Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
File: sgWR5euUhCdKdKyC_muRDivLE5k.mft (raw, json)
Hash identifier: SbY4I1wZA5tGdKmN/1ftHk9hXMNwc3MwgGKB6HyX92I=
Subject key identifier: E0:C5:4F:16:3F:A8:BD:4F:09:E0:03:8F:DC:FE:C8:92:84:7D:C4:E7
Authority key identifier: B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
Certificate issuer: /CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Certificate serial: 01A0D2DEFF8B68F9D04C525086B465E48922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
Manifest number: 01CA
Signing time: Thu 24 Sep 2026 10:03:44 +0000
Manifest this update: Thu 24 Sep 2026 10:03:44 +0000
Manifest next update: Fri 25 Sep 2026 10:03:44 +0000
Files and hashes: 1: YNiESc72RDLIiWhCHsXSi1o9cLE.asa (hash: l71vJ2s8lHSefHy7yMSFsWXnMilHTDdYBPtW2A9TX3g=)
2: sgWR5euUhCdKdKyC_muRDivLE5k.crl (hash: feMPupY8iAbBedMviCfZ3XT4O29PXtcQ2gNUhgDQyBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:ff:8b:68:f9:d0:4c:52:50:86:b4:65:e4:89:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Validity
Not Before: Sep 24 10:03:44 2026 GMT
Not After : Sep 25 10:03:44 2026 GMT
Subject: CN=e0c54f163fa8bd4f09e0038fdcfec892847dc4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:93:51:80:eb:96:79:84:24:b5:25:ca:8f:
1c:18:31:f0:51:8f:29:8b:48:83:19:77:d8:ec:75:
65:cc:b1:91:09:62:99:29:b1:f0:6c:70:2a:bd:8c:
b0:af:36:c2:8f:94:fd:35:c4:65:22:72:a9:6d:29:
00:fe:8a:93:c9:87:d9:eb:5c:99:2b:e9:e3:a3:3e:
78:7f:7e:3e:5e:f9:bd:51:91:ed:7f:64:b5:c8:8d:
ae:5b:24:e8:b9:c8:87:ee:84:15:ec:7e:b5:8f:53:
08:af:9f:95:5e:96:56:37:fa:86:17:7c:f0:92:b6:
da:14:13:1a:81:43:f1:67:13:65:b5:56:55:a8:7d:
f5:d3:d2:9e:d8:d9:3e:61:b9:25:c0:77:52:15:15:
4d:a7:ad:82:cd:22:f3:5b:73:37:4e:fe:48:ef:b4:
63:86:ed:dd:50:9f:cc:a0:05:53:1b:6c:e7:01:4e:
31:c7:11:ae:ae:aa:7b:ab:57:ed:b5:04:e3:bb:4b:
2d:0c:2f:da:2b:60:76:89:14:34:32:07:51:6f:9e:
7a:c9:c7:7f:3e:72:1a:71:41:05:26:36:95:b3:05:
f6:e9:2e:60:c9:83:80:cc:0d:93:11:7c:eb:b0:4e:
5e:7a:a4:97:db:1b:21:c8:30:20:e4:74:22:d9:2a:
45:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C5:4F:16:3F:A8:BD:4F:09:E0:03:8F:DC:FE:C8:92:84:7D:C4:E7
X509v3 Authority Key Identifier:
keyid:B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:37:52:da:61:4e:16:da:f0:77:47:18:97:2f:60:64:47:b4:
df:2f:22:94:70:7d:7f:49:fd:93:47:f3:e3:2f:d2:5e:f8:3a:
22:64:be:bb:46:3a:90:a2:eb:24:6f:53:6a:c1:a0:47:cc:db:
b7:8d:ce:79:18:0e:50:28:97:a4:57:01:33:15:d0:80:bd:c6:
47:8b:b9:3d:d2:00:cb:c6:df:78:1a:1b:d8:f1:c6:a7:50:19:
b4:dd:88:4d:25:c6:d3:8f:69:9e:85:75:99:f6:c2:73:89:90:
82:a3:cb:ed:81:1e:26:99:a8:a7:29:55:df:f4:eb:41:f4:ab:
ca:50:eb:53:65:49:a8:64:71:7e:96:f9:48:64:07:d2:98:46:
30:c7:b1:1d:51:5f:23:1c:24:b8:3c:f8:e8:ab:e2:59:54:4c:
85:3c:ac:42:12:d7:97:cb:b8:62:0f:8f:ba:0e:b8:a1:45:53:
e0:e3:ab:91:97:a9:d4:77:f5:01:fa:91:68:d9:01:8b:33:0c:
c0:f0:c4:9a:6d:fd:a4:65:ac:81:f2:55:a1:39:d1:00:69:9a:
98:d8:b0:c1:27:58:48:dd:78:52:72:90:85:d8:dc:49:5d:30:
2b:61:1b:4f:4e:27:b3:e8:15:64:2b:53:80:9d:b6:e7:32:65:
0c:c5:73:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:24:08 2026 by rpki-client