Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
File: SglzwfRD7EqDh6rXrKddB7b6qdo.mft (raw, json)
Hash identifier: 5LrKo6MuaIbgafHqlmdtnUO9AD5fB1K+CoBMTAJO3ps=
Subject key identifier: 8A:A7:D4:0B:BA:3D:C4:B5:1E:A2:D0:6D:54:96:40:A8:C3:1E:D0:D4
Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
Certificate issuer: /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Certificate serial: 019D38D3515C60A61ABD0CE02B5763284F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 09:01:06 +0000
Manifest this update: Sun 29 Mar 2026 09:01:06 +0000
Manifest next update: Mon 30 Mar 2026 09:01:06 +0000
Files and hashes: 1: SglzwfRD7EqDh6rXrKddB7b6qdo.crl (hash: S992u0RUcwU3YA8z0/WQ9zHJQYNez3FOMZYU6VKDd+I=)
2: qSwrp68FpZz4UWbhcFj7tZ9wjAg.roa (hash: 9FJcSNnr7pqbVbKrD5HrCnLrSIAQlMcpTOG8uf3lID4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:51:5c:60:a6:1a:bd:0c:e0:2b:57:63:28:4f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Validity
Not Before: Mar 29 09:01:06 2026 GMT
Not After : Mar 30 09:01:06 2026 GMT
Subject: CN=8aa7d40bba3dc4b51ea2d06d549640a8c31ed0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:c5:ad:64:af:0c:c4:6d:43:4e:fd:f0:df:
05:d7:e5:ba:bc:e3:c6:ef:b9:84:69:30:19:10:7a:
7d:b4:7d:1a:47:d6:ad:c1:fb:f5:9e:e3:52:71:53:
36:aa:c2:8d:2c:88:fe:aa:ac:a9:13:fc:aa:34:c6:
12:3f:9e:6b:76:b3:d1:c2:5e:fe:ce:e5:29:31:9d:
9b:b0:71:f5:88:08:80:ac:02:8e:c0:ad:28:e8:27:
b4:a8:72:31:a6:e0:03:44:ea:82:bd:0b:55:19:60:
35:6e:8e:e2:19:83:95:68:a1:f9:44:0a:d9:d0:d5:
ee:95:48:37:d3:27:2e:1d:27:4d:bc:41:35:32:9d:
da:5d:12:65:c3:2b:55:67:e2:9d:65:e7:04:38:69:
c7:63:73:1e:0f:50:67:79:9f:9b:aa:bc:dc:85:21:
c8:61:a6:99:5d:55:50:f0:47:a1:c4:e3:7d:45:00:
6b:fb:96:a3:8f:28:05:d1:8d:14:1b:ea:26:b5:83:
93:41:f2:6c:5e:d2:fa:42:42:bc:b7:1c:70:cf:f0:
27:1f:29:55:67:c1:17:1d:9c:21:f7:9c:ac:d3:8e:
a9:45:42:09:4d:31:9a:8d:40:f4:46:79:93:2f:c3:
83:f0:9a:25:a3:7d:44:37:df:43:70:52:a2:99:1f:
1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A7:D4:0B:BA:3D:C4:B5:1E:A2:D0:6D:54:96:40:A8:C3:1E:D0:D4
X509v3 Authority Key Identifier:
keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:77:c7:cc:3f:37:77:82:6b:7d:0f:89:d6:3a:73:d9:d5:52:
fb:7a:cf:ea:df:e9:6f:fe:df:d8:98:3a:1f:ca:28:be:5a:01:
60:db:e5:ec:c7:67:54:90:af:22:82:3e:2b:72:c0:cb:63:68:
2d:7b:ba:e4:57:60:cf:8d:eb:6f:b5:2f:2c:8c:1d:7a:6e:f0:
eb:5b:ab:34:54:70:71:a5:52:ff:51:9c:47:3c:f5:1a:93:f6:
a8:62:ca:98:08:51:dc:6d:d0:43:b1:c7:2c:81:34:09:07:e3:
7c:0f:f3:d3:16:3a:82:c2:5a:8a:91:24:8a:af:0e:8e:ac:81:
57:e4:70:75:71:75:19:d1:26:24:0f:bd:2a:f2:27:51:10:78:
53:f9:74:21:d9:59:8d:64:8f:8f:21:b8:ec:51:a1:8b:6d:bc:
02:ba:dd:97:70:32:84:8c:53:8e:40:7d:36:9b:02:6f:46:cb:
f7:8d:63:d6:dc:f3:b2:36:24:79:27:cb:79:fc:75:0f:fd:41:
d9:a7:3e:e4:b0:04:30:93:d6:3b:72:87:1a:30:25:de:ba:b4:
97:13:96:19:d1:7a:50:02:d0:65:89:f2:05:21:dc:0b:13:49:
c8:86:b5:b6:da:00:a8:d5:01:93:a4:2c:fe:9e:37:0c:71:58:
8a:08:b0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:10 2026 by rpki-client