Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
File: SgvIUgmAGVIMeOmoC22EyzyrcEI.mft (raw, json)
Hash identifier: MLQuTXOgyTk0uZM6pdkdPP6txfEKqVHIg2p2Jo+zTE8=
Subject key identifier: 42:24:D6:C8:C0:AF:C6:29:EA:56:56:15:3C:D7:FA:16:91:05:01:0F
Authority key identifier: 4A:0B:C8:52:09:80:19:52:0C:78:E9:A8:0B:6D:84:CB:3C:AB:70:42
Certificate issuer: /CN=4a0bc852098019520c78e9a80b6d84cb3cab7042
Certificate serial: 01A03F3BE569D38E0243165824F0F2A59D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
Manifest number: 0258
Signing time: Wed 26 Aug 2026 18:01:24 +0000
Manifest this update: Wed 26 Aug 2026 18:01:24 +0000
Manifest next update: Thu 27 Aug 2026 18:01:24 +0000
Files and hashes: 1: DZUI_bEIrP-yvThfRpjcY2JDgZ8.asa (hash: RghHL1DuN+HQMkw8GbUaQPmzZB8C45TxXFTAWg1Ry2g=)
2: SgvIUgmAGVIMeOmoC22EyzyrcEI.crl (hash: sopV9DpPrPFpzUZgFLUTRYKNjgLgpcrE49TURB9dvjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:e5:69:d3:8e:02:43:16:58:24:f0:f2:a5:9d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0bc852098019520c78e9a80b6d84cb3cab7042
Validity
Not Before: Aug 26 18:01:24 2026 GMT
Not After : Aug 27 18:01:24 2026 GMT
Subject: CN=4224d6c8c0afc629ea5656153cd7fa169105010f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:e6:75:71:25:3d:52:ac:7d:f6:cb:d5:0b:
e0:40:9d:d0:6e:87:76:5b:20:17:15:bc:d2:5b:59:
87:a4:2e:e4:96:f7:41:71:14:b9:05:c2:16:e4:fe:
f3:db:7e:4f:55:b2:c6:e1:80:66:5c:44:a9:60:e6:
d2:46:2f:d2:7b:2c:69:5f:ff:81:e7:c0:23:ca:98:
84:d6:e2:72:bc:d4:67:d8:76:d9:76:3a:82:38:c3:
d3:8c:7c:17:c9:6a:85:06:24:e8:4e:69:5d:f9:d0:
4c:ec:a4:e5:f8:39:af:79:ed:35:6b:c6:07:7f:da:
67:b0:b6:ea:b8:16:f9:31:16:17:81:97:1e:15:b3:
c2:bf:0e:c5:24:61:04:ca:45:1c:02:a0:13:9e:fa:
78:6f:a2:12:3e:25:b6:3e:84:0d:a2:7b:cd:1a:ff:
9c:48:25:ec:dc:dc:a1:df:25:83:92:46:58:3e:cd:
0a:25:c2:0a:e5:21:65:eb:16:76:a2:15:df:b5:dc:
b7:09:6c:14:5a:c8:c4:d0:ad:77:fe:14:2d:66:e3:
19:b5:eb:d1:2c:02:f8:12:d1:d3:24:06:5f:85:a8:
5f:0c:29:eb:3b:a6:01:f7:cd:a2:dd:83:8b:fb:96:
11:16:cb:cb:ad:7a:54:9f:11:d5:18:1e:36:36:d0:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:24:D6:C8:C0:AF:C6:29:EA:56:56:15:3C:D7:FA:16:91:05:01:0F
X509v3 Authority Key Identifier:
keyid:4A:0B:C8:52:09:80:19:52:0C:78:E9:A8:0B:6D:84:CB:3C:AB:70:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c2:81:4f:7c:08:0b:73:28:67:6e:bd:95:b0:32:63:84:d4:
