Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
File: SgvIUgmAGVIMeOmoC22EyzyrcEI.mft (raw, json)
Hash identifier: BrJP3jaQkRxuzttbRL0OrYJ53r230G3ea5QO6eubwPE=
Subject key identifier: 52:A2:93:44:1D:1C:DB:83:EE:64:C5:19:7F:57:60:D0:44:16:D7:4E
Authority key identifier: 4A:0B:C8:52:09:80:19:52:0C:78:E9:A8:0B:6D:84:CB:3C:AB:70:42
Certificate issuer: /CN=4a0bc852098019520c78e9a80b6d84cb3cab7042
Certificate serial: 01A03D4D0973E67B9F9850EE3E6BF4596E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
Manifest number: 0257
Signing time: Wed 26 Aug 2026 09:00:53 +0000
Manifest this update: Wed 26 Aug 2026 09:00:53 +0000
Manifest next update: Thu 27 Aug 2026 09:00:53 +0000
Files and hashes: 1: DZUI_bEIrP-yvThfRpjcY2JDgZ8.asa (hash: RghHL1DuN+HQMkw8GbUaQPmzZB8C45TxXFTAWg1Ry2g=)
2: SgvIUgmAGVIMeOmoC22EyzyrcEI.crl (hash: aWh4ksO5+HpTfK2gDIefNXp+EXjhaJ88bzGjjdM41PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:4d:09:73:e6:7b:9f:98:50:ee:3e:6b:f4:59:6e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0bc852098019520c78e9a80b6d84cb3cab7042
Validity
Not Before: Aug 26 09:00:53 2026 GMT
Not After : Aug 27 09:00:53 2026 GMT
Subject: CN=52a293441d1cdb83ee64c5197f5760d04416d74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bf:73:b0:07:d3:49:11:60:32:e0:e8:71:15:
75:77:06:35:58:23:19:02:c2:07:05:0a:23:37:8e:
03:9d:78:ba:a7:e4:95:da:b9:1c:e7:63:1e:ea:4d:
c7:94:ca:be:00:d6:05:29:02:17:e9:e7:5e:bc:aa:
0a:aa:3f:42:82:80:da:b1:8d:1a:ad:f2:44:9f:c4:
f2:ea:a4:1c:75:93:1e:ec:74:38:94:4f:e6:8a:24:
87:88:7e:73:01:84:63:e7:f0:96:1b:f6:4d:19:78:
50:48:da:bd:be:6a:e0:c7:81:89:28:cb:f0:b3:38:
3f:a7:b3:07:71:d1:98:10:42:b8:74:96:cb:3a:d0:
17:8b:e4:e9:b9:b5:d2:87:d1:72:75:80:7b:59:d0:
e1:11:a1:6d:e4:ea:3b:01:ea:bc:fa:1e:ce:30:5d:
68:44:99:89:35:01:68:4e:a9:8c:17:8d:a6:6b:ad:
59:50:f8:ef:3e:3c:3f:9b:07:3b:dd:d7:15:94:2d:
d4:58:1d:fc:73:2b:a2:6d:17:9a:f4:8f:48:43:66:
d2:4c:42:b1:a3:c5:e2:80:d6:a1:6b:c0:74:9b:fd:
a0:4b:61:92:ed:55:19:80:ee:42:d4:28:f7:4d:d0:
b3:bd:fa:26:8e:54:51:8d:50:71:ac:45:75:3f:b0:
21:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A2:93:44:1D:1C:DB:83:EE:64:C5:19:7F:57:60:D0:44:16:D7:4E
X509v3 Authority Key Identifier:
keyid:4A:0B:C8:52:09:80:19:52:0C:78:E9:A8:0B:6D:84:CB:3C:AB:70:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7d:83:39:cf:79:78:00:46:ae:e8:10:41:ff:04:d2:c6:d0:
b8:98:bc:57:d1:47:8c:98:4c:28:96:04:05:fb:32:69:d7:f9:
68:60:03:67:8c:26:d1:7e:04:2d:f6:c0:17:26:2e:8a:62:41:
e7:b2:9f:f5:95:6d:4d:7a:af:2f:63:32:dc:d9:94:2f:38:fd:
71:30:06:15:17:da:5f:b3:63:6d:8b:20:fe:07:27:22:9d:3e:
5d:5e:28:dc:3a:cd:39:ed:9b:5e:d6:c2:00:c8:57:11:ae:0c:
03:4e:51:03:8b:03:d3:1a:ec:38:25:64:c9:a0:aa:08:ae:6f:
90:d8:a2:e4:c8:24:35:d8:57:b0:66:79:17:46:d7:43:a8:0a:
6d:a8:32:2d:c5:6c:11:bf:b5:a1:ac:07:80:64:14:fa:b1:16:
2d:f5:82:d4:04:82:2a:c4:60:13:27:1d:b0:80:c1:b4:1c:15:
77:91:b1:c4:b2:cd:13:f6:e4:c4:a9:d5:14:ed:7e:4b:95:5c:
ee:2b:a2:21:d3:79:85:d2:67:29:04:4b:66:5b:5e:c2:a5:23:
00:7b:4e:01:25:7e:c5:da:90:1f:94:3d:ee:79:19:fe:26:a2:
f5:33:b5:34:fb:ad:97:10:d6:21:08:58:47:58:1b:21:36:74:
8b:ff:11:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:12:03 2026 by rpki-client