Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
File: sgWR5euUhCdKdKyC_muRDivLE5k.mft (raw, json)
Hash identifier: l6Mu1hmQWGINo/ncXANycLohHuOKl3g/XK2jnybRRG8=
Subject key identifier: 5D:3A:3A:6E:31:AA:88:85:8F:27:BC:E6:5F:20:97:EE:B7:9F:C4:8D
Authority key identifier: B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
Certificate issuer: /CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Certificate serial: 01A0EA09E688EF7EC6C7CC15851414BA1408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
Manifest number: 01D6
Signing time: Mon 28 Sep 2026 22:01:52 +0000
Manifest this update: Mon 28 Sep 2026 22:01:52 +0000
Manifest next update: Tue 29 Sep 2026 22:01:52 +0000
Files and hashes: 1: YNiESc72RDLIiWhCHsXSi1o9cLE.asa (hash: l71vJ2s8lHSefHy7yMSFsWXnMilHTDdYBPtW2A9TX3g=)
2: sgWR5euUhCdKdKyC_muRDivLE5k.crl (hash: wH25PK+wA7d6UL1OuAfYt5CsC4Of43HZU2ajF949jz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:e6:88:ef:7e:c6:c7:cc:15:85:14:14:ba:14:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Validity
Not Before: Sep 28 22:01:52 2026 GMT
Not After : Sep 29 22:01:52 2026 GMT
Subject: CN=5d3a3a6e31aa88858f27bce65f2097eeb79fc48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:30:f0:08:9d:bd:39:d4:f9:1d:a3:2b:f5:
25:3d:14:5f:aa:f3:a8:13:78:53:84:0a:f8:50:8c:
b4:fe:c0:d1:f0:0a:ee:4f:75:20:b9:7e:cf:ab:46:
1e:bb:a7:f3:df:2c:2f:6c:70:ef:b8:33:ec:b1:36:
58:cd:19:0a:23:43:78:c4:63:0f:fe:14:8c:9d:33:
d9:61:01:d2:8f:3a:24:e2:d0:d9:1f:2a:f3:da:11:
e9:6f:7d:ea:4c:f3:cb:3f:9b:8f:0a:7b:a2:eb:e8:
6c:ff:06:0f:5c:2b:51:95:17:7e:c3:32:41:eb:39:
bd:f7:b7:d8:2d:31:16:4b:18:24:a7:26:ad:89:21:
e8:39:26:5d:ef:c9:b2:55:59:c3:34:dd:9a:69:4e:
71:3b:cc:93:8c:ad:ba:d3:4d:f2:39:e1:cc:96:f9:
4c:27:f6:ff:61:6d:1e:67:16:19:87:f7:8c:1c:0c:
c2:8f:c3:a1:a4:a4:9d:8c:6d:76:77:f2:ff:47:2b:
d8:96:6e:b8:a7:58:34:cb:31:b4:64:23:34:31:dc:
e5:76:3c:f1:87:9c:62:c7:a7:b1:36:6d:fa:d7:81:
6e:3a:41:f0:d9:41:00:6e:2f:5c:ed:e9:9d:b7:72:
f3:06:30:10:58:b1:6b:f4:4c:ec:f0:f9:74:4a:9d:
5c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3A:3A:6E:31:AA:88:85:8F:27:BC:E6:5F:20:97:EE:B7:9F:C4:8D
X509v3 Authority Key Identifier:
keyid:B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cb:3f:20:dc:6c:a9:34:73:a6:10:f6:a4:75:a7:e9:f1:b0:
96:d6:99:49:39:fb:8c:ad:10:4c:22:d7:86:96:98:de:35:d1:
e2:94:0c:25:0b:48:40:63:5d:f9:22:a3:78:2a:dd:f9:a8:6a:
2b:43:86:27:22:ce:da:b9:46:7c:b0:86:59:97:28:e3:1a:c7:
ae:31:1f:05:06:07:a4:3e:5e:68:2d:f4:8a:45:45:f3:22:bf:
54:a1:5d:03:c4:b8:00:4d:22:7d:fd:7f:8e:4b:56:53:5b:eb:
55:31:fd:38:0f:9d:d0:ee:5e:69:1d:fb:f6:1c:39:0a:cc:1f:
81:75:56:71:97:e8:8f:9e:18:6b:c2:bc:78:e2:57:b1:82:ca:
7e:24:5d:35:0b:29:e6:96:d4:38:58:5a:d8:bc:e3:ae:97:8f:
a9:77:9f:63:91:d8:6d:ea:22:b5:a5:f1:fb:55:cf:af:0f:9b:
1a:c6:2e:5f:f4:f9:f5:d3:c2:8d:06:80:bc:15:af:25:b7:1a:
f3:e9:4e:de:8d:e5:8b:1c:e6:18:44:50:5b:f0:da:d8:24:8e:
bc:dc:dd:24:22:a2:5c:98:90:29:4f:8d:b1:09:b2:ef:59:39:
40:86:ec:db:66:e1:fd:05:99:47:e0:b0:29:be:cb:19:3f:83:
5e:fa:5b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:29:14 2026 by rpki-client