Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
File: SGeaItDbyYDV1ZszNnn5ObmuPyU.mft (raw, json)
Hash identifier: oOZfPdYeAWxyG76FrqPWfsQhJ0RwiRQpapBLdVC95jg=
Subject key identifier: 0E:61:46:10:E3:FF:0C:DE:E5:80:CA:3B:FC:07:57:84:3E:17:05:79
Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Certificate serial: 019F8FB4C74D19B38C743D7B7C70951BAABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 16:00:16 +0000
Manifest this update: Thu 23 Jul 2026 16:00:16 +0000
Manifest next update: Fri 24 Jul 2026 16:00:16 +0000
Files and hashes: 1: Cb3GNV7sEZagImQ0z2CzEtPQStc.roa (hash: WKt5YxPaUYaqlF+1A2ePA/t2PiJgruaRiTwSTzv9PKY=)
2: QgUGh2GJ1-JelSbN4pH0Q_1IOrw.asa (hash: JDQrvbF/UTSyK+KaVQFzmDlvQmxRQg7cAs9vDLu048g=)
3: SGeaItDbyYDV1ZszNnn5ObmuPyU.crl (hash: 39QiZp1fF/3aR+voaT/9bz15yKmInuiNtMpH5B1dUiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:c7:4d:19:b3:8c:74:3d:7b:7c:70:95:1b:aa:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Validity
Not Before: Jul 23 16:00:16 2026 GMT
Not After : Jul 24 16:00:16 2026 GMT
Subject: CN=0e614610e3ff0cdee580ca3bfc0757843e170579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:05:a0:a6:ed:6a:bf:80:73:8d:24:1b:0e:
56:6c:a6:93:cc:79:01:bf:32:65:53:b4:55:ac:13:
5f:9c:52:f6:c8:f9:0f:00:de:9e:6d:b4:e5:0c:6b:
18:57:62:bd:69:d5:2f:a7:da:31:f2:9d:96:e6:66:
24:a9:38:b1:ba:5a:a1:08:67:a8:0f:24:a3:ac:39:
68:13:db:2e:0c:87:a9:14:bf:09:cf:72:66:c9:31:
ee:98:0e:57:12:c3:9f:7c:03:1a:f1:8c:01:5e:87:
13:7a:67:8a:6d:00:26:cb:d6:8d:5f:e1:56:cb:c4:
6b:91:f5:e4:27:db:f0:ae:49:23:07:d1:ba:d1:40:
73:10:06:75:95:8c:61:6f:de:03:98:33:50:01:be:
9f:0a:2e:94:05:ae:cd:61:0f:a2:2e:f0:bb:af:c7:
58:ae:8e:bc:01:4b:93:c4:7c:b3:27:37:5d:38:c5:
d1:77:f2:8a:32:d2:e2:e1:88:46:bb:9c:2a:52:41:
25:b9:d2:f9:69:8e:8b:62:50:15:13:87:ec:a7:ad:
21:4f:e8:4d:af:af:f4:fd:6b:d8:01:7b:3c:88:69:
59:fe:98:c0:25:39:ca:20:e4:1f:14:c8:03:48:6e:
69:13:27:7d:e0:33:b8:57:d4:a7:51:3c:75:73:77:
29:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:61:46:10:E3:FF:0C:DE:E5:80:CA:3B:FC:07:57:84:3E:17:05:79
X509v3 Authority Key Identifier:
keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4b:11:71:90:4d:94:e7:5c:a5:5e:91:69:e5:94:44:a0:17:
e8:c7:47:8f:78:38:05:c5:9b:79:e0:3f:28:45:36:b3:84:d1:
93:ad:c0:8a:e5:4e:e4:14:25:19:61:a7:47:7c:bf:8d:26:31:
6a:7d:1c:c0:4c:17:b2:b7:07:f7:f7:6b:37:4c:3c:30:73:10:
da:89:d3:66:32:d1:49:de:b0:1b:bc:fb:f3:65:5f:c2:68:52:
94:e8:1f:75:92:78:75:19:56:5a:43:b8:86:47:21:d6:57:c6:
11:fe:33:c0:e1:1b:28:f6:76:d1:01:00:39:f5:a5:ab:37:d0:
39:9b:ac:1a:40:cf:2d:f6:f8:56:96:c1:75:cf:4c:0c:95:37:
02:15:0b:84:d0:3b:29:9a:1f:c0:01:40:e6:e1:3e:22:ce:0d:
3d:43:df:07:18:c4:f9:82:74:8f:4d:4d:4b:34:d6:9c:fb:23:
7d:4d:1d:46:fa:fc:5a:2c:35:93:d6:90:2d:99:c6:36:e4:42:
d2:6f:a6:69:b0:4d:88:bc:3a:b6:4e:a7:8b:16:5d:4d:41:4e:
fb:74:40:41:f8:7b:3e:c8:39:42:b4:00:dd:3d:96:36:3d:a5:
3f:a9:9a:22:2f:53:80:71:8e:e1:e0:06:27:d8:00:67:91:04:
f3:bb:fd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:54 2026 by rpki-client