Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
File: SGwtivTOUM5vQ-ffROC1A3AKhsA.mft (raw, json)
Hash identifier: /XOlHhbes/hLUfeg7hWjh6GYEYEV45O/7GEtrhUB1U8=
Subject key identifier: D8:1B:F7:98:13:DE:F9:36:B6:72:51:20:A7:AF:26:58:0F:83:EF:35
Authority key identifier: 48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
Certificate issuer: /CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Certificate serial: 019F92ECDDB63F9859FE42DE2AB6C2F96950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
Manifest number: 0A88
Signing time: Fri 24 Jul 2026 07:00:24 +0000
Manifest this update: Fri 24 Jul 2026 07:00:24 +0000
Manifest next update: Sat 25 Jul 2026 07:00:24 +0000
Files and hashes: 1: SGwtivTOUM5vQ-ffROC1A3AKhsA.crl (hash: cPPdT3YJnrS0GyHsT6aRR/hAFFspoCP7k/WR+Mla4h4=)
2: uNPVajHEAw2I0yu42-R7sucpLjE.roa (hash: wuvXlFbIPIHxlIobscDW3l6bBthB20EgUJIBQX2qBNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:dd:b6:3f:98:59:fe:42:de:2a:b6:c2:f9:69:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Validity
Not Before: Jul 24 07:00:24 2026 GMT
Not After : Jul 25 07:00:24 2026 GMT
Subject: CN=d81bf79813def936b6725120a7af26580f83ef35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:88:76:46:11:1b:b7:23:e4:22:2d:7e:f1:
ad:35:59:42:6c:06:b9:ef:78:76:15:e8:42:ee:f0:
f3:7b:dd:40:aa:e3:fc:93:e5:61:c6:2d:28:a9:8d:
10:05:65:f6:6d:2e:6b:21:17:9b:59:b3:cb:c0:2b:
51:e8:f2:2f:f3:c2:c8:b9:1f:e0:63:5e:70:bf:e3:
a6:6c:f5:71:39:ae:86:d9:98:1b:d8:d0:04:18:70:
4b:c6:dd:ad:1a:da:7d:83:8b:a7:b5:75:b9:23:b6:
d5:05:b3:10:7a:c6:65:cf:93:24:a9:05:26:dd:9d:
a6:5f:52:0c:b6:b7:40:32:60:92:8b:55:4f:87:77:
b0:f4:8b:94:95:59:7c:30:df:61:3c:05:6c:41:f8:
cc:3c:5e:24:d0:a4:5c:10:2a:7f:ba:0d:88:2e:c0:
80:77:25:44:0a:c6:ad:ca:59:17:59:bd:72:2b:e1:
32:23:de:a2:52:bf:97:ec:a6:4c:f8:cf:41:e3:0d:
00:25:23:c9:e9:51:c8:17:f4:76:33:8f:96:ed:bd:
0e:07:2a:7e:67:8e:f9:cc:7e:03:af:be:58:e7:a2:
3e:6c:c1:f8:8a:2f:be:02:13:2f:d8:e0:dc:5f:c5:
a0:45:ec:c3:65:77:b2:ca:1d:3f:18:30:f5:39:76:
13:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1B:F7:98:13:DE:F9:36:B6:72:51:20:A7:AF:26:58:0F:83:EF:35
X509v3 Authority Key Identifier:
keyid:48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a4:84:b1:a0:ad:09:97:1b:52:74:66:6a:fe:72:b6:4f:60:
c6:96:b3:c1:df:7b:3b:e5:bd:3f:e5:11:57:67:9d:9a:30:a6:
19:6a:76:33:bb:05:ca:04:33:67:a2:05:6f:b4:11:e8:6a:71:
b5:9f:55:26:32:15:3b:ae:44:99:ee:3d:7e:8c:b3:8e:5c:94:
c0:38:81:51:ce:d8:1a:4a:b1:47:ba:c9:20:e3:9f:f1:4f:67:
45:dd:0f:a7:d1:c1:a7:06:d3:f6:d9:96:07:84:53:c1:7b:86:
c4:31:a3:79:93:ce:3f:42:53:71:fe:b8:05:e3:c6:da:9a:47:
2d:db:5c:c5:d7:a8:dc:5c:62:29:69:1a:2f:4b:55:54:98:4f:
1e:3e:dd:22:3c:31:d0:04:37:54:8c:ee:a6:2b:a0:d2:51:e9:
3c:b7:ba:41:99:1c:39:4a:bc:5e:79:fa:4c:2d:3f:19:8c:99:
19:a4:69:82:8d:57:f9:03:cd:ee:37:75:4a:0d:04:bb:52:19:
c3:77:6f:9d:93:cd:07:07:b5:09:77:44:60:d5:68:73:f8:0b:
5e:1e:12:5e:1a:fb:a6:c3:f7:ef:8e:a1:a6:7f:10:6e:40:9f:
6c:05:18:4d:00:f6:31:c0:aa:81:27:8c:97:8e:ef:b9:09:20:
71:32:bb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:55:16 2026 by rpki-client