Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
File: SgvIUgmAGVIMeOmoC22EyzyrcEI.mft (raw, json)
Hash identifier: 2GV3E53q/dke8SEOr3puhrKr2YnJien6/GHORLxx13g=
Subject key identifier: DF:2E:FF:DA:E3:DC:F3:81:A0:05:64:19:2E:5C:85:7A:8A:94:50:7E
Authority key identifier: 4A:0B:C8:52:09:80:19:52:0C:78:E9:A8:0B:6D:84:CB:3C:AB:70:42
Certificate issuer: /CN=4a0bc852098019520c78e9a80b6d84cb3cab7042
Certificate serial: 019D2583C438FB72EBC8CE6027E43FC4C4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
Manifest number: BD
Signing time: Wed 25 Mar 2026 15:01:25 +0000
Manifest this update: Wed 25 Mar 2026 15:01:25 +0000
Manifest next update: Thu 26 Mar 2026 15:01:25 +0000
Files and hashes: 1: DZUI_bEIrP-yvThfRpjcY2JDgZ8.asa (hash: RghHL1DuN+HQMkw8GbUaQPmzZB8C45TxXFTAWg1Ry2g=)
2: SgvIUgmAGVIMeOmoC22EyzyrcEI.crl (hash: Z4vi2DR6iuBI/qvAltUtPPU6WSF86TyKRoXNhetJN90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:c4:38:fb:72:eb:c8:ce:60:27:e4:3f:c4:c4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0bc852098019520c78e9a80b6d84cb3cab7042
Validity
Not Before: Mar 25 15:01:25 2026 GMT
Not After : Mar 26 15:01:25 2026 GMT
Subject: CN=df2effdae3dcf381a00564192e5c857a8a94507e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:b9:57:5b:c2:dc:7b:9f:59:28:93:4f:04:
ff:43:1e:8c:24:d9:b8:86:f9:c2:b9:1f:e3:09:48:
84:31:78:d1:9f:c0:fa:26:e5:d9:4b:e0:95:33:c0:
6c:68:6a:78:4e:6a:94:59:51:87:59:e2:df:37:c1:
32:04:63:1b:01:ea:ae:d0:db:f4:39:98:3a:5d:50:
ad:d7:64:82:33:e4:94:5f:02:06:ab:07:a3:6d:79:
de:63:2b:ec:25:84:e9:48:82:d6:0d:a8:43:64:01:
4f:46:c5:d6:fc:54:f0:32:00:ff:43:87:f3:1e:59:
98:be:64:29:4f:5d:9a:ce:94:70:c3:09:e9:78:f8:
df:02:26:9a:3d:2a:b0:7a:10:bd:b7:00:7a:2c:b7:
6b:dd:e5:96:85:e0:a8:9b:3d:7c:d6:54:22:5a:9c:
50:f6:aa:9b:a9:c3:1b:f8:f7:85:03:8c:58:fa:2c:
23:27:09:bc:cb:84:57:f9:71:e1:ea:fd:9d:8b:27:
44:ef:84:49:2c:64:2c:87:38:91:92:27:6d:c2:dc:
fa:ce:1c:b1:8d:9c:fd:19:70:90:28:0c:df:04:0e:
db:2b:f4:31:c2:51:ba:75:25:41:8e:fb:cc:c0:b8:
5c:f0:07:8a:3d:3f:b4:5b:86:d2:35:e7:ca:3a:aa:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2E:FF:DA:E3:DC:F3:81:A0:05:64:19:2E:5C:85:7A:8A:94:50:7E
X509v3 Authority Key Identifier:
keyid:4A:0B:C8:52:09:80:19:52:0C:78:E9:A8:0B:6D:84:CB:3C:AB:70:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b5:f9:96:ea:df:6d:8a:98:bd:d3:3d:97:3a:9c:81:eb:65:
42:4e:e3:a1:b3:0d:7e:22:2a:a5:b3:c1:7d:5d:ae:aa:a8:c8:
94:a1:7f:b1:f4:9b:97:ec:21:d3:96:20:b3:b9:d0:92:15:5a:
b7:df:3b:ba:00:7b:2f:e4:54:37:41:01:bb:a4:73:bc:37:07:
95:7f:9e:7d:62:aa:6f:74:70:07:4d:8b:82:8e:35:19:c0:17:
df:79:05:d1:87:cb:1d:61:74:bc:a2:59:3b:6f:a5:17:49:9e:
48:ef:ba:3d:39:62:fd:36:48:e0:95:f0:9c:e0:32:79:2f:bb:
21:e0:b3:15:83:4b:3d:5d:b6:f9:5f:23:57:d1:bb:76:56:5e:
b3:3d:75:44:18:e8:11:59:f5:61:72:31:6c:6a:2e:8d:54:fd:
c0:16:a7:67:35:77:83:d1:34:58:b6:38:1b:5b:31:67:2d:d0:
ad:f2:ac:62:01:ba:a9:71:0b:7a:3d:83:e6:33:bf:a4:d3:7a:
13:de:c8:2b:ca:3e:1e:87:e3:c2:e4:c6:f6:6c:fc:02:cc:60:
a4:45:c4:2d:1e:6b:2b:9e:93:27:c4:95:99:49:08:90:ba:67:
c4:13:3b:92:bc:ce:2a:01:3d:0a:6d:b1:d6:43:eb:96:b2:d7:
3e:e0:de:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:35:43 2026 by rpki-client