Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
File: sgWR5euUhCdKdKyC_muRDivLE5k.mft (raw, json)
Hash identifier: dod11QiGjoZfzrsMZ92koPXZBeepPjkOoafm78DfjLk=
Subject key identifier: FE:02:EF:B8:3F:43:38:7F:4C:C9:2C:D4:12:B6:B3:B1:92:A7:59:B3
Authority key identifier: B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
Certificate issuer: /CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Certificate serial: 019DDDD6A336EB2F21F3A83CBE2CB442C9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
Manifest number: 42
Signing time: Thu 30 Apr 2026 10:02:04 +0000
Manifest this update: Thu 30 Apr 2026 10:02:04 +0000
Manifest next update: Fri 01 May 2026 10:02:04 +0000
Files and hashes: 1: YNiESc72RDLIiWhCHsXSi1o9cLE.asa (hash: l71vJ2s8lHSefHy7yMSFsWXnMilHTDdYBPtW2A9TX3g=)
2: sgWR5euUhCdKdKyC_muRDivLE5k.crl (hash: fMVGQEV1/HUYRz7A4hi7vcBng/jsC5zhtB0PUfXWGA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d6:a3:36:eb:2f:21:f3:a8:3c:be:2c:b4:42:c9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Validity
Not Before: Apr 30 10:02:04 2026 GMT
Not After : May 1 10:02:04 2026 GMT
Subject: CN=fe02efb83f43387f4cc92cd412b6b3b192a759b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:44:a5:18:c8:8d:9c:3d:a0:ea:10:52:3c:
f7:e0:ff:19:2a:7b:02:b3:25:9c:92:aa:60:a7:24:
44:66:e3:21:95:be:b2:ad:98:2b:7d:ae:1a:90:24:
54:4a:fa:0e:4b:d7:22:f5:1e:14:f8:3d:3b:e8:44:
3f:6a:d8:32:33:4d:7c:bf:31:1b:00:22:de:51:34:
f1:cd:56:62:4f:9d:04:0b:21:05:65:28:f5:8f:1d:
ab:e7:ea:7c:42:e5:bb:79:3f:2e:5a:4f:c2:7c:a4:
76:cb:a2:b7:70:7d:b9:8f:66:65:e5:08:54:96:fe:
ba:53:5d:f6:67:d7:10:00:0f:2c:df:57:64:ae:af:
bd:38:5a:2b:a2:81:2c:0d:50:32:ca:7d:93:3b:56:
3c:2d:b1:c6:45:d3:bc:ea:8c:6a:4a:7a:a2:c2:92:
dd:ba:43:6b:c7:3a:1c:9c:46:64:00:f3:98:78:64:
e0:6d:51:27:ff:be:86:ef:a5:28:8c:40:79:c1:f8:
2b:59:8c:97:a2:71:c6:e2:9d:dd:dd:cb:57:00:37:
b3:68:ab:77:80:42:a0:4e:9d:d8:49:83:93:81:29:
28:d3:10:ac:06:5c:1d:13:94:96:6a:5a:cf:c9:33:
23:19:c8:e0:d1:d5:c5:1b:98:de:80:82:75:01:71:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:02:EF:B8:3F:43:38:7F:4C:C9:2C:D4:12:B6:B3:B1:92:A7:59:B3
X509v3 Authority Key Identifier:
keyid:B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7d:00:ef:85:75:14:4a:bd:d9:7f:bd:7b:e9:18:35:0a:76:
15:80:13:cf:aa:55:ae:63:3c:df:a5:a6:23:f6:3b:96:8a:ae:
0b:03:ba:e7:5b:f9:53:32:81:4c:ee:de:2d:c6:72:fb:3a:c4:
d9:ad:77:df:ba:4e:8a:fc:97:c6:2b:8d:d9:64:c7:ec:8c:a1:
a7:c9:04:ef:5a:59:11:dd:dc:76:03:6e:1b:4c:3c:85:1b:52:
01:fa:dd:fa:30:02:2c:3e:93:68:04:e7:59:2a:fc:95:e5:c7:
30:a6:23:0b:b6:b9:04:f6:48:73:10:08:fe:64:70:77:5f:96:
9c:78:43:8d:9d:1e:c2:cd:a9:58:ef:a5:bc:0b:fe:e4:37:eb:
9a:7f:4f:e3:f8:a1:13:4e:b9:12:0f:f9:5d:f9:3f:86:50:7e:
30:d0:c0:83:97:b8:ca:10:a1:9b:78:84:56:ae:fd:f1:17:c7:
f2:b7:f2:e6:df:cc:3f:66:9c:3a:c1:92:95:83:c2:d9:d9:49:
fc:22:fa:08:1e:7c:83:bc:af:02:18:8f:c6:a6:d4:07:a9:30:
74:38:bb:ae:84:3f:bc:0d:e8:ef:2e:b0:63:89:2b:e9:af:c3:
37:15:45:ad:c5:53:db:59:2f:e4:94:c8:ef:bb:7c:c2:fb:0e:
6a:8d:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:39:47 2026 by rpki-client