60unWAPybEzmUbpG9++TIPyYBdU5ZH+xuwZ+fo4z1m
jFx4M+gkjOk+hA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 17:51:30 2026 by rpki-client