Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File: SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier: kRZiLiaDyCYfnHmWwBY6ewYMchMvJuEeRKMtUZVLjj8=
Subject key identifier: D8:00:F9:7B:F7:A9:48:28:2C:D3:E6:64:36:77:31:03:DB:0E:92:39
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial: 019D397796F9D30F577B42377B596D1C7B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number: 1879
Signing time: Sun 29 Mar 2026 12:00:31 +0000
Manifest this update: Sun 29 Mar 2026 12:00:31 +0000
Manifest next update: Mon 30 Mar 2026 12:00:31 +0000
Files and hashes: 1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: RxnaMumbWtZl4d8SvA+OLf1HNF6eN8JyssTv/Ox6qRA=)
2: r_1SBfNhdBcm7JVeR9X_A84AJes.roa (hash: 5FQO7eCKudZ+J7HgNfZUcYEMcJXj0nI8UpKfM1ybpwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:96:f9:d3:0f:57:7b:42:37:7b:59:6d:1c:7b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Validity
Not Before: Mar 29 12:00:31 2026 GMT
Not After : Mar 30 12:00:31 2026 GMT
Subject: CN=d800f97bf7a948282cd3e66436773103db0e9239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:f7:f4:cc:20:e1:f0:1d:58:4f:0e:02:1c:
72:11:1d:66:af:dd:74:4d:39:ea:fc:3b:cf:d9:57:
b7:fa:5d:b7:4e:8e:e2:31:e5:be:62:39:a5:cb:61:
7a:30:b7:61:e8:b2:a0:36:ee:a3:a7:22:78:84:19:
bf:0a:96:4c:b0:96:bd:6d:c4:ee:81:20:58:39:ea:
da:ea:12:e7:18:74:05:28:98:fd:8f:eb:46:d2:70:
36:8f:d8:99:c7:3a:ed:cd:c4:21:46:56:a9:6a:ab:
4e:71:8f:90:cd:4e:e9:eb:2f:17:85:7d:f8:c2:e4:
c2:5d:41:9e:d8:2b:88:2a:01:57:68:2c:52:e5:e0:
11:c1:79:15:08:d1:b7:c5:93:a7:06:ff:be:b0:05:
6e:ba:08:7b:de:1e:66:3c:f0:98:f5:17:ff:6c:37:
8d:43:03:e6:26:54:19:6b:de:b0:d3:2f:29:cf:bf:
f6:df:52:29:90:8c:b2:77:0d:15:d9:19:87:d9:64:
3a:33:68:cf:08:aa:a6:e3:1c:85:e7:59:a7:b4:51:
1a:df:ef:cf:97:e0:60:1c:65:57:26:0e:27:17:a7:
78:2c:f2:b8:62:97:84:83:f7:92:4e:2a:e0:d0:10:
b9:41:84:8e:8d:ac:c4:7f:86:05:3b:67:b2:8a:35:
3a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:00:F9:7B:F7:A9:48:28:2C:D3:E6:64:36:77:31:03:DB:0E:92:39
X509v3 Authority Key Identifier:
keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b6:30:bc:06:da:00:c7:80:88:90:66:0b:ef:00:35:17:8d:
af:06:88:45:7d:b3:34:ff:4e:0c:41:86:1d:59:b2:b0:e9:a7:
5d:01:19:f9:18:4e:b7:de:d3:cb:90:11:8b:2d:69:9e:c6:a4:
ae:65:0d:03:a2:a9:32:16:69:c5:f4:70:7d:58:b6:9a:92:df:
82:cf:26:af:2e:bc:fa:13:40:3e:10:48:6c:7d:06:7d:65:91:
a7:2e:d4:98:d7:c4:b7:41:c7:4e:78:d8:e0:b0:ed:a3:f5:61:
5d:7d:9b:75:c0:11:80:e1:ec:58:bf:fb:5c:3f:6d:96:e9:67:
a1:be:2a:63:5c:25:30:51:31:6d:8c:e0:da:e8:53:41:40:1b:
3c:43:76:b5:54:b7:8e:e4:3b:ce:e6:21:ad:1d:0e:fd:46:59:
27:23:60:a1:ba:f2:e1:9f:1c:11:e9:a5:97:b0:e3:3a:91:0b:
25:01:dd:4f:4f:9b:db:93:2b:69:bb:e3:a9:1d:8b:dc:25:2e:
5b:dd:80:53:77:e2:09:21:b4:28:05:ec:ff:41:01:71:ea:48:
7c:6f:b9:c6:0e:be:53:df:29:98:e6:80:6f:0d:83:2e:81:f4:
15:12:11:53:97:79:33:b3:9a:5f:41:b8:90:02:32:b8:1d:30:
0d:b3:d3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:29 2026 by rpki-client