
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
File: sgWR5euUhCdKdKyC_muRDivLE5k.mft (raw, json)
Hash identifier: oJ0Krxghs+rawRu5RMfCU+ShwXA2BW0CIc/OzRziJdw=
Subject key identifier: 35:25:DE:5C:0B:AC:CF:90:66:55:7F:E7:3F:3E:76:57:A1:A4:62:66
Authority key identifier: B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
Certificate issuer: /CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Certificate serial: 019E1D901BCE25D28E00E5EDDDB7E1300404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
Manifest number: 63
Signing time: Tue 12 May 2026 19:00:43 +0000
Manifest this update: Tue 12 May 2026 19:00:43 +0000
Manifest next update: Wed 13 May 2026 19:00:43 +0000
Files and hashes: 1: YNiESc72RDLIiWhCHsXSi1o9cLE.asa (hash: l71vJ2s8lHSefHy7yMSFsWXnMilHTDdYBPtW2A9TX3g=)
2: sgWR5euUhCdKdKyC_muRDivLE5k.crl (hash: u4WC6PrsTIqz0inKzeRHvV9lcr/sUkJOyNuM1TTIZQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:1b:ce:25:d2:8e:00:e5:ed:dd:b7:e1:30:04:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Validity
Not Before: May 12 19:00:43 2026 GMT
Not After : May 13 19:00:43 2026 GMT
Subject: CN=3525de5c0baccf9066557fe73f3e7657a1a46266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:66:2e:77:06:70:6e:73:f2:30:e5:8d:9f:
ff:b8:02:f7:5e:2e:41:09:0f:f4:97:08:ee:64:09:
24:50:d9:ea:42:62:ad:1a:87:46:d0:90:28:05:a0:
5e:2b:89:a0:e8:14:80:b5:c7:57:c8:0c:30:71:75:
ef:ab:7b:65:02:da:1e:28:28:02:a4:44:97:56:7f:
84:c6:f0:65:b2:06:25:a1:86:42:c8:b3:b2:93:c4:
a6:19:17:6e:d0:1c:0a:dd:37:ae:e5:da:6a:ae:9b:
d6:25:7c:ca:15:4b:fd:d8:f1:0d:3c:92:ea:33:2b:
65:02:40:fd:af:0e:42:44:f4:5b:91:71:54:80:37:
b3:d4:1a:f6:43:39:51:b9:45:f7:ba:87:1d:12:54:
dd:91:cd:9c:42:6b:3a:1f:2f:9f:68:16:46:a3:ce:
7e:e5:2c:a8:8b:48:ce:13:f0:29:62:a8:1a:69:11:
55:ef:13:e5:e6:20:e5:4c:63:e7:26:ea:32:50:72:
73:0a:1f:85:e0:a8:8f:cd:c1:44:05:27:60:71:e2:
fe:3d:b2:86:fa:73:9f:63:8c:af:85:67:79:84:65:
55:55:a6:1b:fc:17:fd:3d:3d:7c:d0:e9:f8:ad:3b:
ce:98:0b:c0:6f:6e:8d:3c:72:57:c1:e6:27:c8:91:
9d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:25:DE:5C:0B:AC:CF:90:66:55:7F:E7:3F:3E:76:57:A1:A4:62:66
X509v3 Authority Key Identifier:
keyid:B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0c:c3:18:29:5b:48:3a:81:4c:70:1e:a4:53:95:95:81:7a:
d9:ae:68:26:93:42:88:32:f7:60:9d:05:80:ca:e8:49:ae:90:
df:ed:81:2a:6b:5d:a1:3d:a2:71:55:6d:14:52:b0:05:62:c0:
db:16:f5:49:65:2a:34:eb:a9:0d:02:7b:46:7a:7f:30:33:e3:
2d:36:ff:56:e0:7d:0e:a9:05:0a:6a:c3:6c:06:f9:50:7d:fc:
e0:da:a5:a6:bf:41:ff:c1:55:81:c2:03:2d:a9:aa:45:c2:23:
0c:64:4d:e7:0e:7b:69:53:ba:48:b7:62:0a:14:1a:70:28:b7:
0c:30:44:9c:24:cd:df:c0:d2:b6:7f:74:e2:7c:fe:58:d8:dd:
d3:db:84:20:bf:eb:84:31:c1:80:b7:36:d7:c4:b0:5d:9e:42:
2d:dd:b2:98:dd:30:df:fd:e9:dd:6b:13:c8:c4:5c:86:ea:f9:
3c:f9:f6:af:cc:6a:1d:ac:87:f3:0f:10:98:98:ec:12:68:f2:
c9:91:98:f5:15:5d:a5:63:ed:ae:36:7f:c1:75:dc:72:c3:b9:
5a:13:79:df:04:1c:0f:6d:93:bd:ec:9a:86:53:1c:ae:dd:3f:
8d:f7:4c:b3:e5:ac:52:d1:df:0a:23:78:f6:c6:90:10:ac:30:
7f:28:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:39 2026 by rpki-client