Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json)
Hash identifier: VN/7GxQTwHzp7kWAN6Ua76sEWOrww45vdPPn5XSjtfo=
Subject key identifier: 22:B3:10:21:63:24:87:A9:C7:C8:81:44:64:5E:95:1F:CD:E0:CC:22
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 019D2884782A8862024DF6AC7271A9675EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
Manifest number: 08C0
Signing time: Thu 26 Mar 2026 05:01:03 +0000
Manifest this update: Thu 26 Mar 2026 05:01:03 +0000
Manifest next update: Fri 27 Mar 2026 05:01:03 +0000
Files and hashes: 1: LYSUx4SMBcbGx0lrMelOBoIjRXY.roa (hash: iufH3SnKKEFM6xvywdqZRBnEAvhiQJCFx10ZIhfElHs=)
2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: En58DMm2JNVG1ywxVPTRVEMIMQtehy1P4TbAESUNksE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:78:2a:88:62:02:4d:f6:ac:72:71:a9:67:5e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: Mar 26 05:01:03 2026 GMT
Not After : Mar 27 05:01:03 2026 GMT
Subject: CN=22b31021632487a9c7c88144645e951fcde0cc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:6c:de:59:a4:4d:bb:f8:15:b1:3d:11:9d:
6a:9a:99:82:19:62:bb:54:35:f6:6e:30:68:b2:c7:
17:e2:25:35:5c:60:c2:0b:4c:fc:36:fd:8e:32:86:
4f:eb:58:90:3c:14:ae:06:d8:ad:86:26:2f:93:e9:
84:cf:55:e7:b7:05:df:36:b6:b3:51:c2:8e:3c:c7:
f2:0c:36:ee:5e:62:a4:6f:6d:f2:4c:ca:a3:03:92:
9b:35:d6:7c:e9:f8:bf:bb:3e:b3:3d:97:83:a4:2d:
16:1e:79:21:b0:b9:9c:49:4b:5c:d3:c7:74:a4:47:
1d:64:aa:8d:3a:55:6a:d2:2e:78:86:43:a6:ab:75:
1b:19:d7:90:05:0d:e8:8c:5c:95:55:96:89:91:14:
8c:07:aa:e6:ea:7e:82:18:00:d1:7f:f0:fb:b4:95:
79:9f:64:a4:d5:8a:af:18:98:76:10:2f:99:df:4a:
95:6a:eb:b9:88:b2:2c:c9:10:e9:20:b2:59:48:37:
74:a8:86:9f:aa:ff:fb:8f:3f:36:3b:cb:f2:49:c1:
b9:35:84:18:42:27:00:fb:6a:a8:bc:74:18:0d:6b:
f3:38:78:b2:67:02:e6:74:ff:3d:76:3d:25:27:e6:
84:60:3a:8d:83:85:82:26:7a:3e:52:f3:d5:75:b3:
27:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B3:10:21:63:24:87:A9:C7:C8:81:44:64:5E:95:1F:CD:E0:CC:22
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:53:85:f6:73:fb:83:45:8d:ca:39:41:e1:c8:87:90:fc:c8:
a7:50:74:0f:e7:4d:84:7f:ee:be:a7:30:08:86:5a:7b:56:1e:
c6:66:83:d7:f4:7b:b9:91:64:9b:6b:85:e5:1a:34:72:7c:2f:
7d:a7:bf:df:df:2d:44:22:0b:cc:80:09:e5:36:2e:d8:0c:29:
5e:0d:50:e9:9f:fe:1a:f6:d0:97:26:70:81:fc:17:e9:35:6d:
2d:a9:18:63:c6:7b:83:03:57:59:80:12:dd:d1:67:1f:56:6b:
84:f5:f9:b4:2f:18:fe:18:84:fd:7b:06:07:5b:19:88:c9:71:
1f:9d:65:45:33:58:49:f4:c5:fd:82:8f:00:7c:0d:5c:12:b7:
cd:8c:9a:38:b4:25:6a:cb:b4:a5:f7:27:69:ed:9d:c8:d1:16:
60:9f:f9:c9:d6:70:89:c8:cd:1d:79:2d:df:57:5c:09:6b:61:
56:62:f4:23:37:a5:00:c7:de:dc:ee:80:b3:63:85:b0:8e:67:
5d:80:22:4a:d5:c0:5f:77:2b:48:78:e4:35:cc:68:f5:6e:32:
09:7b:ba:f4:e2:bc:14:8d:1b:99:ea:0c:a0:26:df:72:09:53:
53:8b:65:54:79:7c:a2:de:88:99:94:c9:3a:db:73:c1:95:88:
15:f6:e6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:52 2026 by rpki-client