Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
File: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft (raw, json)
Hash identifier: yJ2o6AW1ghgCvakerKxSILEdxofOuYKkVZFtbWUPDOk=
Subject key identifier: 18:BA:1F:5B:25:AD:71:92:7C:A2:BA:E3:6B:6B:56:A5:86:02:40:6E
Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
Certificate issuer: /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Certificate serial: 019D3909B47EA228A0C73ADB00D15C576D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
Manifest number: 054A
Signing time: Sun 29 Mar 2026 10:00:30 +0000
Manifest this update: Sun 29 Mar 2026 10:00:30 +0000
Manifest next update: Mon 30 Mar 2026 10:00:30 +0000
Files and hashes: 1: LZgnWlWrjTCukxd_XCJP8Vtjqkk.roa (hash: rbZKiC7VxvRdtB9FGEjRH+5pWBKmKmF8M+8quOww67M=)
2: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl (hash: i0tBFv0OhHPhXy34tiuDyILLSZ0O/b/XmyPIpXZ8vrM=)
3: h9b4JeNT7A8pWHM8uaXkZ3HWW2c.roa (hash: 8n1s/5mgSp5GN9ljUgJO+fSaluuMo/7ZenBSfeNwrrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b4:7e:a2:28:a0:c7:3a:db:00:d1:5c:57:6d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Validity
Not Before: Mar 29 10:00:30 2026 GMT
Not After : Mar 30 10:00:30 2026 GMT
Subject: CN=18ba1f5b25ad71927ca2bae36b6b56a58602406e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:c7:89:0e:56:ee:83:ae:d9:6e:57:6d:f7:
ae:92:f5:16:21:0e:ed:5b:7e:21:9f:9f:f8:9b:57:
e0:f2:f1:de:8e:cc:85:0a:ec:9c:8e:e5:1d:66:fd:
f6:fc:96:48:6b:22:06:8a:8c:23:20:f1:ba:55:6e:
bd:4c:01:71:16:39:eb:49:06:50:8f:95:cb:32:dc:
55:d4:05:e8:5c:06:bb:d1:85:18:16:70:86:9d:a5:
b4:05:46:e5:29:7f:29:7d:8a:2f:5b:b9:16:92:52:
bc:b4:68:78:3a:de:7a:01:da:79:62:f7:f2:ea:da:
bd:71:52:de:72:76:98:a7:2a:48:34:70:ac:ea:a7:
de:9c:ad:6e:94:50:be:1d:f3:ae:0d:43:6e:16:fa:
f5:a2:9a:60:5f:d9:5e:93:71:aa:ee:d6:0d:7c:af:
49:06:4b:91:84:22:d1:85:df:67:c1:cf:ab:22:4e:
5c:cd:42:81:b8:e7:e3:5e:b7:a4:9a:27:53:83:ca:
7b:1f:ff:15:79:55:93:91:ca:a5:d2:fd:e5:d5:3c:
b7:5e:21:df:0d:c1:0f:db:46:8a:cf:f6:4b:7b:ed:
e1:9a:aa:53:ba:83:ae:c1:b6:7f:36:99:3d:6f:f5:
11:b2:a2:3a:1a:6f:11:c8:fc:b1:e1:18:12:f6:c2:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BA:1F:5B:25:AD:71:92:7C:A2:BA:E3:6B:6B:56:A5:86:02:40:6E
X509v3 Authority Key Identifier:
keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1f:d3:6c:19:7e:da:65:5c:98:5b:7d:4b:39:3c:4c:46:ca:
56:dc:42:0c:53:f1:60:1a:60:a1:83:46:6d:77:cf:ed:69:44:
61:66:f6:f0:cf:e0:57:23:fa:c4:f0:31:91:ba:cc:be:47:7c:
ba:b8:ea:da:2f:b1:cc:9d:fd:f9:3e:71:c3:e7:77:79:1c:3f:
51:7b:1c:e1:16:5c:2d:70:5c:35:fc:35:4e:0a:db:6b:c5:c6:
df:0d:5b:99:ab:e6:31:25:1e:79:dd:54:5f:8d:48:54:f4:8e:
e8:3e:d7:19:da:51:bc:fa:7b:d2:00:e8:02:7d:66:95:af:3d:
34:dd:45:ce:74:b2:02:ce:41:7f:b1:00:ec:c6:bd:62:c4:31:
71:5e:d3:4f:5f:2b:28:84:f9:62:ef:f4:4d:3f:fd:dd:8e:4c:
20:3a:c1:75:57:27:1f:45:49:c0:a5:c5:05:29:b9:eb:85:6f:
56:99:90:91:7c:48:61:25:a6:39:55:ef:f0:37:96:6d:3c:3e:
b6:b7:a9:73:9f:5e:e8:56:9e:1f:39:a8:11:a4:f5:a9:50:82:
20:ac:82:a0:4d:ec:3a:79:27:67:71:11:d9:ef:73:78:c9:7e:
51:f8:5d:b6:b5:74:df:0f:c4:7a:d8:a3:3c:9a:4b:de:5b:b6:
64:d1:5b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:28 2026 by rpki-client