Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
File: SGiJzk60_XR4GCSDld5fuT0f4UI.mft (raw, json)
Hash identifier: wCWOSG2nmLI16Mp8zOaPywAGrFZHIm/AR7TNDEJNSRw=
Subject key identifier: 76:6D:2F:60:D1:08:1F:50:00:24:2A:9F:8F:C0:2B:ED:C8:69:2B:9D
Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
Certificate issuer: /CN=486889ce4eb4fd747818248395de5fb93d1fe142
Certificate serial: 019D37890515E6869C4D0E8FECCA3F915C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
Manifest number: 040C
Signing time: Sun 29 Mar 2026 03:00:19 +0000
Manifest this update: Sun 29 Mar 2026 03:00:19 +0000
Manifest next update: Mon 30 Mar 2026 03:00:19 +0000
Files and hashes: 1: 9Szxj7ksKuCXA-mU4WJw6FwBa-8.roa (hash: dbreI6iiuCYJc1Zi2XdOuKeWZjsIDBcTLiyZ8rQ+QKg=)
2: SGiJzk60_XR4GCSDld5fuT0f4UI.crl (hash: n/o4WIbnis3wl+zOi+ZmevdFBoF5cj09YGbneyjxH7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:05:15:e6:86:9c:4d:0e:8f:ec:ca:3f:91:5c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142
Validity
Not Before: Mar 29 03:00:19 2026 GMT
Not After : Mar 30 03:00:19 2026 GMT
Subject: CN=766d2f60d1081f5000242a9f8fc02bedc8692b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:2d:19:6b:32:7e:6e:b1:ae:81:39:2a:f8:ac:
2c:ba:b3:87:71:26:2e:0b:80:80:32:21:fd:72:d5:
90:11:23:28:b3:db:74:35:1a:da:38:c4:90:59:f7:
ec:d4:1b:53:6c:1c:c0:ef:16:a6:94:19:90:d8:5a:
45:05:45:b3:d1:5b:eb:20:b0:1e:91:53:d0:7b:b8:
a3:d0:33:5d:73:ec:99:65:f3:3f:d9:27:9d:ae:a9:
4f:b0:d0:7c:c3:33:7e:3f:ea:cd:0e:64:f4:7d:3a:
13:10:2c:1a:e7:4e:9e:b3:7e:3a:bb:4c:7b:20:1c:
b5:b6:0d:ea:9e:94:81:50:84:6f:2d:3e:35:60:ac:
74:83:57:86:65:9e:8a:f9:36:47:6f:bf:f1:2a:8e:
a1:2f:99:85:26:dd:a0:6f:4e:00:94:1e:87:0f:5e:
1d:8c:e8:11:71:e4:cd:67:90:c3:0a:d6:ba:32:c5:
9b:ed:d0:12:4a:37:dd:57:23:36:74:a4:ce:67:f0:
69:9c:7b:ed:ee:66:a1:4f:10:58:db:8b:54:41:52:
2e:7c:0b:d6:00:00:b4:ce:60:aa:2b:86:a5:b8:c7:
60:9e:23:1c:1d:4e:e6:6c:59:7b:ed:43:0b:74:74:
db:8c:cd:7f:4a:51:c1:fb:bc:5f:64:63:da:d5:ad:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6D:2F:60:D1:08:1F:50:00:24:2A:9F:8F:C0:2B:ED:C8:69:2B:9D
X509v3 Authority Key Identifier:
keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:60:ad:22:c0:5f:e4:e6:d5:14:ce:2b:81:ba:61:a4:7f:2c:
28:69:6c:b2:b4:7e:9d:d4:6b:99:ca:78:8e:e3:3b:48:90:e1:
5c:1f:8b:27:40:59:60:66:74:a4:81:a5:f9:f1:15:aa:8b:6f:
d5:d0:64:95:29:09:57:92:ba:68:32:18:e5:2c:df:79:a5:b1:
b5:60:f4:08:42:73:85:23:8f:d2:73:0d:b5:b7:5b:5f:4f:f0:
2c:7f:d8:db:aa:65:5e:76:87:d1:9e:73:4d:47:ce:8b:46:b9:
cd:57:ed:85:8c:8c:42:79:36:fb:da:9e:34:c1:03:23:25:38:
92:a5:35:e2:e0:7a:f1:66:eb:38:b9:3e:74:ec:c0:05:79:5e:
7f:22:da:37:46:4b:a4:f3:f4:d1:9f:7e:21:75:dd:1e:46:3a:
73:72:00:2a:95:a1:50:62:a4:29:b3:31:fb:2e:8a:3e:ed:7e:
b5:43:54:b8:f4:80:27:8d:1a:ca:1b:e4:8f:0e:77:7c:99:16:
b6:af:b3:bd:fc:89:a6:a5:8d:75:2c:fe:59:fc:30:9c:e9:3d:
6f:fe:79:fd:95:60:bc:1e:0d:8f:c8:54:4e:01:df:dc:a6:ef:
10:80:64:f0:39:41:45:3d:ce:c9:59:8f:76:e1:00:5c:5e:1e:
1a:f9:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:40:35 2026 by rpki-client