e1:ae:c8:c6:bb:57:13:e4:ab:ff:9b:f0:e7:4b:15:cb:85:c2:
8b:84:8d:5f:ff:b1:2f:be:97:d4:d2:5d:ba:7c:7b:dc:cd:35:
dd:17:2d:9c:db:90:54:be:04:44:af:84:59:26:d4:90:7f:68:
f5:08:5c:77:cb:1e:28:c1:c7:e0:b9:0c:41:b4:fd:1d:70:ca:
c9:f5:10:43:96:09:9b:e9:ee:be:44:df:da:86:2a:0a:f7:4f:
0e:02:22:48:9c:af:53:62:0f:d4:cf:1d:31:61:5c:4d:6f:58:
77:62:28:ae:91:3e:22:ce:1f:0f:1e:3b:bc:c2:45:7f:99:58:
d8:e3:b8:87:15:d6:d8:1c:97:21:fb:03:a1:c4:4b:6e:58:fe:
fe:73:17:dd:96:fb:9e:40:79:31:48:b5:04:9b:29:13:3c:4e:
6e:73:4a:ae:6b:44:2d:8d:be:d0:b8:2c:3a:94:83:3a:d9:63:
e0:fe:43:b5:c3:60:35:a3:f5:67:95:48:16:7b:fd:b9:43:e2:
46:ff:b8:bf:0d:e0:a6:5c:02:99:47:4c:53:3b:b4:f1:fe:48:
9e:ef:06:2c:60:59:f4:c1:03:2f:30:56:d5:db:30:bb:7d:e3:
30:c9:00:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/O+Vp044CQxZYJPDypZ1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMGJjODUyMDk4MDE5NTIwYzc4ZTlhODBiNmQ4NGNiM2Nh
YjcwNDIwHhcNMjYwODI2MTgwMTI0WhcNMjYwODI3MTgwMTI0WjAzMTEwLwYDVQQD
Eyg0MjI0ZDZjOGMwYWZjNjI5ZWE1NjU2MTUzY2Q3ZmExNjkxMDUwMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLDmdXElPVKsffbL1QvgQJ3Qbod2
WyAXFbzSW1mHpC7klvdBcRS5BcIW5P7z235PVbLG4YBmXESpYObSRi/SeyxpX/+B
58AjypiE1uJyvNRn2HbZdjqCOMPTjHwXyWqFBiToTmld+dBM7KTl+Dmvee01a8YH
f9pnsLbquBb5MRYXgZceFbPCvw7FJGEEykUcAqATnvp4b6ISPiW2PoQNonvNGv+c
SCXs3Nyh3yWDkkZYPs0KJcIK5SFl6xZ2ohXftdy3CWwUWsjE0K13/hQtZuMZtevR
LAL4EtHTJAZfhahfDCnrO6YB982i3YOL+5YRFsvLrXpUnxHVGB42NtCI2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIk1sjAr8Yp6lZWFTzX+haRBQEPMB8GA1UdIwQY
MBaAFEoLyFIJgBlSDHjpqAtthMs8q3BCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2d2SVVnbUFHVklNZU9tb0MyMkV5enlyY0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jMDhjMDktOTNkMC00YWQ4LWE4MDkt
ZGFhYzgyZDI3ZjYwLzEvU2d2SVVnbUFHVklNZU9tb0MyMkV5enlyY0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jMDhjMDktOTNkMC00YWQ4LWE4MDktZGFhYzgyZDI3ZjYw
LzEvU2d2SVVnbUFHVklNZU9tb0MyMkV5enlyY0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8KBT3wI
C3MoZ269lbAyY4TU4a7IxrtXE+Sr/5vw50sVy4XCi4SNX/+xL76X1NJdunx73M01
3RctnNuQVL4ERK+EWSbUkH9o9Qhcd8seKMHH4LkMQbT9HXDKyfUQQ5YJm+nuvkTf
2oYqCvdPDgIiSJyvU2IP1M8dMWFcTW9Yd2IorpE+Is4fDx47vMJFf5lY2OO4hxXW
2ByXIfsDocRLblj+/nMX3Zb7nkB5MUi1BJspEzxObnNKrmtELY2+0LgsOpSDOtlj
4P5DtcNgNaP1Z5VIFnv9uUPiRv+4vw3gplwCmUdMUzu08f5Inu8GLGBZ9MEDLzBW
1dswu33jMMkAXA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:29:10 2026 by rpki-client