Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: uQbsKjQJM4BSv7xGMaOMr4tNPkc2+iQB5E1d9Pozsz8=
Subject key identifier: C7:24:34:21:E8:2B:BE:18:25:1F:2B:EF:CA:9F:F6:FC:3F:9F:15:8B
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 019D265F42E52B53F294E0800E76778744F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 14B4
Signing time: Wed 25 Mar 2026 19:01:10 +0000
Manifest this update: Wed 25 Mar 2026 19:01:10 +0000
Manifest next update: Thu 26 Mar 2026 19:01:10 +0000
Files and hashes: 1: 98TJQub4EtN4BXIRrG4cNKh1xfw.roa (hash: ZCcnqtJ6qlNXte/XKxn3WGiCx4J7iiLBNWDpocMLxz8=)
2: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: OQrs6FJ+T394p4rSDVXaaJtOGfH8lWJMViqWXlCOEmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:42:e5:2b:53:f2:94:e0:80:0e:76:77:87:44:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Mar 25 19:01:10 2026 GMT
Not After : Mar 26 19:01:10 2026 GMT
Subject: CN=c7243421e82bbe18251f2befca9ff6fc3f9f158b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:cd:64:d0:56:2a:ca:09:2f:95:66:54:a0:
42:22:3e:05:62:f6:30:be:59:85:07:5f:a3:a6:67:
5a:46:c4:e7:92:d6:b0:25:1e:1e:82:6e:de:e6:b2:
c1:72:87:bb:88:a8:dc:55:2a:81:be:03:9f:c4:67:
97:a7:35:93:4e:d5:99:76:35:4c:d1:2c:f3:ad:32:
53:ef:e8:a3:d4:05:3e:b2:7b:11:ae:e1:10:d5:ab:
a2:b4:9d:da:5b:a9:bb:0b:13:6f:aa:48:32:c9:76:
0a:aa:38:2a:a0:dc:98:5c:3f:25:62:92:d9:55:69:
c5:03:68:66:3f:fa:a2:34:3d:29:9b:d1:63:0b:a7:
85:fc:23:f1:47:eb:f6:29:a7:54:80:ad:48:d8:ad:
6e:36:c3:89:83:be:80:93:dc:c4:57:95:d1:a0:c0:
b1:40:00:81:02:45:57:a8:36:0f:38:e6:d8:50:e5:
19:87:5a:bf:bb:ba:27:e4:cf:51:ef:07:0b:63:c2:
2d:2c:13:52:1b:ee:c7:84:79:2b:6e:a7:90:ab:52:
03:52:fb:38:39:f0:02:51:d9:60:cc:75:82:e2:ca:
50:46:2b:76:75:c0:ea:0c:a2:9f:b6:2c:79:f3:73:
67:88:93:9f:a6:09:d0:ea:b0:4d:28:34:88:7e:00:
7b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:24:34:21:E8:2B:BE:18:25:1F:2B:EF:CA:9F:F6:FC:3F:9F:15:8B
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a8:14:47:a4:b8:31:a9:73:50:49:4a:d5:7e:7e:83:f5:98:
10:d0:f6:41:99:89:42:0d:90:f2:40:2f:b6:97:d1:53:83:fb:
b3:90:46:48:b4:58:e1:16:9c:9f:46:1c:58:6e:cb:93:35:a5:
2b:54:07:cc:45:73:0e:cd:8e:65:5e:0a:fc:47:ea:2d:90:01:
43:09:ce:43:72:c9:2f:4d:12:e3:3f:0e:af:12:eb:bb:36:92:
65:27:01:21:77:10:7f:17:61:3b:c5:a2:55:4e:88:2c:33:30:
dd:b4:1e:ec:88:6d:1d:1a:e4:23:66:11:ff:72:6d:8b:57:e9:
fe:3d:3b:ea:d1:79:5b:a5:a3:3b:71:9a:92:6d:a7:1e:f8:30:
31:e8:2d:bb:18:6f:0a:da:4e:a7:41:a6:93:e7:cf:e0:f8:bb:
d7:bb:58:ed:e6:a5:db:4f:7e:07:fc:bd:66:a4:64:ba:4b:27:
63:82:39:ee:cc:ba:22:b6:c1:14:31:e0:bd:1e:09:c7:bb:e4:
89:90:7c:54:93:21:a2:18:09:e3:59:dc:0b:62:d1:7a:e6:c5:
1e:da:ac:73:ac:6e:f0:a1:75:89:c6:29:ef:c6:c8:8c:81:71:
7a:5d:0d:af:f5:7b:60:82:f1:f0:03:f0:18:ef:de:b5:25:0e:
31:0b:b3:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX0LlK1PylOCADnZ3h0TxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YTgxYmE3NTg5YThlMWJmMGUxYTA5Y2Y0YWEwZjRlOTA5
MDFkNTcwHhcNMjYwMzI1MTkwMTEwWhcNMjYwMzI2MTkwMTEwWjAzMTEwLwYDVQQD
EyhjNzI0MzQyMWU4MmJiZTE4MjUxZjJiZWZjYTlmZjZmYzNmOWYxNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvPNZNBWKsoJL5VmVKBCIj4FYvYw
vlmFB1+jpmdaRsTnktawJR4egm7e5rLBcoe7iKjcVSqBvgOfxGeXpzWTTtWZdjVM
0SzzrTJT7+ij1AU+snsRruEQ1auitJ3aW6m7CxNvqkgyyXYKqjgqoNyYXD8lYpLZ
VWnFA2hmP/qiND0pm9FjC6eF/CPxR+v2KadUgK1I2K1uNsOJg76Ak9zEV5XRoMCx
QACBAkVXqDYPOObYUOUZh1q/u7on5M9R7wcLY8ItLBNSG+7HhHkrbqeQq1IDUvs4
OfACUdlgzHWC4spQRit2dcDqDKKftix583NniJOfpgnQ6rBNKDSIfgB7qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMckNCHoK74YJR8r78qf9vw/nxWLMB8GA1UdIwQY
MBaAFEmoG6dYmo4b8OGgnPSqD06QkB1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDIt
NjAzMWQ1ZGUzZjM5LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDItNjAzMWQ1ZGUzZjM5
LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6gUR6S4
MalzUElK1X5+g/WYEND2QZmJQg2Q8kAvtpfRU4P7s5BGSLRY4Racn0YcWG7LkzWl
K1QHzEVzDs2OZV4K/EfqLZABQwnOQ3LJL00S4z8OrxLruzaSZScBIXcQfxdhO8Wi
VU6ILDMw3bQe7IhtHRrkI2YR/3Jti1fp/j076tF5W6WjO3Gakm2nHvgwMegtuxhv
CtpOp0Gmk+fP4Pi717tY7eal209+B/y9ZqRkuksnY4I57sy6IrbBFDHgvR4Jx7vk
iZB8VJMhohgJ41ncC2LReubFHtqsc6xu8KF1icYp78bIjIFxel0Nr/V7YILx8APw
GO/etSUOMQuzew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:17 2026 by rpki-client