Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: 0FOtHh49u2VQfhhY9UCuMPFrzWcGbf0beoyXMogkw/U=
Subject key identifier: 07:C4:DE:A1:A0:0D:CF:85:D2:DB:78:63:51:F8:57:95:7A:8E:FF:FC
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 019D39AF254B1C776B8D1A61D96715420BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 14BE
Signing time: Sun 29 Mar 2026 13:01:12 +0000
Manifest this update: Sun 29 Mar 2026 13:01:12 +0000
Manifest next update: Mon 30 Mar 2026 13:01:12 +0000
Files and hashes: 1: 98TJQub4EtN4BXIRrG4cNKh1xfw.roa (hash: ZCcnqtJ6qlNXte/XKxn3WGiCx4J7iiLBNWDpocMLxz8=)
2: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: S2QI1E/LXfXjYM9S/E24ou/SiTVwL41ZZejYtOSuK08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:25:4b:1c:77:6b:8d:1a:61:d9:67:15:42:0b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Mar 29 13:01:12 2026 GMT
Not After : Mar 30 13:01:12 2026 GMT
Subject: CN=07c4dea1a00dcf85d2db786351f857957a8efffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:48:96:72:59:3e:1a:63:a2:12:10:28:c4:
53:3a:d6:30:36:33:d3:b7:64:cf:07:07:38:0c:8c:
05:47:6e:3d:1f:db:41:e7:33:26:3e:b9:89:62:62:
d1:94:51:b7:bd:61:11:c2:a2:42:83:a4:fb:ae:a2:
6b:64:16:ab:f7:ca:94:90:d0:9c:ba:b4:86:0b:e6:
90:e0:72:69:4a:93:44:b4:23:80:ee:9d:f2:a8:0a:
83:7b:4e:8c:3d:51:1d:32:6d:72:71:80:6d:4e:ef:
49:44:bc:05:dc:13:d7:db:eb:c7:80:64:5f:43:bb:
1e:3d:7c:fa:27:cc:48:51:66:ea:56:6c:08:44:a3:
9c:f6:1b:20:1d:ea:98:d3:ae:c9:f3:6d:6c:fe:b3:
65:55:a1:b8:2f:63:cf:f8:16:7d:e7:8f:cc:e3:82:
fd:74:45:b7:ef:aa:e0:72:6f:d0:67:14:b8:69:bd:
ba:be:24:3d:02:ed:f3:d8:6f:e3:66:69:84:e5:ba:
ee:ac:58:f0:2f:82:6c:9c:a6:26:fb:bb:e1:79:5d:
fd:1a:35:39:66:39:b5:a4:34:68:31:c2:93:f9:5f:
07:57:fa:7f:2b:ec:f6:bd:b7:78:da:a2:a8:0d:90:
2c:b0:37:52:c2:be:75:3a:02:df:d2:d5:cf:0c:6e:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C4:DE:A1:A0:0D:CF:85:D2:DB:78:63:51:F8:57:95:7A:8E:FF:FC
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:34:d8:04:01:a9:86:78:ed:e7:88:c4:04:05:a3:25:9a:b9:
a8:7b:2b:fe:18:78:8e:70:2a:2d:12:52:ea:90:4c:5d:26:a3:
fd:5c:59:30:ee:60:c5:95:73:56:82:4c:13:3b:40:7d:54:ec:
af:87:fa:d7:88:8b:1b:fa:1e:c4:aa:3c:df:6f:a4:20:63:3c:
fa:dd:fa:b4:27:b7:2a:d4:05:67:a6:c4:ba:cb:81:b8:a0:0d:
26:97:84:a4:ab:04:0a:81:cc:c0:e2:57:4a:e8:72:29:ab:ee:
73:0e:46:0e:a6:9f:01:93:bc:5f:99:57:31:22:31:6b:f2:8b:
e7:ec:c3:71:7b:89:78:25:af:18:ff:11:ba:56:57:1c:9a:83:
d7:d3:74:d8:69:e3:44:ce:e2:10:39:ff:67:00:f7:26:0b:64:
c5:ab:b9:bf:b5:49:b5:5d:d3:35:7e:65:95:7f:42:6e:78:34:
4f:35:86:c1:6a:50:43:7d:58:b1:a3:e9:f0:4f:25:98:28:e5:
d2:73:0c:01:9f:17:40:a3:f4:7d:0f:e9:18:0b:ac:c8:56:97:
c5:e6:b6:90:ec:38:28:a7:a3:c6:f3:93:31:31:1f:1b:ca:f2:
4d:32:25:b0:22:b0:3e:91:e7:c5:c1:09:49:14:0b:ca:f8:2c:
0b:c0:23:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:45 2026 by rpki-client