
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: OEQyWiC1acBEJLsmql9RJ2vo+T6DG1aCJM7exSx0+l8=
Subject key identifier: AC:B2:A4:02:F5:D1:6C:F2:02:BC:54:9F:89:CC:0D:1F:DF:0C:67:A7
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 019E216D06D3968FEF27798E920CEA16FB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 1536
Signing time: Wed 13 May 2026 13:00:53 +0000
Manifest this update: Wed 13 May 2026 13:00:53 +0000
Manifest next update: Thu 14 May 2026 13:00:53 +0000
Files and hashes: 1: 98TJQub4EtN4BXIRrG4cNKh1xfw.roa (hash: ZCcnqtJ6qlNXte/XKxn3WGiCx4J7iiLBNWDpocMLxz8=)
2: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: vdU9h9vBjIdn5rups1aFvZ2fHlUT500zyCTy4BgNNvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:06:d3:96:8f:ef:27:79:8e:92:0c:ea:16:fb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: May 13 13:00:53 2026 GMT
Not After : May 14 13:00:53 2026 GMT
Subject: CN=acb2a402f5d16cf202bc549f89cc0d1fdf0c67a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:9c:da:2d:08:0c:e5:95:09:80:47:6f:ca:
25:29:ca:f7:ed:aa:fa:cd:f0:31:6c:40:69:fc:28:
cd:b2:93:b6:e7:97:fb:cc:69:f2:b3:7b:ac:81:c2:
3d:f2:c8:b4:c2:09:d3:d5:4b:36:7b:72:39:19:22:
50:e8:ba:b9:90:87:01:00:4b:0c:5e:cc:1e:7c:de:
55:8c:b7:5b:90:58:b4:6f:8a:75:1b:eb:91:91:33:
81:1f:c4:44:2f:51:69:99:a0:d1:d5:00:9d:d4:7e:
7d:72:1d:a0:2d:31:9a:46:aa:d0:30:f3:3c:bd:20:
46:2c:bb:58:5c:16:5c:0f:9c:1f:76:75:86:49:f8:
87:ca:56:cf:cd:b2:a9:2e:b4:ce:d4:fe:a7:c1:5f:
18:55:23:12:7c:a4:73:0a:31:68:ea:9d:45:05:13:
1f:2f:a8:93:5a:c1:15:0b:f4:26:64:de:ee:62:09:
df:3c:ed:7d:8c:7d:fd:0b:be:0f:a3:aa:07:ec:4b:
b1:17:4f:3f:f5:06:6a:d6:e5:64:54:ab:ee:0b:d4:
87:91:f1:75:6c:57:cb:2d:de:96:85:2c:d7:ae:a3:
7b:03:51:c4:26:66:07:60:a9:12:df:1b:92:5d:aa:
62:0d:c8:c9:c2:97:33:1e:71:1f:13:08:28:09:c8:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B2:A4:02:F5:D1:6C:F2:02:BC:54:9F:89:CC:0D:1F:DF:0C:67:A7
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:71:cc:96:5d:ae:c3:e0:e4:e2:7d:a2:2f:b7:68:aa:8e:a1:
3d:95:e8:d2:ad:5e:6a:11:ad:0e:aa:48:de:bd:ad:62:c8:16:
c4:c5:41:df:6c:ca:52:34:c4:95:20:69:55:9d:e2:24:0a:c0:
54:2f:77:4a:6e:0e:44:c5:89:fa:f3:51:76:2a:3a:e9:e0:eb:
27:4a:e0:60:23:79:7c:d9:ba:90:86:81:47:3c:5a:36:d0:20:
cb:3e:9e:69:7c:39:65:a1:00:88:56:0d:e5:b1:ac:d0:f3:ff:
37:5c:6c:0a:91:95:b2:f9:b3:50:76:31:c7:a8:6f:a2:d6:ad:
7a:5a:4d:dc:df:49:0f:af:04:c9:41:de:83:ce:c5:64:e5:2f:
d6:de:68:48:a1:68:d4:99:95:bf:eb:bc:20:3f:57:25:02:fa:
93:e8:57:c6:04:65:c3:fe:2c:20:28:90:b1:a9:7c:b9:8a:42:
1a:ad:f9:39:f4:a1:93:e3:63:7d:b9:46:ae:ff:09:7f:5c:62:
51:88:5b:91:5a:23:e0:5e:b2:f6:e8:18:9f:35:71:27:10:5a:
2a:7f:65:1e:da:32:ac:18:f4:6e:14:c4:fb:0b:19:50:41:90:
72:be:a1:52:ae:c9:b9:fb:c0:54:b3:4c:b7:d4:a6:15:bd:be:
34:e4:4d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:01:11 2026 by rpki-client