Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
File: sgTq-NsT70M8-YIp0jLTMKX14lY.mft (raw, json)
Hash identifier: Lpm+Ybagq7f8oUpTN+EMG31YXhfOVwA+59VFiRzp/yQ=
Subject key identifier: C5:5B:B3:F4:00:54:BA:71:4A:30:36:D1:95:89:2B:6A:F7:E3:F3:78
Authority key identifier: B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
Certificate issuer: /CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Certificate serial: 01A126C29A9D35EDBDC11780DE46469D9A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
Manifest number: 1A99
Signing time: Sat 10 Oct 2026 17:00:49 +0000
Manifest this update: Sat 10 Oct 2026 17:00:49 +0000
Manifest next update: Sun 11 Oct 2026 17:00:49 +0000
Files and hashes: 1: _7FUJXfD4Ngly6FguO7Icv3bnRs.roa (hash: uIw7fcvWe1lM1UlpZ2C4ZV/RLkNGSXf/iL61npEiJKw=)
2: sgTq-NsT70M8-YIp0jLTMKX14lY.crl (hash: X8xX800puod5y9dIxDrrQ15Ri2lwfyjLEW8XE4yNE8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:c2:9a:9d:35:ed:bd:c1:17:80:de:46:46:9d:9a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Validity
Not Before: Oct 10 17:00:49 2026 GMT
Not After : Oct 11 17:00:49 2026 GMT
Subject: CN=c55bb3f40054ba714a3036d195892b6af7e3f378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:58:7d:e0:f1:37:e1:7b:a3:05:ae:3b:d5:
00:0a:1c:f8:b3:6c:b5:d3:b6:aa:97:9c:b4:2a:8c:
95:c3:9a:77:57:bb:74:1f:39:b1:37:a3:dd:38:e7:
ba:fc:e7:ec:80:be:43:9d:0c:e8:28:31:50:81:6b:
5d:5d:67:05:c5:a2:7f:77:a1:ff:76:ff:85:0b:74:
3c:1b:4b:2a:3c:18:ff:2d:b3:6c:01:00:a3:ff:6a:
f5:2a:26:e4:f1:42:50:c2:f7:ba:dc:68:12:f9:e3:
ef:d9:c5:41:c0:a7:8f:41:d5:27:f2:26:b5:ea:e3:
4a:e9:8c:76:19:88:1e:73:d7:c7:25:39:3a:5c:46:
77:aa:6f:3d:bf:f0:a5:8d:7e:86:35:80:cc:95:41:
d8:48:07:46:a2:19:d5:5d:52:61:0d:97:65:d7:21:
4b:52:ee:b9:df:cf:c4:e3:61:9b:6a:ba:83:fa:80:
09:35:de:7c:3e:52:cd:66:16:a1:db:b7:fa:33:5b:
69:59:35:b9:4a:90:89:fd:4e:44:9c:9a:5b:1c:d0:
da:4e:08:61:11:6b:29:35:cf:29:ea:ec:3f:68:f9:
34:e0:77:bc:79:7a:b9:cb:2b:50:14:99:f0:a7:27:
3a:c4:05:a7:b7:5d:b1:7e:a0:de:d9:9c:a3:7b:2e:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5B:B3:F4:00:54:BA:71:4A:30:36:D1:95:89:2B:6A:F7:E3:F3:78
X509v3 Authority Key Identifier:
keyid:B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:12:d9:6b:a9:b0:ef:a8:3b:e1:cb:57:91:8c:43:df:79:19:
09:a0:7b:82:74:fe:fc:cc:6c:e9:90:dc:46:14:26:db:3b:0c:
8d:26:bb:5c:50:a7:c6:71:51:6a:ed:49:ca:ae:b3:94:3b:e7:
f3:f7:bf:74:02:41:e3:86:93:81:92:4a:aa:f2:7a:36:0c:cf:
ce:14:49:6e:9d:7f:88:78:4e:e3:ad:63:15:3b:12:1c:34:55:
2a:42:6c:a6:ff:3a:eb:83:2c:5d:1e:0b:6d:e4:87:f5:aa:2c:
12:3c:1c:3a:ed:69:ce:9b:ce:f5:f4:34:c4:e7:c2:79:c1:1b:
fc:20:4b:57:fd:45:d1:d2:5f:fc:1f:32:b6:f1:29:16:0e:48:
30:1e:a0:c2:a0:7e:23:43:a2:8d:2d:20:c2:04:41:1c:17:07:
c8:a6:eb:6e:32:c6:ec:d7:62:31:8c:61:e6:6a:19:bc:50:43:
fa:42:33:c0:16:e6:b5:9a:b6:03:55:77:21:84:72:80:f0:78:
9c:e2:04:8d:13:06:89:10:ad:c5:d5:10:b0:0e:24:94:63:6b:
f9:88:4b:09:66:53:53:17:2c:88:81:3b:bd:44:d3:79:7f:7c:
9b:e9:d2:62:9e:b4:1a:13:75:67:c5:a8:f0:29:5a:9a:f1:35:
1f:1c:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 02:21:34 2026 by rpki-client