Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
File: SGUQoxFpcvztleiova_W5FXe0Lo.mft (raw, json)
Hash identifier: 8/Sp+7ynFT6zW5gkdZJcUcOTGDQlo386nASZmKEuCSs=
Subject key identifier: 05:69:3A:8D:D4:C0:71:36:5E:9C:08:44:CF:1A:B3:8B:1C:01:E7:8B
Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
Certificate issuer: /CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Certificate serial: 019FAD1AA83D8A77705A849B2B65BE4E64E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
Manifest number: 19DA
Signing time: Wed 29 Jul 2026 09:00:33 +0000
Manifest this update: Wed 29 Jul 2026 09:00:33 +0000
Manifest next update: Thu 30 Jul 2026 09:00:33 +0000
Files and hashes: 1: 1-_tolY0Ku6cjK7uWuGIDT-aOsUM.roa (hash: zHmw/JUfBT58tzI52qKI6ZXBHiMslg81gZfcAbrW9BY=)
2: 1cDQdypkn0cjo9FfkDhM0paatNY.roa (hash: +ByPIkalEzr2Rwt/bFmRxra3ZwfCDb/OP1YXhCyI2zk=)
3: SGUQoxFpcvztleiova_W5FXe0Lo.crl (hash: kUIklvLrBAWQrTVp7D+9xliCp0kGYBbDDyTh8VYBQBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:a8:3d:8a:77:70:5a:84:9b:2b:65:be:4e:64:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Validity
Not Before: Jul 29 09:00:33 2026 GMT
Not After : Jul 30 09:00:33 2026 GMT
Subject: CN=05693a8dd4c071365e9c0844cf1ab38b1c01e78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:a5:5b:94:81:60:95:c3:e1:27:c8:81:6e:
bc:ee:08:6d:e0:c2:6f:be:f3:3b:81:63:35:e7:e3:
64:6b:55:37:c9:5f:6a:70:15:d8:be:8f:0f:1e:22:
24:c0:7c:87:b5:46:3b:0a:b8:e5:84:6d:ba:39:aa:
df:80:8c:f0:fa:61:ec:8b:a3:e1:8b:f1:f3:a7:de:
90:8f:2d:48:79:b3:b6:ec:9c:b6:1f:7a:b7:a0:30:
2d:43:b2:de:9a:5e:48:48:2d:c0:32:dd:02:3b:17:
b6:0c:a0:71:bf:06:06:9c:42:3e:9b:a8:63:df:a9:
55:af:3f:be:e1:52:83:56:0a:b7:6f:f0:ed:51:8c:
3e:45:d7:a7:7a:a6:06:eb:8b:9f:a9:5f:65:61:36:
e8:76:a0:bf:11:af:43:92:5a:11:5e:73:6a:8a:81:
b2:90:38:24:cf:4f:a2:84:72:ea:37:ce:e7:1c:d9:
11:cf:00:70:23:dd:49:fe:ec:2c:b9:b0:56:eb:8d:
69:73:59:7b:bc:89:d9:78:0f:47:bd:c2:73:49:02:
61:80:d1:ea:22:b7:d3:a6:84:13:8c:18:22:4d:3b:
3b:a9:77:28:05:19:08:09:24:cf:7f:ce:94:a0:bf:
8c:05:38:83:39:0e:63:4c:66:ae:ff:37:37:73:e1:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:69:3A:8D:D4:C0:71:36:5E:9C:08:44:CF:1A:B3:8B:1C:01:E7:8B
X509v3 Authority Key Identifier:
keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ca:ad:ce:12:46:02:3c:50:7b:34:c6:e7:34:82:63:f0:65:
