Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
File: SgvIUgmAGVIMeOmoC22EyzyrcEI.mft (raw, json)
Hash identifier: kKnSPwu36DBOB15fAXuXstfapKMuWDNGQwyKDANL+a8=
Subject key identifier: 92:3E:B1:23:FE:09:44:4A:48:91:08:54:2E:95:72:D9:80:4D:E3:ED
Authority key identifier: 4A:0B:C8:52:09:80:19:52:0C:78:E9:A8:0B:6D:84:CB:3C:AB:70:42
Certificate issuer: /CN=4a0bc852098019520c78e9a80b6d84cb3cab7042
Certificate serial: 01A16E6EB9EBAE51148B9F911A0E1FBEBE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
Manifest number: 02F5
Signing time: Sat 24 Oct 2026 15:01:52 +0000
Manifest this update: Sat 24 Oct 2026 15:01:52 +0000
Manifest next update: Sun 25 Oct 2026 15:01:52 +0000
Files and hashes: 1: DZUI_bEIrP-yvThfRpjcY2JDgZ8.asa (hash: RghHL1DuN+HQMkw8GbUaQPmzZB8C45TxXFTAWg1Ry2g=)
2: SgvIUgmAGVIMeOmoC22EyzyrcEI.crl (hash: pPsGqo5rdgw4Ven5nC/Q0nCCU1EYf9HL0ZWqhdcREQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:6e:b9:eb:ae:51:14:8b:9f:91:1a:0e:1f:be:be:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0bc852098019520c78e9a80b6d84cb3cab7042
Validity
Not Before: Oct 24 15:01:52 2026 GMT
Not After : Oct 25 15:01:52 2026 GMT
Subject: CN=923eb123fe09444a489108542e9572d9804de3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:dd:60:77:d7:e8:06:ca:30:e5:72:64:8d:
3d:a5:3d:ea:97:7b:8e:37:87:ed:a1:73:93:d4:89:
72:a7:ed:63:c9:86:30:26:e1:38:f2:b2:c4:48:56:
bc:dc:37:33:71:4a:e7:9f:b0:87:dd:af:60:d4:2b:
91:16:09:71:54:0c:c9:00:83:c0:c6:04:ab:00:5a:
cb:54:b4:7a:bf:a6:f7:96:ed:1b:b3:6a:4a:8d:59:
f5:f4:74:dc:a7:63:fd:b9:a3:d2:03:ec:8c:12:60:
2e:76:5c:c3:85:f7:5f:3b:49:a8:46:11:2c:92:f0:
ee:2e:66:f0:8f:4c:d5:10:d9:8d:c3:b9:4d:00:62:
a9:ae:fa:bf:48:7b:ba:d3:66:d7:fe:95:92:ca:77:
1a:6d:8c:cc:a9:87:1a:37:94:78:cf:bc:ac:c0:ce:
33:fe:48:ac:c4:e0:ae:43:e3:f3:30:f0:d6:73:70:
1d:2b:5a:5a:9d:47:3e:9f:89:09:cb:47:2a:76:54:
be:82:17:da:26:f7:c1:37:22:65:07:77:74:8e:d5:
9b:21:02:5f:e2:38:22:8a:40:9e:f4:17:f4:e0:b7:
d7:4b:36:a9:55:30:e6:c0:09:bb:79:c1:cf:ba:5e:
f7:67:13:47:c8:35:3c:36:b4:04:d9:53:88:fd:3a:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3E:B1:23:FE:09:44:4A:48:91:08:54:2E:95:72:D9:80:4D:E3:ED
X509v3 Authority Key Identifier:
keyid:4A:0B:C8:52:09:80:19:52:0C:78:E9:A8:0B:6D:84:CB:3C:AB:70:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5c:45:a0:23:55:34:f2:9a:b1:80:32:1c:59:d1:7f:e9:cd:
2c:43:66:24:7c:fe:f3:58:fb:89:77:56:84:0f:52:71:ed:ff:
2f:f1:f0:c0:6e:28:8a:35:e4:80:51:64:f6:ab:90:26:f4:1e:
e2:01:64:7d:d5:15:15:f6:d3:88:fd:4f:4c:98:39:4c:72:5f:
e4:0f:24:68:53:5b:eb:71:a3:de:c0:22:80:80:ce:6a:5c:1a:
56:71:df:83:b9:68:77:b8:fe:59:87:d9:d3:1b:dc:31:3b:51:
dc:c0:02:1e:d6:96:e4:2f:4a:9b:d6:2f:c7:88:1b:82:17:85:
0e:3b:aa:5f:c8:9b:da:42:48:b8:3f:90:f6:93:38:ea:d9:85:
c6:bf:e8:4f:cc:3b:9a:22:0d:bf:01:82:7f:b7:3c:bd:af:3f:
74:b0:9f:cd:c2:5b:78:32:1d:e5:7d:56:2a:45:e6:aa:e5:dd:
24:14:b0:b1:75:6b:ec:ee:d3:75:0b:0e:53:37:4c:89:70:b5:
9f:aa:5b:2a:32:aa:c8:87:98:5f:6b:70:ed:06:9d:5e:c8:2b:
de:6f:c2:05:79:f3:ee:0d:08:0e:3b:e3:6e:e1:9d:8b:2d:dd:
a9:7e:19:7b:9a:50:bf:dd:02:02:cb:8b:30:d9:0a:cb:8e:3a:
3a:c2:9e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:46:06 2026 by rpki-client