Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File: SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier: AsEoMp4km12vbwKmQWdg0AfDVlgDBS0gV4m1wEbo/8c=
Subject key identifier: 3A:5C:9B:13:3B:D6:F7:AE:00:9E:D2:F6:51:18:BB:38:19:AC:B6:6B
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial: 019FF67E07A5AC6853D208EDBF1CC286E759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number: 19E4
Signing time: Wed 12 Aug 2026 15:01:22 +0000
Manifest this update: Wed 12 Aug 2026 15:01:22 +0000
Manifest next update: Thu 13 Aug 2026 15:01:22 +0000
Files and hashes: 1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: o8bkidkbd4CzL7LQwWRpHM0Hj7c92k48AkxUcW4otKs=)
2: r_1SBfNhdBcm7JVeR9X_A84AJes.roa (hash: 5FQO7eCKudZ+J7HgNfZUcYEMcJXj0nI8UpKfM1ybpwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:7e:07:a5:ac:68:53:d2:08:ed:bf:1c:c2:86:e7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Validity
Not Before: Aug 12 15:01:22 2026 GMT
Not After : Aug 13 15:01:22 2026 GMT
Subject: CN=3a5c9b133bd6f7ae009ed2f65118bb3819acb66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:77:fd:f2:18:22:cb:90:c4:3b:4c:96:51:
8f:43:bb:25:26:bf:81:e7:01:a9:75:8f:e1:74:f1:
1c:8f:f5:dd:f0:85:51:48:07:7f:b4:5c:03:ff:2c:
ba:ae:f9:e9:d3:5e:80:0c:87:38:04:77:cb:9c:19:
b8:03:30:db:67:b9:92:87:ab:41:5e:eb:b8:ab:57:
38:cd:c0:9b:58:3d:b7:a5:20:e0:97:fa:ca:d8:0e:
77:e4:b5:9b:4e:f5:a9:61:00:4a:f3:08:24:10:13:
12:b0:36:34:a4:7b:00:98:6f:68:ab:81:77:75:60:
ba:46:32:40:fa:66:bd:42:fe:03:0b:32:61:a0:10:
5b:48:b0:78:61:9c:dd:4d:db:94:24:23:72:c1:6b:
ec:aa:8d:f5:f5:4b:56:51:23:3e:40:3e:ea:33:f4:
b9:9b:85:c7:21:01:50:5d:f4:de:79:37:6b:02:2d:
76:13:3b:60:1f:d8:b7:b6:e9:cf:9b:7b:93:e0:31:
36:84:16:3e:fb:60:c8:c6:8a:aa:ee:4a:82:00:a3:
4c:f7:e5:18:ce:6e:f3:53:e4:a9:1f:cd:bd:2e:67:
ab:bb:90:47:12:51:9e:d6:43:cc:ff:14:c2:c9:aa:
f0:35:e8:f1:5c:b5:96:db:63:8c:40:04:fe:e0:9c:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5C:9B:13:3B:D6:F7:AE:00:9E:D2:F6:51:18:BB:38:19:AC:B6:6B
X509v3 Authority Key Identifier:
keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:32:1c:2a:54:f5:3d:2d:b8:a8:04:b3:69:db:45:32:c0:90:
67:eb:f5:b5:79:ce:8f:a9:99:87:ba:51:d1:a1:c3:f0:e0:f8:
d7:ed:07:e9:95:2d:f6:dd:9e:10:d6:1e:37:63:b4:28:4a:6f:
c2:bd:b3:3d:76:57:f6:35:1e:5a:bd:f1:b4:9e:7e:d9:7c:bf:
e7:35:6e:ec:67:b7:5a:0e:72:5c:d0:66:49:43:ff:b3:75:0e:
2c:6a:f7:76:f1:92:b7:b4:c2:69:c4:00:d7:50:15:ab:af:9f:
d5:fd:f3:14:1d:de:28:9e:1a:1f:86:bb:68:4d:2c:01:89:05:
2f:db:44:16:30:e4:4f:fe:f1:ae:1f:33:63:98:f2:53:36:32:
86:31:3a:4c:57:d8:4a:91:dc:48:f3:cd:1e:0b:eb:9e:51:14:
e2:71:6e:15:4e:21:b2:cf:92:85:3c:19:5f:4a:a9:e4:e0:9b:
5b:8d:a9:14:17:30:ed:d1:4d:cb:eb:c0:24:96:f4:9a:1e:df:
83:ea:68:fc:9b:aa:92:cb:35:07:30:4a:46:69:d1:a6:97:a4:
68:f6:3f:b7:eb:c8:e1:f3:25:56:36:5c:95:4b:34:e7:01:5b:
ed:75:60:a2:fa:3b:57:aa:90:7b:67:d5:07:f5:f3:f7:f1:da:
09:fa:a1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:15:17 2026 by rpki-client