Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File: SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier: gy1mcUizwFhhnEhFTySm+Tezo5Mp59sWkP8J5lhcRdY=
Subject key identifier: 4B:BA:AD:72:FD:01:F0:E4:AD:0B:85:68:D7:3D:AD:D2:5A:74:A4:6E
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 019D28848AE59FE003AB5A40541C9FFE7873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number: 1686
Signing time: Thu 26 Mar 2026 05:01:08 +0000
Manifest this update: Thu 26 Mar 2026 05:01:08 +0000
Manifest next update: Fri 27 Mar 2026 05:01:08 +0000
Files and hashes: 1: 32houEZJjYMHYgPuRqIg-2gVrRU.roa (hash: SgYOhNo4HZLgeATCDQYMmqSzEM1MXHyJPN6hUBC7MIM=)
2: JnkLx50ImRIwe6DLwjoBPmLJiIM.roa (hash: ZgcI3W3bS8GffqjlQ449bvcUFmbTNqw4WdF2nIUN8ao=)
3: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: 2TaJgW+Ju1SR2vVjGy5Ffuz60dfRfpW5NMxAtNn81fU=)
4: TSB5mTZZzRTTPnt6-Y8o-3CQEPA.roa (hash: PsDTk/dMLVROLGkVcO0KwNjR8rb+3K2JtemVORHSo8Y=)
5: Vzeyp2a_2ybj2YU-0i2OoZlnwnI.roa (hash: OMd6zbL5MprZ3M6eB+ZY4S4Gxx6gPSlVJAESUBQW+L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:8a:e5:9f:e0:03:ab:5a:40:54:1c:9f:fe:78:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Mar 26 05:01:08 2026 GMT
Not After : Mar 27 05:01:08 2026 GMT
Subject: CN=4bbaad72fd01f0e4ad0b8568d73dadd25a74a46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7b:24:e8:e5:0e:cf:bc:c6:62:1b:7d:ab:eb:
f7:f5:6b:26:4b:38:60:34:26:f7:99:ba:d2:84:7d:
d6:43:9f:f2:be:ea:d0:c2:2c:bf:b2:18:c4:3d:7b:
75:d6:40:ba:33:2f:9d:d4:aa:c9:d7:78:64:09:53:
e3:b0:b0:74:71:4a:be:a4:db:e5:26:d9:59:30:e5:
ed:c7:b6:03:c4:a5:5d:16:28:b6:99:0a:33:e8:f2:
5d:4d:bb:cd:27:b8:b6:62:1d:47:00:54:80:1f:e6:
93:38:03:db:f3:59:2e:93:ff:94:87:e3:c0:24:88:
8c:42:ea:e6:d4:a9:a3:0f:41:53:0a:69:9f:2d:4a:
ff:dc:15:81:32:c1:43:92:41:ed:1b:fc:fc:f4:8d:
c9:68:2d:51:81:34:10:df:fb:50:03:8b:6b:f5:3d:
d7:6a:c5:28:5a:ba:e3:77:b1:56:9b:a8:3a:38:35:
34:eb:73:fd:f6:d4:71:40:ba:73:42:59:6f:ad:c1:
5d:47:85:e4:81:01:bf:85:eb:00:1b:cf:6f:1f:16:
02:a2:a4:41:5f:66:0b:dd:ee:ef:78:df:2e:55:86:
08:08:48:3a:a0:6d:10:d1:83:33:b5:cb:e7:06:91:
a2:d3:6a:63:8f:fe:22:cb:4c:8e:3e:b2:39:87:7b:
89:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BA:AD:72:FD:01:F0:E4:AD:0B:85:68:D7:3D:AD:D2:5A:74:A4:6E
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cb:43:3b:86:8e:9c:9b:75:50:d8:9e:a9:d0:f7:25:f9:22:
24:9e:60:2d:29:d5:e8:d2:f9:b7:29:ba:02:0c:3b:26:3e:a2:
d4:00:08:a2:85:ae:01:67:3a:d9:4d:98:ba:68:d8:a2:a6:28:
2e:dc:3a:84:39:48:7b:59:8f:a5:74:6c:61:bb:ce:23:29:57:
d3:a1:17:93:7d:91:08:28:db:9f:3a:c4:25:82:7b:46:3d:f0:
e4:a5:36:6c:55:94:9d:5a:72:90:c3:20:d4:6f:a0:b7:d9:bd:
62:88:9e:b2:c7:e0:8e:05:e8:ab:d9:00:0a:50:6d:20:d5:c9:
3d:76:90:8e:a7:cd:f2:b2:f5:5e:ca:64:b5:ed:c8:8d:14:5f:
f0:70:a3:77:7e:0a:d1:72:40:ce:29:50:ca:99:b2:ed:1c:39:
05:b8:f1:6c:51:88:c3:15:52:d2:27:ae:58:7c:e3:e8:31:56:
3a:8e:95:2c:eb:13:d2:47:43:89:a4:a2:be:2a:c8:3b:a4:91:
cc:21:11:31:90:79:c0:2d:b0:41:13:9b:2d:42:84:40:0e:e6:
95:98:5d:20:67:19:39:9f:8a:75:41:39:84:ec:d6:f4:d6:cd:
29:af:d3:d7:4d:ae:17:71:aa:85:f6:b7:ab:83:fe:80:df:bc:
42:f9:61:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:41 2026 by rpki-client