Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
File: SGeaItDbyYDV1ZszNnn5ObmuPyU.mft (raw, json)
Hash identifier: hZ/8A/jhAq+6FN8CXr3mfTxzOFwN54dvbvvFRBLXFh4=
Subject key identifier: 37:89:F7:09:F1:2B:51:95:BA:E1:E9:52:47:0F:39:85:03:31:1C:B8
Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Certificate serial: 01A1DEA7AEED84E74177257ECF5725357094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 10:01:33 +0000
Manifest this update: Sun 15 Nov 2026 10:01:33 +0000
Manifest next update: Mon 16 Nov 2026 10:01:33 +0000
Files and hashes: 1: Cb3GNV7sEZagImQ0z2CzEtPQStc.roa (hash: WKt5YxPaUYaqlF+1A2ePA/t2PiJgruaRiTwSTzv9PKY=)
2: QgUGh2GJ1-JelSbN4pH0Q_1IOrw.asa (hash: JDQrvbF/UTSyK+KaVQFzmDlvQmxRQg7cAs9vDLu048g=)
3: SGeaItDbyYDV1ZszNnn5ObmuPyU.crl (hash: h2/yRflq8wyS9q2vheDJcF43aBNeFKKQFFVP5uarjWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:ae:ed:84:e7:41:77:25:7e:cf:57:25:35:70:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Validity
Not Before: Nov 15 10:01:33 2026 GMT
Not After : Nov 16 10:01:33 2026 GMT
Subject: CN=3789f709f12b5195bae1e952470f398503311cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:41:ee:3b:68:37:4d:b9:39:53:01:a7:91:46:
55:76:ca:18:6b:37:21:62:17:b5:77:d7:12:ea:5d:
88:02:66:c6:92:df:d7:9c:d8:78:3f:5e:d3:2e:ea:
23:34:b6:c5:00:d8:0d:18:a5:e6:52:c5:34:39:5b:
fe:42:37:c1:b5:3e:e1:9d:b9:63:78:59:a3:a5:c8:
ac:85:e5:ea:76:ca:a5:de:b6:de:3f:d9:ba:d7:1b:
d1:93:5e:cc:58:35:24:e1:b8:50:84:a3:4d:7d:03:
d1:79:92:27:20:6e:73:2e:c0:91:7f:9f:3f:00:95:
64:04:ed:39:b4:54:14:b4:56:bf:e0:01:bd:7a:d5:
b0:a7:96:a2:74:47:76:5e:c3:6b:e9:54:d1:23:98:
16:85:75:f2:75:42:82:c7:46:fb:e6:8c:b5:76:e8:
28:8f:2d:44:62:e4:cd:be:dc:70:37:bf:1f:7f:d9:
40:e5:18:32:db:34:10:a5:ed:a8:a3:6c:ec:3e:a7:
88:25:61:64:3e:50:ce:a3:61:43:24:c7:83:f0:10:
8e:37:87:ac:45:30:36:55:b8:48:66:d8:14:98:ef:
d3:60:f3:e7:59:df:e2:c9:86:91:24:c7:d9:40:9c:
f6:28:5d:f2:26:ca:76:b0:bd:3b:3a:65:0c:35:7f:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:89:F7:09:F1:2B:51:95:BA:E1:E9:52:47:0F:39:85:03:31:1C:B8
X509v3 Authority Key Identifier:
keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ed:19:18:d3:a1:d1:e3:24:0a:23:e9:de:bd:dd:0c:37:08:
4d:2e:ab:7c:fe:75:68:a2:91:fd:10:11:2f:e9:78:59:e6:4e:
45:5b:e6:1c:bc:84:db:c3:bf:2f:87:cc:03:65:73:5a:c0:c2:
8a:84:42:d5:44:66:b4:28:48:7d:0f:0e:66:92:18:de:5d:ff:
d7:dd:de:f6:b0:53:b5:8f:fb:28:c8:15:8b:a1:ac:02:34:48:
08:82:36:02:40:00:a9:22:de:7b:c8:ef:9e:ff:e3:a9:97:a0:
48:87:1e:90:c7:93:a1:80:ac:a3:58:56:3a:27:be:5f:5f:f4:
0d:7e:79:65:82:35:4d:93:1e:85:c9:f3:97:f4:1f:70:bf:94:
da:6a:b7:ff:59:95:84:3f:4a:44:36:cf:b4:5d:e3:2d:45:49:
a7:90:a0:59:63:2f:53:7b:67:4e:4b:61:cd:5d:31:cc:6a:8d:
7e:cd:dc:ab:fc:6f:b0:12:f5:94:61:a0:0a:44:a7:30:e6:99:
46:d7:c2:21:60:89:22:d3:4c:e0:ee:6e:8a:d5:a0:b3:56:a9:
af:0a:82:75:8c:6e:ff:ad:58:a1:f9:fa:f0:fa:08:dd:07:ad:
33:77:61:86:01:e4:bb:45:cb:6b:08:29:c8:1b:d6:23:e4:f2:
20:cb:8f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:21:55 2026 by rpki-client