Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: hTcGbmnjRcouGm1DaBHzl17W4Ev9bm5j7f34nunE2UE=
Subject key identifier: 6A:80:FD:27:0A:85:C9:B8:98:8B:B8:C9:AA:AB:C7:D5:F9:BE:5C:19
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 01A14BABBB74213E3B6D2472A08197777988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 16DA
Signing time: Sat 17 Oct 2026 21:01:48 +0000
Manifest this update: Sat 17 Oct 2026 21:01:48 +0000
Manifest next update: Sun 18 Oct 2026 21:01:48 +0000
Files and hashes: 1: 98TJQub4EtN4BXIRrG4cNKh1xfw.roa (hash: ZCcnqtJ6qlNXte/XKxn3WGiCx4J7iiLBNWDpocMLxz8=)
2: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: fep/k52pVSe2AjaPxTU9Wn1BYAL0A8kRHXQQsz+S9d8=)
3: ysnZuAzsS0-HIAlzoijYxDjpjGM.roa (hash: KJi0IxqPbXmBRsHSikOn83iNnVBJ6syBP35Ejj1BE7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:ab:bb:74:21:3e:3b:6d:24:72:a0:81:97:77:79:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Oct 17 21:01:48 2026 GMT
Not After : Oct 18 21:01:48 2026 GMT
Subject: CN=6a80fd270a85c9b8988bb8c9aaabc7d5f9be5c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:d0:6d:9a:08:e5:a2:2a:c7:eb:c1:d2:9a:
f1:e8:96:96:6e:2f:24:cb:b1:b8:48:7a:a5:d7:fc:
70:83:a3:c3:d5:85:4b:1d:9d:4f:db:a7:46:38:75:
47:c3:ab:cc:1a:9a:c2:9e:eb:71:b8:7c:77:8a:72:
37:e9:70:3e:ec:47:5b:88:c0:00:9b:c9:9e:e5:05:
2c:b7:af:4f:3b:c6:9a:fc:d4:2a:ef:0e:35:10:3e:
98:c3:2d:c8:f9:c0:e0:dc:13:2b:0a:a8:cb:48:72:
55:69:af:e7:4e:95:64:b2:65:f9:71:a3:40:0d:e1:
7a:ca:c2:4c:a0:7d:a6:cb:c2:26:1e:66:64:f0:82:
e0:97:3c:51:26:81:42:f0:74:15:0e:16:fb:5b:c4:
e7:61:de:7b:1e:e3:4e:87:4b:bf:bc:5e:e9:e2:15:
d4:f1:b0:81:68:10:98:f4:c6:6d:84:dc:70:0f:b7:
79:0f:75:aa:e8:ca:55:38:e7:3c:0f:1e:b2:e2:ce:
fb:93:f3:4c:7f:25:91:75:35:d7:bc:43:d9:a2:ad:
c1:be:78:25:7f:b7:3e:49:da:77:3b:5a:4e:8e:aa:
f8:cc:28:30:ab:ef:96:0f:9e:78:be:db:83:e3:22:
3f:89:72:43:2e:61:7e:ac:5f:7b:d8:8d:5d:63:92:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:80:FD:27:0A:85:C9:B8:98:8B:B8:C9:AA:AB:C7:D5:F9:BE:5C:19
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e9:37:2b:0d:69:5b:ae:21:0a:fe:4c:7a:94:33:a6:66:96:
00:ac:78:76:b2:25:6a:d6:65:42:11:8e:fa:b0:ac:da:12:a7:
60:26:3a:31:46:30:2c:41:50:d1:95:9c:89:73:5b:e8:84:9f:
72:2b:9e:b3:07:21:f7:51:c1:f0:89:83:0e:bc:cc:12:66:de:
50:4f:71:65:9d:b6:ef:11:e7:97:22:41:af:29:9f:28:0b:35:
0d:20:6e:00:84:77:80:79:bb:16:00:01:0e:8f:a5:8b:f2:6f:
ba:a3:bc:fd:cc:ee:ff:09:95:50:87:47:fa:97:fc:39:dc:c3:
7a:57:6a:b9:93:67:99:d3:78:c7:e0:d9:43:0c:f3:d0:1f:85:
d2:48:c5:a2:ed:98:29:8e:33:e0:ba:34:31:9f:98:d0:b1:dc:
36:7c:f2:5b:f4:2c:f9:58:2d:96:ec:82:ef:5d:8c:40:a6:a1:
cc:c9:6b:f2:cf:61:82:69:bd:13:3f:f0:3c:f0:9f:90:52:ad:
17:bc:b4:61:4e:3e:99:bd:d8:97:28:37:26:e3:d0:22:97:35:
ff:55:dc:4d:b2:4a:ad:a2:56:22:e3:d1:fc:fa:65:ad:08:48:
48:d9:45:62:ba:9e:84:95:83:56:da:54:0d:ca:99:bd:4c:c5:
01:1a:8b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:50:01 2026 by rpki-client