c2:29:65:f0:da:ec:83:5d:c7:a1:61:0d:ec:42:5c:5e:c0:f5:
54:24:68:6d:1a:70:ed:9b:9f:07:9f:70:4d:25:e7:da:8b:e7:
69:e3:00:da:99:28:af:d3:0b:a0:d1:c0:ef:96:9d:ee:56:09:
ef:d6:e4:7f:b3:f0:2d:ee:e2:31:e4:5b:6c:93:09:44:10:3a:
31:76:83:15:b7:cf:02:cc:00:8a:bb:1a:dc:3f:25:39:a9:ce:
94:76:ca:3f:00:6b:3d:64:32:53:c9:4a:54:7e:8e:a2:56:cf:
81:41:23:d7:e9:88:99:b7:12:b6:18:00:64:ca:ac:21:44:06:
d4:40:c8:97:a5:44:47:92:b7:44:86:66:a7:a4:e4:41:3c:6b:
d7:d5:53:d9:7c:3c:8b:c9:93:b0:ed:34:db:78:99:14:06:22:
75:62:ac:34:ec:e6:44:84:a5:a3:d5:cf:9b:c2:89:47:4b:68:
0d:32:42:48:61:6f:46:14:4d:27:de:72:1f:f6:f4:cd:07:08:
31:26:be:a5:74:71:86:d4:70:54:6b:09:75:c2:30:47:c8:34:
f6:0e:51:8c:29:d0:34:0f:f9:1a:99:ff:5b:10:62:25:3e:40:
fb:12:8f:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGqg9indwWoSbK2W+TmTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NjUxMGEzMTE2OTcyZmNlZDk1ZThhOGJkYWZkNmU0NTVk
ZWQwYmEwHhcNMjYwNzI5MDkwMDMzWhcNMjYwNzMwMDkwMDMzWjAzMTEwLwYDVQQD
EygwNTY5M2E4ZGQ0YzA3MTM2NWU5YzA4NDRjZjFhYjM4YjFjMDFlNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmSlW5SBYJXD4SfIgW687ght4MJv
vvM7gWM15+Nka1U3yV9qcBXYvo8PHiIkwHyHtUY7CrjlhG26OarfgIzw+mHsi6Ph
i/Hzp96Qjy1IebO27Jy2H3q3oDAtQ7Leml5ISC3AMt0COxe2DKBxvwYGnEI+m6hj
36lVrz++4VKDVgq3b/DtUYw+RdeneqYG64ufqV9lYTbodqC/Ea9DkloRXnNqioGy
kDgkz0+ihHLqN87nHNkRzwBwI91J/uwsubBW641pc1l7vInZeA9HvcJzSQJhgNHq
IrfTpoQTjBgiTTs7qXcoBRkICSTPf86UoL+MBTiDOQ5jTGau/zc3c+EiQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVpOo3UwHE2XpwIRM8as4scAeeLMB8GA1UdIwQY
MBaAFEhlEKMRaXL87ZXoqL2v1uRV3tC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hZWFlM2YtYWY0ZC00ZWVlLWIyODQt
YTVmNmMwYWExMWRlLzEvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hZWFlM2YtYWY0ZC00ZWVlLWIyODQtYTVmNmMwYWExMWRl
LzEvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsqtzhJG
AjxQezTG5zSCY/Blwill8Nrsg13HoWEN7EJcXsD1VCRobRpw7ZufB59wTSXn2ovn
aeMA2pkor9MLoNHA75ad7lYJ79bkf7PwLe7iMeRbbJMJRBA6MXaDFbfPAswAirsa
3D8lOanOlHbKPwBrPWQyU8lKVH6OolbPgUEj1+mImbcSthgAZMqsIUQG1EDIl6VE
R5K3RIZmp6TkQTxr19VT2Xw8i8mTsO0023iZFAYidWKsNOzmRISlo9XPm8KJR0to
DTJCSGFvRhRNJ95yH/b0zQcIMSa+pXRxhtRwVGsJdcIwR8g09g5RjCnQNA/5Gpn/
WxBiJT5A+xKPow==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:16:29 2026 by rpki-client