Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
File: sgTq-NsT70M8-YIp0jLTMKX14lY.mft (raw, json)
Hash identifier: /+fSu/OKSpBE8D6P0PFvXu/VEGkSMIjRu04/rNJzOoA=
Subject key identifier: 9F:34:51:43:22:6E:89:BE:C0:DD:66:B1:BF:D1:5A:E1:D7:EA:A0:BD
Authority key identifier: B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
Certificate issuer: /CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Certificate serial: 019E205A26D230AB8BFADCF9B3A7D53EF7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 08:00:39 +0000
Manifest this update: Wed 13 May 2026 08:00:39 +0000
Manifest next update: Thu 14 May 2026 08:00:39 +0000
Files and hashes: 1: _7FUJXfD4Ngly6FguO7Icv3bnRs.roa (hash: uIw7fcvWe1lM1UlpZ2C4ZV/RLkNGSXf/iL61npEiJKw=)
2: sgTq-NsT70M8-YIp0jLTMKX14lY.crl (hash: PYXwYlteQK3G54aGgQEFKoecBcc9kTSL46oaIfRakqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:26:d2:30:ab:8b:fa:dc:f9:b3:a7:d5:3e:f7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Validity
Not Before: May 13 08:00:39 2026 GMT
Not After : May 14 08:00:39 2026 GMT
Subject: CN=9f345143226e89bec0dd66b1bfd15ae1d7eaa0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:83:79:53:f8:20:de:4f:4b:d6:2b:51:06:06:
a4:71:8e:ba:0f:eb:53:10:d9:8c:d5:4e:24:b9:90:
71:5c:51:9b:f7:b6:29:80:71:cd:00:9b:26:fa:34:
3a:0f:93:18:e3:cb:f2:18:ff:60:e4:e2:ad:38:1b:
16:00:93:91:e0:22:9f:f0:ef:83:7c:06:1c:56:7e:
9a:d8:23:21:01:9c:b5:18:47:73:c3:ed:4c:39:7d:
b4:8e:18:29:8d:2f:8b:a2:4b:48:34:57:09:17:47:
99:7b:54:b4:7f:8e:70:7a:0e:b5:00:f4:34:53:ea:
bd:4e:70:fa:5a:8a:2f:49:e1:1f:35:8a:81:06:d5:
08:f4:17:c5:0d:2e:4b:e0:64:1f:dd:f1:9b:42:f5:
ce:e5:fb:1a:34:ff:50:a4:d5:d0:75:92:b4:d8:77:
0f:1f:09:d1:d9:de:4c:fe:db:87:17:82:5a:da:36:
87:c5:6d:67:0b:38:34:a2:19:96:79:2e:20:5c:20:
b5:1b:5b:56:f5:41:8e:e5:c0:be:38:c6:71:31:37:
f6:55:07:f1:6b:88:c5:b9:e8:77:84:d4:81:c5:af:
b5:bf:59:d6:95:31:b1:90:7c:ef:f5:ed:de:25:99:
c3:69:8f:64:98:39:0b:06:c3:10:f0:77:6c:98:9f:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:34:51:43:22:6E:89:BE:C0:DD:66:B1:BF:D1:5A:E1:D7:EA:A0:BD
X509v3 Authority Key Identifier:
keyid:B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:47:c4:ef:6c:81:4b:43:03:86:16:20:70:ab:15:06:e4:05:
68:7e:cf:ed:45:7f:65:2d:97:41:94:e7:49:6e:9d:05:bb:ad:
9a:63:85:11:a7:8c:2e:d3:02:c3:b2:24:b5:9d:2c:5a:0d:74:
