Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File: SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier: KECd+I6vbLIWTEz+glsOmk1+XYpmdiEnU34Tr31NWG4=
Subject key identifier: F2:98:D0:EB:88:BD:A3:03:1A:EA:DF:01:9F:FE:06:15:C0:C4:8A:CC
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 019DD087B3F36A726911692911DFC6F6A08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number: 16DD
Signing time: Mon 27 Apr 2026 20:00:47 +0000
Manifest this update: Mon 27 Apr 2026 20:00:47 +0000
Manifest next update: Tue 28 Apr 2026 20:00:47 +0000
Files and hashes: 1: 32houEZJjYMHYgPuRqIg-2gVrRU.roa (hash: SgYOhNo4HZLgeATCDQYMmqSzEM1MXHyJPN6hUBC7MIM=)
2: JnkLx50ImRIwe6DLwjoBPmLJiIM.roa (hash: ZgcI3W3bS8GffqjlQ449bvcUFmbTNqw4WdF2nIUN8ao=)
3: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: DCsF0Zl07P0PkP3PWHcgV6+gnSLvN/Lrd7ngbv5ylzU=)
4: TSB5mTZZzRTTPnt6-Y8o-3CQEPA.roa (hash: PsDTk/dMLVROLGkVcO0KwNjR8rb+3K2JtemVORHSo8Y=)
5: Vzeyp2a_2ybj2YU-0i2OoZlnwnI.roa (hash: OMd6zbL5MprZ3M6eB+ZY4S4Gxx6gPSlVJAESUBQW+L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:b3:f3:6a:72:69:11:69:29:11:df:c6:f6:a0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Apr 27 20:00:47 2026 GMT
Not After : Apr 28 20:00:47 2026 GMT
Subject: CN=f298d0eb88bda3031aeadf019ffe0615c0c48acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:b0:17:f1:94:ac:6f:aa:eb:db:91:af:d1:
be:2f:e4:df:97:27:f5:30:bd:55:92:1c:5b:8a:18:
5b:e7:88:26:98:f8:cc:cd:bf:58:8c:5a:07:df:fb:
34:9b:80:0e:c2:17:5b:d0:ea:29:0d:03:f8:a8:f0:
30:85:c5:1d:90:76:d4:db:89:5a:96:b9:ef:e6:f2:
1a:49:b5:04:21:de:44:d3:24:03:4e:17:5c:4d:9b:
46:31:5f:5e:c7:7a:82:6e:65:d0:99:1b:11:f5:93:
18:49:50:7e:0a:22:56:ed:0c:9b:8a:88:7e:cb:29:
91:19:55:55:48:b3:8e:47:c1:ef:fb:de:6c:8f:dd:
ba:fb:75:4a:e5:a0:e6:fe:70:c5:48:db:9d:fa:49:
08:49:07:ed:e6:8b:a5:4f:84:71:c4:4a:c0:02:2d:
64:a6:7e:77:66:a4:f1:dd:45:78:36:30:d0:08:c8:
c5:d9:56:27:bc:fe:e4:44:a9:31:bb:e2:da:65:d8:
46:ce:7e:8f:59:07:ad:92:c7:7e:1f:dc:26:8b:f6:
37:68:bc:92:e6:da:93:8a:6f:a4:d6:ec:6c:f8:4e:
c7:7e:37:46:6b:16:ac:77:cb:69:0a:30:95:fe:73:
79:45:c0:63:e9:88:d7:95:e2:48:76:6c:dc:04:6d:
02:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:98:D0:EB:88:BD:A3:03:1A:EA:DF:01:9F:FE:06:15:C0:C4:8A:CC
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d6:33:e3:b4:1a:8b:6c:e4:b9:4a:d0:33:d2:c4:b7:f8:70:
b0:8d:89:1d:36:56:0e:19:bd:41:12:08:95:c0:e9:0b:4e:ac:
79:13:67:5f:d7:4c:2e:b9:82:6c:e2:a5:54:25:25:61:02:39:
b3:7d:2c:79:62:70:a3:23:de:12:7c:ab:6b:10:7e:87:0c:fa:
af:e1:27:fe:a5:1d:09:07:83:c4:20:20:be:02:44:bc:72:d9:
8a:39:f9:9a:9f:46:09:6e:45:6e:ff:35:40:c7:77:5f:f5:01:
cc:38:76:33:83:ba:f8:d3:64:bd:ad:6f:2c:d0:02:b2:75:9d:
6e:27:22:54:73:a5:ee:9d:d7:9b:f0:b8:ba:cb:00:27:df:0d:
c4:8a:63:4c:6b:93:67:3f:d6:cd:22:18:f8:94:fa:75:c5:f3:
05:a0:fc:1e:a8:98:8b:fd:50:8e:8a:9a:86:58:03:b0:9d:f8:
41:32:c0:3e:1e:01:55:bf:c3:9a:47:82:4d:2f:94:d5:f6:5d:
b6:f2:f3:2d:d1:62:db:e3:4c:01:74:22:74:80:c2:fe:1d:85:
b3:08:c6:e5:f3:e3:85:ab:50:c5:e4:5e:28:d7:00:44:53:2d:
c4:65:b0:57:cd:07:03:2c:23:fa:6e:7d:b8:19:38:e0:77:90:
9b:46:a3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:44:56 2026 by rpki-client