Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
File: SGeaItDbyYDV1ZszNnn5ObmuPyU.mft (raw, json)
Hash identifier: 6EEAoxRM9iO5mUpRwPfVYp7oPG+BuSlTz4RSrYUOQqw=
Subject key identifier: CD:F1:66:9F:B5:1C:0F:CC:64:32:26:1F:E0:8F:C2:D2:43:C5:13:65
Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Certificate serial: 01A0D804558927261965C71D215341B7D8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 10:02:37 +0000
Manifest this update: Fri 25 Sep 2026 10:02:37 +0000
Manifest next update: Sat 26 Sep 2026 10:02:37 +0000
Files and hashes: 1: Cb3GNV7sEZagImQ0z2CzEtPQStc.roa (hash: WKt5YxPaUYaqlF+1A2ePA/t2PiJgruaRiTwSTzv9PKY=)
2: QgUGh2GJ1-JelSbN4pH0Q_1IOrw.asa (hash: JDQrvbF/UTSyK+KaVQFzmDlvQmxRQg7cAs9vDLu048g=)
3: SGeaItDbyYDV1ZszNnn5ObmuPyU.crl (hash: OX++0JglKOtK2XILiTP66pFqTSsvvAWTBAGkqRsONKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:55:89:27:26:19:65:c7:1d:21:53:41:b7:d8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Validity
Not Before: Sep 25 10:02:37 2026 GMT
Not After : Sep 26 10:02:37 2026 GMT
Subject: CN=cdf1669fb51c0fcc6432261fe08fc2d243c51365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:eb:5a:fb:56:20:c4:88:f1:ca:62:01:c9:
67:47:eb:28:6a:06:39:57:80:d3:f3:e5:a5:14:51:
2c:c1:f5:25:7f:cc:00:ba:e8:bd:12:24:7c:a0:91:
c5:58:ee:05:ce:be:65:ed:55:f7:aa:25:5e:64:3c:
2e:7f:58:38:97:a2:fe:94:d7:2e:1b:9a:9e:b5:a4:
82:83:c6:ea:8a:e2:67:6d:26:78:f1:d1:91:4a:43:
df:d2:ae:ad:cd:4b:56:4c:be:85:fc:2a:29:c0:27:
e0:41:40:e5:16:2a:8a:14:41:9c:3a:08:f4:c6:68:
8b:1b:cf:9c:0c:11:0b:0c:97:4e:e1:61:d8:d0:cc:
f6:82:8e:33:7d:8d:48:0b:38:7b:71:c3:89:ad:f6:
a0:35:79:95:e6:42:84:4e:b4:30:22:83:bd:1f:30:
83:40:ff:89:10:b5:6d:1b:4f:41:d6:c4:1d:a8:41:
ea:b6:94:57:a8:52:ab:0c:6a:67:7c:91:f5:08:43:
ca:41:94:3f:03:81:4c:4a:73:cb:43:fb:cd:fd:c8:
3c:81:b5:17:9d:bc:4d:6c:e2:66:ec:02:6c:a3:39:
d2:92:cb:a7:49:6b:07:a8:80:5c:d7:c8:11:43:19:
f9:88:e6:f3:f8:23:25:c2:b7:db:6c:00:4e:34:69:
83:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F1:66:9F:B5:1C:0F:CC:64:32:26:1F:E0:8F:C2:D2:43:C5:13:65
X509v3 Authority Key Identifier:
keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:38:5f:3c:3f:d3:77:f3:1e:30:88:94:96:2c:df:d2:74:ff:
52:49:65:31:e0:02:c4:13:06:dc:48:f7:7b:fc:21:a6:05:6c:
07:45:1d:04:ba:e1:75:7a:0f:36:66:df:e4:03:56:4e:c1:0a:
55:0d:17:72:34:a1:f7:fb:b9:50:8a:80:6f:f6:99:0a:10:f5:
f1:ff:4e:de:3a:b2:49:ed:6c:fd:18:d0:03:40:6a:75:dd:6c:
5d:40:0f:01:61:33:28:97:21:ef:72:ba:6d:c5:1b:83:4c:01:
f3:05:69:33:21:c0:40:45:8e:83:88:b0:7a:c3:c5:36:a7:51:
0e:d5:1e:d6:ca:b9:f0:f8:d7:33:57:9c:83:67:1a:21:c6:b7:
7c:a3:64:8a:3c:62:e1:9e:bd:b3:54:00:c3:dd:9c:16:21:a4:
8a:58:05:2c:91:9a:a9:13:55:13:f6:ca:ee:5e:b4:eb:10:6e:
8b:bd:aa:c9:c4:c5:5e:39:5c:07:34:4e:2f:c7:f9:de:56:ed:
59:cb:ad:9b:f7:5e:d5:f0:de:33:6d:95:49:a4:64:6e:3e:8e:
f5:69:a9:de:4a:d9:69:d8:0d:3a:ba:bc:2b:b5:a5:97:35:c7:
ef:30:0a:50:ed:d4:45:4b:bb:76:52:86:f3:6d:21:ea:cd:ab:
06:13:52:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:27:34 2026 by rpki-client