Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
File: 1SGSgT0i76BLy7JOC_D-NNjfukg.mft (raw, json)
Hash identifier: 5Se2AzrottXQAiQ0//0aM5f4j4t5PNhZ3Z1A0SQgAXM=
Subject key identifier: 64:D8:4D:46:EA:D5:64:2E:64:16:22:E6:C9:D8:38:95:7E:06:5D:31
Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
Certificate issuer: /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Certificate serial: 01A0E1E1BAF482179F9DA5DA985DFE999BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
Manifest number: 0697
Signing time: Sun 27 Sep 2026 08:01:02 +0000
Manifest this update: Sun 27 Sep 2026 08:01:02 +0000
Manifest next update: Mon 28 Sep 2026 08:01:02 +0000
Files and hashes: 1: 1SGSgT0i76BLy7JOC_D-NNjfukg.crl (hash: oKfmCYppX6Ez2UXIMVoId0wBWCtcAKlhKeTWMMCr0+4=)
2: irsd6se3UI4Vehs4kcliozefsFU.roa (hash: fTkE3KDW/GsXrLu5wWzp0YdBO44h0Y6GslfTVrGJEkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e1:ba:f4:82:17:9f:9d:a5:da:98:5d:fe:99:9b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Validity
Not Before: Sep 27 08:01:02 2026 GMT
Not After : Sep 28 08:01:02 2026 GMT
Subject: CN=64d84d46ead5642e641622e6c9d838957e065d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2a:6c:ea:b7:d1:df:58:72:b9:f5:2a:f5:82:
4e:a0:b6:85:e7:f8:cc:25:de:23:8e:34:8b:96:24:
89:8d:85:22:78:ba:07:d2:e7:c7:11:c6:6d:44:0e:
58:1b:96:50:33:12:66:84:09:29:3b:6c:2d:d9:ce:
29:e1:06:7a:2b:8b:e3:13:2c:48:da:1a:a1:72:bd:
0b:bf:b5:3c:53:86:b0:8d:15:ad:e9:ba:3a:5c:50:
de:02:92:a2:2c:9b:be:d3:98:5e:78:2a:f5:ea:04:
d5:df:5e:b6:12:ce:05:a6:5d:98:51:63:95:9a:a7:
f4:ac:15:e0:8a:70:cd:d4:26:21:2a:98:bf:08:bc:
43:62:08:80:3e:6e:c5:d9:54:e1:7e:32:b8:c9:98:
75:c0:ab:67:3f:63:41:fa:af:1a:93:b0:bc:98:ea:
d3:9c:25:af:f5:c0:82:b6:08:ab:44:bf:ca:7c:9e:
7b:8a:b6:a1:a7:dc:dc:c2:58:bf:58:df:8b:ae:ea:
61:07:4b:fd:2d:7f:99:67:b7:40:9d:a0:2f:10:10:
6b:90:23:ec:2e:24:32:24:24:22:4f:09:79:49:d1:
24:f5:24:de:eb:31:35:22:79:77:d8:66:40:1f:9a:
6d:56:61:d5:a6:c0:ee:03:ba:c2:c7:72:67:40:66:
9d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D8:4D:46:EA:D5:64:2E:64:16:22:E6:C9:D8:38:95:7E:06:5D:31
X509v3 Authority Key Identifier:
keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a5:62:af:4a:d2:f5:24:68:47:08:75:e5:63:91:8d:19:cf:
4e:e8:19:64:57:b9:94:92:51:6d:fd:66:9a:65:15:d0:64:c4:
7f:78:22:46:0a:d6:f0:99:79:85:ab:35:93:f4:d7:2a:0f:f1:
d4:e1:3d:c5:30:9a:2f:79:c8:f6:ce:d0:f1:44:e8:7b:3f:2b:
c0:1b:67:8e:22:0a:75:ca:66:a2:d5:5c:f4:77:a1:d5:52:35:
26:b0:ad:21:e6:e7:7d:65:34:6e:79:20:e6:01:b5:f7:9e:be:
72:cd:0c:5f:12:5e:ab:13:2f:42:5a:a6:a7:0e:6e:d7:df:6f:
a3:d3:66:e9:97:7c:09:bd:42:4f:19:f7:5d:de:f1:bd:9a:9b:
88:b2:82:eb:3c:a8:7d:11:09:a8:2b:3c:e3:2c:9e:88:f7:07:
2a:48:ef:dc:e5:e5:2e:01:4b:50:60:8e:7a:05:b2:9e:44:25:
2b:78:0d:58:b8:34:66:92:75:33:64:e1:e7:f3:5e:90:e7:88:
f6:8a:0f:28:c0:2f:64:38:c7:db:c2:1a:b9:b1:0b:1d:f5:29:
a1:1e:6e:e8:d2:1c:a4:fc:6e:e1:00:42:79:2e:66:ba:65:d8:
42:f6:af:71:f4:03:53:a4:d6:3a:71:69:d5:72:2d:72:a0:9c:
94:10:57:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:11:06 2026 by rpki-client