Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
File: SGwtivTOUM5vQ-ffROC1A3AKhsA.mft (raw, json)
Hash identifier: TgX/RPokWtOhBc/3oRs/hwO77/3bTebBJBhEPDTb18Q=
Subject key identifier: D3:20:DA:8A:EE:1F:EE:E2:8E:90:DB:9C:6B:5E:B4:60:84:C0:23:6A
Authority key identifier: 48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
Certificate issuer: /CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Certificate serial: 019D2704D5BD727593D30C37B21A5CC400F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
Manifest number: 0947
Signing time: Wed 25 Mar 2026 22:02:01 +0000
Manifest this update: Wed 25 Mar 2026 22:02:01 +0000
Manifest next update: Thu 26 Mar 2026 22:02:01 +0000
Files and hashes: 1: SGwtivTOUM5vQ-ffROC1A3AKhsA.crl (hash: eftCopi3R/wNiinE5y0/l5n7kDPhWG6YOiAWfwnI7ao=)
2: uNPVajHEAw2I0yu42-R7sucpLjE.roa (hash: wuvXlFbIPIHxlIobscDW3l6bBthB20EgUJIBQX2qBNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d5:bd:72:75:93:d3:0c:37:b2:1a:5c:c4:00:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Validity
Not Before: Mar 25 22:02:01 2026 GMT
Not After : Mar 26 22:02:01 2026 GMT
Subject: CN=d320da8aee1feee28e90db9c6b5eb46084c0236a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6e:cc:48:70:8a:25:dc:99:ec:ce:e4:e8:6f:
07:2c:d8:d0:d6:d2:1a:9e:ca:75:9f:dd:bb:25:ad:
c3:4f:a5:2f:e9:73:46:c7:fc:de:1b:e3:5d:13:b1:
57:c8:19:bf:b2:7c:a2:9b:a3:00:82:43:72:54:d7:
7a:6b:32:21:54:72:31:a7:a1:2b:2c:03:34:2a:cf:
f1:ee:53:78:d0:59:b2:7f:00:4e:8c:27:61:64:c0:
48:2f:26:c0:27:84:8f:ee:30:9a:b4:d7:4b:82:fe:
07:d2:ce:20:f2:07:4f:e4:a4:59:ca:69:31:86:2c:
9e:a8:54:5d:2f:c0:62:7e:e7:47:9b:a0:46:5e:d9:
89:e2:65:02:6a:89:d1:49:8e:53:35:0d:c8:1e:3d:
ea:a2:31:25:e2:9d:11:d8:c2:cc:5b:63:f1:f9:55:
2f:e9:0e:2c:d0:fe:c7:9e:78:61:c3:2d:62:b4:1d:
de:6c:d2:1d:25:47:c6:33:90:4b:62:6a:2f:84:ad:
d9:0f:b0:e9:6f:ab:c1:16:b3:4f:9e:88:0e:04:de:
49:fb:53:8e:39:f7:a3:59:af:73:70:39:a3:02:c3:
b2:6f:22:67:68:06:66:4a:c0:21:6d:00:31:2f:9f:
11:04:c6:28:aa:79:d0:9b:a7:2f:b6:e2:2c:86:68:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:20:DA:8A:EE:1F:EE:E2:8E:90:DB:9C:6B:5E:B4:60:84:C0:23:6A
X509v3 Authority Key Identifier:
keyid:48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c4:02:56:9c:ee:90:70:71:85:6f:c6:52:40:81:9c:43:1d:
02:c0:0c:33:6e:0a:2e:16:7f:21:ab:2f:62:18:ca:ee:24:cf:
5e:c7:48:db:af:b3:51:a7:66:2c:6b:03:d7:fe:6f:47:5b:28:
0b:d4:df:0d:c7:90:fc:b0:d9:c3:bb:75:07:9e:92:97:98:f2:
08:5d:93:09:50:fd:38:57:37:8e:cc:1e:b7:23:9c:e2:a9:83:
74:ff:bb:30:6c:7f:6f:86:da:f9:6c:91:48:6f:c3:9d:80:56:
75:f5:a4:6d:2d:0c:eb:50:13:f2:9a:2d:71:c8:e2:10:fe:c2:
b9:6c:0b:6c:58:58:2b:51:07:60:90:c4:fd:ad:e1:1f:71:11:
54:48:fb:73:b3:27:74:d2:50:84:ef:7e:f4:36:18:ed:cd:33:
82:72:19:92:0c:8e:ed:90:ae:e3:74:09:80:c0:08:bc:20:f6:
9c:78:70:bb:c8:95:e2:09:20:72:0b:97:26:c1:3f:81:d0:43:
27:3f:c4:72:da:c1:f8:b5:71:44:6b:7b:c2:40:92:a4:47:16:
ba:29:08:d2:47:97:5d:2e:29:86:55:2c:bd:23:2f:97:54:f5:
0a:49:14:ce:8e:23:73:e3:4b:77:41:21:39:00:86:b1:3e:c2:
54:f9:24:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:04:54 2026 by rpki-client