
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File: SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier: wBtuokNVfTBkjYws3aAT60jSP3ttAadJrkx8oQsx0aI=
Subject key identifier: 18:2B:03:E8:01:1B:67:63:E9:33:D2:2E:FF:25:30:5A:6A:6D:45:DD
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial: 01A1163C529122EC9EFEE0D308F51987739B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number: 1A79
Signing time: Wed 07 Oct 2026 12:00:14 +0000
Manifest this update: Wed 07 Oct 2026 12:00:14 +0000
Manifest next update: Thu 08 Oct 2026 12:00:14 +0000
Files and hashes: 1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: i+b5E4P3MBBAU8D1ROkDSBHStAaDg06WKeTuTfYM4qA=)
2: r_1SBfNhdBcm7JVeR9X_A84AJes.roa (hash: 5FQO7eCKudZ+J7HgNfZUcYEMcJXj0nI8UpKfM1ybpwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:3c:52:91:22:ec:9e:fe:e0:d3:08:f5:19:87:73:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Validity
Not Before: Oct 7 12:00:14 2026 GMT
Not After : Oct 8 12:00:14 2026 GMT
Subject: CN=182b03e8011b6763e933d22eff25305a6a6d45dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:46:40:6a:ff:3b:5a:8c:33:51:83:02:82:
d4:ea:fc:db:3e:99:52:25:26:87:64:91:43:71:3f:
8d:fa:22:41:8a:c7:9b:0e:0e:9f:6f:f5:c2:2d:fc:
c7:c9:17:84:f5:d9:b5:57:47:2c:89:24:b0:32:bb:
43:f3:37:b5:71:ee:14:c6:1a:ce:10:8e:c1:72:c5:
e1:c0:ad:62:3b:4f:df:b6:44:de:af:13:2d:b2:0d:
b0:18:03:82:ad:8b:60:63:99:ca:71:a5:82:19:22:
09:1e:d9:6c:e0:61:aa:90:e9:30:03:29:ed:e4:7e:
2b:31:0d:14:17:10:7b:d2:65:61:7c:fd:c1:ae:be:
84:14:c6:31:73:35:df:31:4e:d4:d6:89:f3:51:2b:
27:86:b8:24:37:9b:4d:67:f1:22:89:3a:f2:fc:86:
c8:57:d5:1a:a5:ed:3d:ce:4e:ae:4c:b1:df:bb:37:
d9:d7:5e:05:24:d5:de:53:e0:c0:61:d6:5e:ae:06:
44:97:48:d1:ef:8b:17:7b:58:aa:a0:2e:6f:48:21:
0c:42:5c:9b:ed:99:d0:98:32:0d:c2:99:69:56:70:
44:d8:35:02:cd:88:69:60:78:49:6e:5d:9f:f7:cb:
10:69:0f:f5:d1:d8:58:80:bb:84:55:1f:03:06:80:
f8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2B:03:E8:01:1B:67:63:E9:33:D2:2E:FF:25:30:5A:6A:6D:45:DD
X509v3 Authority Key Identifier:
keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fe:a7:99:78:17:db:28:74:c3:32:a9:ce:e5:cf:7d:a7:2b:
96:00:26:15:ae:ff:d2:f5:9b:df:0d:fd:d2:78:2c:41:a4:08:
1e:22:52:45:ed:d3:59:55:61:f8:5f:1c:45:d1:27:fb:9a:e5:
9a:a2:2d:89:80:6d:a0:c6:61:aa:43:15:f4:f4:8f:96:fa:a3:
0c:96:d9:53:fc:6e:43:10:8c:9e:1a:34:1d:9e:fa:d4:64:3c:
c7:4e:00:1f:0a:50:a0:c6:92:b2:a5:a7:0e:e6:ef:9a:83:cb:
54:91:ca:91:e9:cb:04:62:7a:cf:4a:3c:84:84:58:4a:dc:90:
a4:ea:6b:35:71:b8:60:66:98:b8:eb:dc:8c:aa:0a:85:be:f4:
d1:e3:95:10:41:70:67:a7:2a:6d:72:bb:89:bc:cf:c2:44:bc:
18:d8:be:ad:a2:32:fe:c4:9a:7e:56:6a:14:ea:cf:79:18:86:
12:d0:71:b3:a7:dc:04:6d:dd:d5:37:37:1e:26:73:16:45:d9:
10:db:5b:2c:a8:d9:0c:a2:ec:76:bc:e6:af:97:70:b5:95:ad:
3a:fe:62:a0:4a:d2:31:1e:96:55:bd:50:94:77:dd:a6:a3:7b:
52:63:5d:11:8c:ff:9c:49:41:26:14:bf:f6:9d:b3:d4:01:5c:
20:7b:3a:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEWPFKRIuye/uDTCPUZh3ObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjgwNjk3ZmUyZTJkOTdiNTkxYWQ1YjkxNTgwNTU1YTQ0
ZDAzODgwHhcNMjYxMDA3MTIwMDE0WhcNMjYxMDA4MTIwMDE0WjAzMTEwLwYDVQQD
EygxODJiMDNlODAxMWI2NzYzZTkzM2QyMmVmZjI1MzA1YTZhNmQ0NWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtERGQGr/O1qMM1GDAoLU6vzbPplS
JSaHZJFDcT+N+iJBisebDg6fb/XCLfzHyReE9dm1V0csiSSwMrtD8ze1ce4UxhrO
EI7BcsXhwK1iO0/ftkTerxMtsg2wGAOCrYtgY5nKcaWCGSIJHtls4GGqkOkwAynt
5H4rMQ0UFxB70mVhfP3Brr6EFMYxczXfMU7U1onzUSsnhrgkN5tNZ/EiiTry/IbI
V9Uape09zk6uTLHfuzfZ114FJNXeU+DAYdZergZEl0jR74sXe1iqoC5vSCEMQlyb
7ZnQmDINwplpVnBE2DUCzYhpYHhJbl2f98sQaQ/10dhYgLuEVR8DBoD4zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgrA+gBG2dj6TPSLv8lMFpqbUXdMB8GA1UdIwQY
MBaAFEn4Bpf+Li2XtZGtW5FYBVWkTQOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yNGRmNzItZmNjYy00OGRmLWE1YWUt
MWE2NGE4MDc3YjE0LzEvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8yNGRmNzItZmNjYy00OGRmLWE1YWUtMWE2NGE4MDc3YjE0
LzEvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfv6nmXgX
2yh0wzKpzuXPfacrlgAmFa7/0vWb3w390ngsQaQIHiJSRe3TWVVh+F8cRdEn+5rl
mqItiYBtoMZhqkMV9PSPlvqjDJbZU/xuQxCMnho0HZ761GQ8x04AHwpQoMaSsqWn
DubvmoPLVJHKkenLBGJ6z0o8hIRYStyQpOprNXG4YGaYuOvcjKoKhb700eOVEEFw
Z6cqbXK7ibzPwkS8GNi+raIy/sSaflZqFOrPeRiGEtBxs6fcBG3d1Tc3HiZzFkXZ
ENtbLKjZDKLsdrzmr5dwtZWtOv5ioErSMR6WVb1QlHfdpqN7UmNdEYz/nElBJhS/
9p2z1AFcIHs6YQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 16:38:12 2026 by rpki-client