Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File: SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier: AW167T3m2LfMFYiG9u4NT4eRmqKAWbu/ITUp8LsdjYU=
Subject key identifier: A6:A7:E6:0B:BC:5C:55:32:AA:DF:68:75:1A:C4:95:0D:7B:21:AC:92
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial: 019F90230BF22CB4D7AB68EA8DFF348DE421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number: 19AF
Signing time: Thu 23 Jul 2026 18:00:43 +0000
Manifest this update: Thu 23 Jul 2026 18:00:43 +0000
Manifest next update: Fri 24 Jul 2026 18:00:43 +0000
Files and hashes: 1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: fXDZgoSOERxkRK0FX9yTFRiTjvVQGQx56a7n7TQMLdo=)
2: r_1SBfNhdBcm7JVeR9X_A84AJes.roa (hash: 5FQO7eCKudZ+J7HgNfZUcYEMcJXj0nI8UpKfM1ybpwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:0b:f2:2c:b4:d7:ab:68:ea:8d:ff:34:8d:e4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Validity
Not Before: Jul 23 18:00:43 2026 GMT
Not After : Jul 24 18:00:43 2026 GMT
Subject: CN=a6a7e60bbc5c5532aadf68751ac4950d7b21ac92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:07:a5:d0:78:ca:dc:57:49:e9:7a:26:91:
6b:8f:35:81:6d:68:0e:4e:aa:77:cd:19:04:0c:96:
05:54:d2:d8:af:c7:24:98:18:1d:bb:4e:60:b2:b0:
7f:55:8f:21:64:7a:92:2e:ac:2e:b5:86:24:1b:41:
ae:d4:cb:8e:95:b1:0b:59:4f:98:6d:ba:a9:55:37:
a5:4a:a4:93:9a:57:90:ad:fc:55:ee:65:44:f3:4e:
ab:d3:84:99:4f:cd:2c:b2:73:4f:1e:4e:26:68:90:
65:10:e0:f8:b7:a6:40:dc:5e:c2:20:cb:6e:6a:4e:
5a:10:a7:4d:08:1b:ca:1c:60:56:b4:ff:ed:30:3f:
5c:dd:41:4d:ed:15:60:fd:11:f1:a5:b6:7d:94:6a:
c4:6b:90:f1:44:58:e1:07:74:75:87:f1:f5:3f:9b:
65:ab:33:5c:21:b6:e3:0a:77:25:ba:e9:83:da:a9:
82:3b:30:f9:99:36:29:fd:eb:1f:99:56:79:2a:db:
1d:ab:5b:c6:27:a5:ee:de:dc:5f:df:24:fb:fd:99:
58:8d:04:db:f9:3e:3d:3a:d5:a0:05:06:b2:34:a7:
ea:86:8f:20:8c:38:b3:a7:39:be:a9:88:55:7a:c2:
9c:0f:04:5d:46:f4:f7:6b:e4:78:ba:58:ec:99:40:
42:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A7:E6:0B:BC:5C:55:32:AA:DF:68:75:1A:C4:95:0D:7B:21:AC:92
X509v3 Authority Key Identifier:
keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:49:76:a9:c4:4a:be:7e:74:bf:99:65:19:7a:ca:a6:a7:08:
d3:50:1b:7e:9f:65:c1:54:d3:90:50:e0:2b:95:8c:fa:9e:2f:
9e:a2:79:8d:91:89:44:4a:d7:e2:38:9a:0c:81:d1:b9:65:c0:
bc:bf:fd:4f:ee:9c:36:63:7d:c8:8b:c1:73:6d:d8:ae:1f:93:
a3:e8:45:2a:35:b7:43:08:65:03:52:10:6f:df:eb:31:20:07:
c2:19:21:ef:0a:6e:44:4a:e9:cf:68:6c:a0:ef:f9:63:0d:25:
78:e5:24:cd:e9:0a:9b:ef:e9:f5:f6:1b:1a:5e:ee:46:1a:dc:
59:15:a5:16:0f:f9:1c:a2:90:72:3b:d3:e2:56:4e:c5:e0:96:
67:d6:70:12:7e:4d:4d:57:3c:f6:fe:90:48:fe:36:4f:77:03:
ef:57:77:2a:17:29:c6:97:fe:5b:c0:76:86:55:f7:73:18:ae:
83:55:82:96:c9:9a:2c:60:29:dd:8a:14:91:9f:5b:0d:d5:af:
50:cc:b8:0a:bf:58:9d:35:92:ee:cb:84:b6:38:73:e2:82:5f:
1d:e1:4b:99:d1:0a:ad:2e:e8:dd:a7:f6:3a:ff:25:20:58:f4:
6d:e1:61:e1:5a:c0:9a:92:40:6b:6c:68:61:dc:e2:cf:a2:c9:
f1:0a:c4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:43:45 2026 by rpki-client