Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
File: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft (raw, json)
Hash identifier: cSQX31v2JcFzaFYSOloUsPsNe8j4K8WDBITc9cV7hDk=
Subject key identifier: 4A:1D:33:31:57:11:46:29:AD:76:35:F0:33:B2:AE:02:26:DE:83:37
Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
Certificate issuer: /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Certificate serial: 019D27A90A7DDDD2D3DB4D64338C67321CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
Manifest number: 0541
Signing time: Thu 26 Mar 2026 01:01:22 +0000
Manifest this update: Thu 26 Mar 2026 01:01:22 +0000
Manifest next update: Fri 27 Mar 2026 01:01:22 +0000
Files and hashes: 1: LZgnWlWrjTCukxd_XCJP8Vtjqkk.roa (hash: rbZKiC7VxvRdtB9FGEjRH+5pWBKmKmF8M+8quOww67M=)
2: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl (hash: 4s2xdoxGsD5F4iS/ibS0AnnKisfHVV0qjlhqyYjFlY4=)
3: h9b4JeNT7A8pWHM8uaXkZ3HWW2c.roa (hash: 8n1s/5mgSp5GN9ljUgJO+fSaluuMo/7ZenBSfeNwrrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:0a:7d:dd:d2:d3:db:4d:64:33:8c:67:32:1c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Validity
Not Before: Mar 26 01:01:22 2026 GMT
Not After : Mar 27 01:01:22 2026 GMT
Subject: CN=4a1d333157114629ad7635f033b2ae0226de8337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:41:7c:10:47:76:88:f1:17:7c:45:39:20:
8b:76:b7:c1:7b:ab:34:c9:fb:80:c5:a8:ac:dc:a7:
22:51:f6:b7:ed:cf:ae:17:8f:45:66:c0:dd:ee:e3:
0f:b4:fa:a2:cc:19:a0:fc:8f:a6:fe:95:63:e7:0e:
76:09:2c:18:9a:06:c5:f9:7a:3b:48:ce:e0:b8:37:
32:38:70:5c:51:7b:88:c9:49:30:7a:59:2d:71:56:
36:f7:3e:47:55:67:d4:49:8b:f1:33:4d:2a:2e:e6:
a6:a4:d9:3c:2d:6a:37:a6:ad:a3:ae:ca:b1:51:a3:
f7:48:7f:7f:85:58:5f:6c:ff:0c:3a:18:bb:2b:4b:
6e:6d:b7:62:2c:c2:25:49:76:3a:3c:b3:3b:42:fe:
8d:c6:46:0e:9c:c1:3d:1a:b0:49:68:dd:19:c9:62:
bf:04:51:45:1a:46:c9:6c:f7:d1:20:99:8c:d2:b7:
ee:26:01:7a:76:40:bb:3d:c4:6b:af:e7:bb:2f:b7:
54:a8:29:cf:f0:42:00:34:bb:60:88:71:44:ec:30:
c0:87:59:f9:7a:a4:0e:f0:99:09:37:d7:90:51:2a:
1a:94:34:9b:72:df:54:2e:0b:0c:4b:7a:ec:f0:c7:
e4:0a:a8:c3:91:15:2b:0b:8f:b0:97:d7:42:a7:62:
9e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1D:33:31:57:11:46:29:AD:76:35:F0:33:B2:AE:02:26:DE:83:37
X509v3 Authority Key Identifier:
keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:97:66:e3:00:0c:32:29:ef:7a:9f:57:1e:af:af:ff:92:f9:
c5:5f:47:73:7c:87:15:e5:67:b3:60:a2:a7:9a:04:71:b3:1e:
cb:6a:8a:0f:75:83:63:30:29:88:97:cd:fc:3a:37:e0:e2:57:
b9:f2:ac:fb:9c:0c:ed:75:9b:f0:16:0a:26:78:2d:e0:6c:37:
7f:f3:fe:76:18:3c:3e:ef:30:20:4a:75:38:9e:66:54:28:93:
cb:ae:ae:42:f4:ca:b3:49:f0:e2:72:33:7a:24:77:78:ff:cd:
1a:e7:52:2a:74:9b:97:9f:4b:b1:9f:82:0e:2d:ab:9f:67:37:
48:4b:08:28:0d:39:68:dc:c0:02:b2:74:bf:14:30:eb:e3:9c:
31:8d:7f:6a:5b:57:cd:85:bd:74:59:f4:3d:43:97:d2:0c:b0:
52:7e:c7:f2:71:06:22:7b:d9:14:03:aa:8f:be:99:1f:92:ad:
ca:a7:87:be:00:68:cd:29:75:f7:46:12:89:71:0e:c8:37:b5:
0c:83:7a:7c:6e:20:14:0f:3b:95:80:e8:33:f7:82:95:d0:98:
c7:b1:a7:a2:16:19:12:ac:13:7e:07:ed:97:d1:52:3a:23:46:
9a:8a:c3:4c:fe:32:69:93:6c:44:33:8b:8f:32:c2:3e:63:62:
0e:97:85:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:18 2026 by rpki-client