Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: 38ZyL+8MIOqQ48xbTNvK3MQ6KtnKAt8/ETgGX6dQQUY=
Subject key identifier: 47:C4:AF:27:79:CF:31:E8:31:BD:F6:18:91:BA:57:30:76:F6:D1:CE
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 01A046F61931DDA782A0F2CF28F35BD128B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 1653
Signing time: Fri 28 Aug 2026 06:02:08 +0000
Manifest this update: Fri 28 Aug 2026 06:02:08 +0000
Manifest next update: Sat 29 Aug 2026 06:02:08 +0000
Files and hashes: 1: 98TJQub4EtN4BXIRrG4cNKh1xfw.roa (hash: ZCcnqtJ6qlNXte/XKxn3WGiCx4J7iiLBNWDpocMLxz8=)
2: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: v2ixfRsmUvcqOoSMTthcLtS9kb+ZkTE3OojplalEmS8=)
3: ysnZuAzsS0-HIAlzoijYxDjpjGM.roa (hash: KJi0IxqPbXmBRsHSikOn83iNnVBJ6syBP35Ejj1BE7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:46:f6:19:31:dd:a7:82:a0:f2:cf:28:f3:5b:d1:28:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Aug 28 06:02:08 2026 GMT
Not After : Aug 29 06:02:08 2026 GMT
Subject: CN=47c4af2779cf31e831bdf61891ba573076f6d1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:90:af:47:6f:ec:5e:7d:16:25:65:37:7f:
fd:45:21:e6:99:1a:b0:73:46:60:7f:11:7a:d5:95:
74:d7:20:85:21:71:a7:a6:cc:ae:c7:f0:de:00:e9:
d1:d4:f7:d1:47:21:50:16:1d:ab:0b:95:bb:30:6f:
da:b6:79:5d:82:3a:c0:ae:4f:b0:fd:66:e3:c2:79:
26:65:b6:da:bc:e3:c8:41:f4:c6:d8:91:c4:6f:6d:
53:37:1a:a1:d5:53:f5:7a:f3:d4:18:d5:55:55:cd:
25:41:37:86:8d:b5:b6:94:c9:f5:c0:99:46:36:3e:
e9:af:08:47:df:26:04:04:18:41:1d:5e:1f:79:1c:
98:63:ae:b7:35:6a:3d:13:6c:91:3b:7a:13:34:76:
e6:2c:c4:85:ae:e1:81:ce:7f:27:95:13:62:da:a9:
7c:75:ce:4b:fb:b8:c0:20:43:4f:5d:b4:b1:9c:f4:
4f:01:14:d1:46:53:15:d8:16:59:bf:c4:7f:52:71:
b8:86:68:8f:ae:15:bd:64:88:47:ad:8c:96:a1:90:
c9:9f:3e:12:55:41:2f:31:dd:1b:a8:48:20:4d:6b:
08:de:ef:7c:ff:ba:dc:cc:a7:a1:b3:a9:6a:45:9f:
29:9e:ca:6d:5f:16:c1:53:a7:3e:33:fb:fe:be:ee:
9a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C4:AF:27:79:CF:31:E8:31:BD:F6:18:91:BA:57:30:76:F6:D1:CE
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:96:4c:45:2d:83:7f:f4:45:4a:99:93:53:ad:f5:8b:75:7b:
bb:d8:4c:d1:f7:dc:68:b8:34:c0:f2:6c:8c:4d:cc:5f:f9:60:
8a:46:77:26:70:eb:a6:ca:36:63:fa:68:1b:91:68:b2:f3:88:
3e:2f:f3:e4:d3:75:18:e7:87:2b:ff:42:08:c1:39:37:64:d9:
a5:71:df:ac:2e:28:ae:e2:d9:09:64:6c:83:9a:76:71:be:71:
ec:eb:28:6c:a8:35:74:b6:c5:c3:c0:03:75:0b:b1:c8:d5:2b:
3c:21:7f:1f:0d:3f:5f:30:e7:b7:a5:ef:ba:d4:6b:77:9e:4b:
b2:31:08:6d:ff:d2:86:04:39:8d:ea:b9:f3:cb:e3:50:57:1d:
93:0d:66:52:0f:14:a5:15:d0:92:1e:2a:a8:3b:18:65:d5:c5:
19:e1:19:f9:12:3b:1e:55:2e:10:f7:18:93:cf:c8:d0:38:6d:
99:c9:90:a8:85:83:af:eb:a3:7e:ef:fd:e9:2f:03:84:13:38:
ca:2b:76:1d:44:63:77:12:b8:08:58:bd:5e:1b:cc:06:79:da:
b8:ed:6f:21:3b:67:f1:54:1f:2e:50:17:4c:29:1c:f9:48:38:
85:cc:6b:50:c4:0e:69:39:9b:21:82:76:fb:de:45:05:c5:30:
f2:3e:18:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 07:21:44 2026 by rpki-client