bf:8a:85:63:c8:1a:85:9f:3a:a6:34:d8:67:52:69:a9:d9:be:
07:db:64:78:ad:18:92:3e:0b:d7:82:3e:87:9e:b3:28:3c:b3:
47:ba:b7:e4:5a:f5:4e:cf:4b:b3:42:92:02:70:7d:fc:5e:55:
c2:7b:a8:b1:3e:74:ac:6e:48:81:97:03:4c:ea:be:1d:5e:0c:
f6:8f:6a:ee:5d:28:cc:52:9a:04:23:b9:d9:6e:43:7d:56:62:
eb:0a:54:54:ad:42:bf:fe:2d:18:8b:04:a8:d4:3b:00:ff:aa:
b9:4c:50:18:17:82:4c:57:d2:40:1b:37:ea:9c:4a:1b:f5:93:
eb:dd:e0:e6:09:72:1b:0a:ad:d3:f4:bd:c5:fe:a8:a7:0f:29:
09:d5:a1:9f:48:a1:d6:2a:3e:d6:fb:91:2a:f9:55:5f:83:19:
e5:6c:91:48:6a:b0:6b:99:70:ea:e1:b9:4f:05:8e:f0:31:d6:
19:2a:13:27:74:1b:c4:5b:15:28:74:e1:89:c3:33:ac:d4:a0:
59:e6:ab:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWibSMKuL+tz5s6fVPvfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMDRlYWY4ZGIxM2VmNDMzY2Y5ODIyOWQyMzJkMzMwYTVm
NWUyNTYwHhcNMjYwNTEzMDgwMDM5WhcNMjYwNTE0MDgwMDM5WjAzMTEwLwYDVQQD
Eyg5ZjM0NTE0MzIyNmU4OWJlYzBkZDY2YjFiZmQxNWFlMWQ3ZWFhMGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oN5U/gg3k9L1itRBgakcY66D+tT
ENmM1U4kuZBxXFGb97YpgHHNAJsm+jQ6D5MY48vyGP9g5OKtOBsWAJOR4CKf8O+D
fAYcVn6a2CMhAZy1GEdzw+1MOX20jhgpjS+LoktINFcJF0eZe1S0f45weg61APQ0
U+q9TnD6WoovSeEfNYqBBtUI9BfFDS5L4GQf3fGbQvXO5fsaNP9QpNXQdZK02HcP
HwnR2d5M/tuHF4Ja2jaHxW1nCzg0ohmWeS4gXCC1G1tW9UGO5cC+OMZxMTf2VQfx
a4jFueh3hNSBxa+1v1nWlTGxkHzv9e3eJZnDaY9kmDkLBsMQ8HdsmJ/GVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ80UUMibom+wN1msb/RWuHX6qC9MB8GA1UdIwQY
MBaAFLIE6vjbE+9DPPmCKdIy0zCl9eJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2dUcS1Oc1Q3ME04LVlJcDBqTFRNS1gxNGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81OTc2MzgtNzEzYy00NGI3LTliNzAt
MjUwMTdlYzk0MDk1LzEvc2dUcS1Oc1Q3ME04LVlJcDBqTFRNS1gxNGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC81OTc2MzgtNzEzYy00NGI3LTliNzAtMjUwMTdlYzk0MDk1
LzEvc2dUcS1Oc1Q3ME04LVlJcDBqTFRNS1gxNGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUfE72yB
S0MDhhYgcKsVBuQFaH7P7UV/ZS2XQZTnSW6dBbutmmOFEaeMLtMCw7IktZ0sWg10
v4qFY8gahZ86pjTYZ1Jpqdm+B9tkeK0Ykj4L14I+h56zKDyzR7q35Fr1Ts9Ls0KS
AnB9/F5VwnuosT50rG5IgZcDTOq+HV4M9o9q7l0ozFKaBCO52W5DfVZi6wpUVK1C
v/4tGIsEqNQ7AP+quUxQGBeCTFfSQBs36pxKG/WT693g5glyGwqt0/S9xf6opw8p
CdWhn0ih1io+1vuRKvlVX4MZ5WyRSGqwa5lw6uG5TwWO8DHWGSoTJ3QbxFsVKHTh
icMzrNSgWearwA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:01:50 2026 by rpki-client