Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
File: sgWR5euUhCdKdKyC_muRDivLE5k.mft (raw, json)
Hash identifier: 1bLoyl3DHeXLidIIt50T/l2xKfya1CifMLiIwNFBwCQ=
Subject key identifier: C6:2E:53:86:CF:D4:DE:D1:58:AC:4A:AF:B5:68:C0:B1:82:BB:C6:58
Authority key identifier: B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
Certificate issuer: /CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Certificate serial: 019FF6B50674BD25438AA57DE2B9AFB17B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
Manifest number: 0158
Signing time: Wed 12 Aug 2026 16:01:26 +0000
Manifest this update: Wed 12 Aug 2026 16:01:26 +0000
Manifest next update: Thu 13 Aug 2026 16:01:26 +0000
Files and hashes: 1: YNiESc72RDLIiWhCHsXSi1o9cLE.asa (hash: l71vJ2s8lHSefHy7yMSFsWXnMilHTDdYBPtW2A9TX3g=)
2: sgWR5euUhCdKdKyC_muRDivLE5k.crl (hash: jraeJdoDDFnn66ku7ZtjLN6+7brR102pHT4qlA/q9yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:b5:06:74:bd:25:43:8a:a5:7d:e2:b9:af:b1:7b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Validity
Not Before: Aug 12 16:01:26 2026 GMT
Not After : Aug 13 16:01:26 2026 GMT
Subject: CN=c62e5386cfd4ded158ac4aafb568c0b182bbc658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6a:36:86:f9:3f:fa:d8:cb:4c:05:e8:4d:77:
06:1f:28:c1:26:fb:fc:32:2e:21:be:71:62:4c:8d:
de:c7:9f:82:46:f8:35:30:6d:d6:41:79:a8:13:b6:
23:da:e9:b3:b3:27:a8:e4:da:88:5b:64:9d:9f:42:
72:6d:0e:85:93:df:ff:22:1d:25:27:22:ba:28:f0:
ff:b3:c4:84:9a:13:d0:07:8d:3f:a9:0d:a6:c0:8c:
ba:cc:b0:9f:2f:92:9c:8f:32:c2:5d:fa:c4:ce:ce:
5e:b1:7c:62:92:ba:d8:22:02:a9:4d:e8:b0:b1:10:
1d:a0:80:b1:aa:75:25:92:7c:20:b5:f2:f7:ec:fa:
a3:9f:80:20:87:19:0f:0f:b2:c7:aa:51:fd:bf:62:
02:d0:49:27:b4:0c:ef:83:c1:25:d3:d7:e3:49:c0:
8d:28:bb:b2:de:e4:ca:62:a4:ed:8d:0f:d3:87:b1:
ce:a7:39:bf:8d:4d:3c:b3:25:66:4c:16:36:66:61:
19:08:9e:24:c7:3d:9e:be:d1:f1:78:df:80:93:ff:
1d:59:1c:64:0d:13:c8:27:d7:ff:06:2e:1d:9a:4b:
fc:b2:19:aa:44:e5:10:99:a7:2d:7a:34:a3:9d:35:
da:d2:7b:19:dd:20:a7:4e:9c:5d:54:78:0d:24:ec:
8a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2E:53:86:CF:D4:DE:D1:58:AC:4A:AF:B5:68:C0:B1:82:BB:C6:58
X509v3 Authority Key Identifier:
keyid:B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2a:5d:0e:2d:cf:13:ed:95:7c:41:96:08:8c:37:67:5c:db:
fe:ff:d5:15:81:ea:ce:d6:c1:cd:2e:4e:03:01:92:ed:8b:03:
72:07:cc:35:9c:24:07:35:42:f9:f0:f5:65:9f:64:2c:3f:07:
a5:b3:5b:fa:ef:fc:47:57:63:6c:dd:fe:cb:14:11:c5:f7:f9:
60:48:1f:ab:6e:e6:fc:45:dd:ed:11:71:10:7e:a8:e6:4b:66:
e4:89:e1:b9:c5:1c:cd:3b:50:4b:d4:02:75:51:97:48:a8:b1:
92:73:b4:6f:48:94:93:3f:c1:9e:b1:04:05:45:c8:2e:72:39:
04:1d:ce:f7:5b:36:4f:e2:24:e0:be:42:e8:59:b8:50:5f:e7:
f1:bb:52:4a:a4:d8:65:0e:4a:c3:64:bc:e8:9e:2c:66:4c:d5:
af:80:b3:0c:5f:d6:93:9a:aa:60:64:65:cc:e8:a6:19:5e:78:
c6:96:e9:76:98:1c:fe:71:df:47:57:ed:7d:22:11:4a:7b:e3:
d3:49:dd:cf:50:33:df:85:ca:e5:53:9d:20:67:3a:0f:4a:c3:
ee:bc:a0:dd:d9:9c:da:c9:ea:18:8d:7a:76:f5:26:02:94:14:
8b:a3:ea:b3:54:56:b4:70:9b:ec:64:a8:39:42:59:ca:bb:1e:
79:7b:2f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:14:09 2026 by rpki-client