Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
File: SGgL3la9O_VhV4oP4QjLwcanWds.mft (raw, json)
Hash identifier: MSZhmyGRava7TCLnf3a15NBIKWkhkzrjC7+lPR8gkCY=
Subject key identifier: 97:E9:AF:72:21:65:16:03:B3:8E:94:F8:3B:C3:1D:55:B8:27:14:D0
Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Certificate serial: 019D3909D618792F2CB895CBB0B2CA362AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
Manifest number: 0D0F
Signing time: Sun 29 Mar 2026 10:00:39 +0000
Manifest this update: Sun 29 Mar 2026 10:00:39 +0000
Manifest next update: Mon 30 Mar 2026 10:00:39 +0000
Files and hashes: 1: 2qKpe107wG5JVGZmhM-9ulhsBNk.roa (hash: YqAbcKnhc9tQvPIiqsxdd96YUAj8t/cCoA1qvpRjwZc=)
2: SGgL3la9O_VhV4oP4QjLwcanWds.crl (hash: BtTCbLsaHpCBWkEllZcONEj5A9CvaxzlMpO6q8tXIyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d6:18:79:2f:2c:b8:95:cb:b0:b2:ca:36:2a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Validity
Not Before: Mar 29 10:00:39 2026 GMT
Not After : Mar 30 10:00:39 2026 GMT
Subject: CN=97e9af7221651603b38e94f83bc31d55b82714d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:9f:72:ed:8b:3f:6e:a1:46:3b:04:ed:d1:
78:ad:9d:19:05:63:f9:8b:3c:fc:1d:a0:d1:53:73:
5c:03:50:4a:42:c3:2f:5e:d1:dc:1c:fa:28:60:f9:
e0:6c:39:85:99:e2:44:2f:38:38:55:9a:93:c5:b8:
56:33:8c:f5:08:cf:21:33:a1:e0:1e:d9:85:37:d2:
9b:89:ee:ae:14:b9:ee:b7:93:81:23:fd:fe:46:f3:
30:d5:1e:57:73:5f:d7:7f:a3:14:b3:da:b9:ff:a9:
97:5e:4d:40:9f:9c:f7:c6:16:ce:69:50:d4:16:a2:
91:f2:0b:47:9b:dc:06:16:5d:79:ba:65:38:2e:9b:
92:06:ba:19:3a:de:38:a5:c0:7b:a5:0f:6b:ab:8d:
7e:a3:45:2d:5e:9c:c9:fe:47:91:33:10:30:07:27:
b7:36:f9:06:0e:14:8c:8f:5d:52:51:7b:ae:6a:2c:
7e:d1:a6:6f:4b:2e:00:bf:ba:85:05:a5:e1:88:e0:
c5:63:d8:69:75:8d:c7:59:51:fc:b1:63:80:a3:d6:
80:7f:46:3c:60:9c:17:70:a5:a9:a2:53:44:e5:5b:
8e:14:d6:1e:ad:c8:d6:dc:14:2e:2d:50:ab:5a:37:
6b:e0:0f:0a:26:a1:ed:e6:90:23:a6:a2:b3:49:d5:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E9:AF:72:21:65:16:03:B3:8E:94:F8:3B:C3:1D:55:B8:27:14:D0
X509v3 Authority Key Identifier:
keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c8:d4:a0:18:fc:05:70:f8:8c:f0:bb:94:f0:95:c1:e3:f7:
f5:eb:b1:80:20:87:e2:cc:23:a3:eb:04:04:1d:4a:45:62:f6:
53:c5:8c:8e:5c:33:04:a6:98:ba:ab:a8:8a:b9:c1:55:c0:46:
20:ae:60:9b:98:aa:b6:30:7a:be:d4:6d:7c:14:2d:55:47:19:
21:3e:30:26:fe:76:9f:63:aa:06:c2:14:3a:32:45:67:39:1a:
84:d4:7f:ee:e9:25:98:8e:1b:0e:24:ea:41:fd:eb:39:97:ed:
e1:b7:36:82:7c:d9:db:d5:44:a0:3e:52:73:28:8e:17:9b:e3:
6d:c1:28:1f:b2:21:10:77:83:26:e9:36:cb:0f:93:52:c9:8b:
a1:da:ef:8a:ef:e9:78:a7:b4:8a:da:73:fc:0f:09:b5:09:0d:
5f:d9:27:70:1f:2e:8f:30:f8:88:13:e2:f3:49:d2:ea:74:be:
11:21:57:24:01:17:cd:61:08:00:b7:56:1e:94:7e:e4:4c:a5:
dc:a5:8c:be:44:b3:52:9e:6e:65:c0:11:13:a3:8a:b2:63:9e:
25:a5:41:e8:bd:fe:23:85:12:e8:05:ae:3e:bc:99:14:b3:b6:
1e:ab:4e:19:0b:24:8e:76:de:e9:e3:af:63:58:78:a8:d6:16:
f4:81:d7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:43:08 2026 by rpki-client