Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
File: SGiJzk60_XR4GCSDld5fuT0f4UI.mft (raw, json)
Hash identifier: za+TqZzfuaJWySu9crvGEzRy5giSwIojySGCfSuQgOc=
Subject key identifier: 62:18:B4:3C:F7:9D:E1:32:A7:8F:EA:26:61:FB:5D:24:6C:E4:14:FC
Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
Certificate issuer: /CN=486889ce4eb4fd747818248395de5fb93d1fe142
Certificate serial: 019D2816FF3DB81295506627E1F4C6D3985B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
Manifest number: 0404
Signing time: Thu 26 Mar 2026 03:01:28 +0000
Manifest this update: Thu 26 Mar 2026 03:01:28 +0000
Manifest next update: Fri 27 Mar 2026 03:01:28 +0000
Files and hashes: 1: 9Szxj7ksKuCXA-mU4WJw6FwBa-8.roa (hash: dbreI6iiuCYJc1Zi2XdOuKeWZjsIDBcTLiyZ8rQ+QKg=)
2: SGiJzk60_XR4GCSDld5fuT0f4UI.crl (hash: bgBb0OFCDF/XahO6bRO4lY3SYEezY/MmrzY84Ok0bGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ff:3d:b8:12:95:50:66:27:e1:f4:c6:d3:98:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142
Validity
Not Before: Mar 26 03:01:28 2026 GMT
Not After : Mar 27 03:01:28 2026 GMT
Subject: CN=6218b43cf79de132a78fea2661fb5d246ce414fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:ec:79:40:30:a4:8d:d6:fc:aa:c9:87:19:
b9:c8:c9:45:15:ed:6e:00:3e:6c:d4:45:0d:c2:cf:
08:de:6b:69:2f:ae:cc:7e:8b:d0:63:0a:23:05:d9:
87:a9:37:63:70:5c:ff:fe:ff:44:4b:6a:ca:5c:95:
70:37:23:cf:52:54:63:6c:1a:d3:59:23:c1:85:f9:
11:e0:34:9c:d5:91:35:5d:77:88:f4:a6:ec:fc:b8:
78:95:18:84:00:0a:b7:8a:3b:8d:b4:3d:12:89:83:
d9:23:13:69:b8:75:10:d5:18:f3:ad:66:9a:36:61:
b8:85:b1:29:ac:06:97:c7:4d:84:6e:36:7f:9d:e5:
a6:20:de:06:62:82:89:4b:0f:af:fb:80:71:be:e7:
20:f0:76:2a:f5:4d:3e:a4:cb:51:09:25:36:38:a5:
54:18:f8:08:14:9d:80:f1:73:ac:39:c3:6d:ff:b5:
a1:70:64:e6:24:9e:3d:7e:14:85:7c:08:1e:c0:d6:
8f:6d:80:ad:bb:85:c0:a2:7a:6c:79:a6:48:f4:85:
47:2f:45:f4:73:ac:3d:8b:47:73:75:9e:6b:91:de:
1c:ec:c4:d5:e4:6b:96:a7:06:c9:4b:f1:ae:10:13:
5e:3c:c1:08:d2:b2:dd:9c:25:4c:d8:be:93:2f:63:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:18:B4:3C:F7:9D:E1:32:A7:8F:EA:26:61:FB:5D:24:6C:E4:14:FC
X509v3 Authority Key Identifier:
keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3e:e6:df:66:97:57:f6:a6:7a:7a:80:27:ed:ea:6d:20:2c:
47:e9:3a:07:4b:46:16:c8:55:3f:da:86:ce:97:73:e0:b1:d4:
dc:ff:b8:d7:d9:75:c3:83:a7:33:4b:eb:eb:93:c7:c2:f4:73:
c6:dd:59:27:57:60:73:a5:05:a6:7a:e9:c1:43:73:1c:4f:50:
d0:54:a1:85:8f:23:fc:60:89:0f:f8:b4:e1:b2:d2:7d:e1:f2:
78:14:67:95:91:ba:3a:59:d4:18:f7:55:18:ed:ed:24:03:94:
f4:62:be:37:52:a2:45:8a:20:0d:0d:a6:67:54:44:5b:42:c9:
79:a7:5d:db:ff:db:18:29:91:8e:b3:89:c0:7a:53:4c:3f:9f:
5d:c7:ec:9f:ea:7b:40:51:f9:c8:a4:4f:4e:25:46:ea:ab:5f:
e3:ab:3f:c0:c6:5b:5a:8a:25:3d:35:66:7a:6f:79:d0:3e:61:
82:8b:03:e0:d3:f5:b5:5c:58:f4:97:0a:ab:c2:12:be:11:c6:
38:26:7b:37:83:4b:77:64:3e:2d:a6:96:35:5d:54:b1:7f:78:
3c:7c:58:4e:d4:e7:a2:0a:78:6a:01:c2:b2:2b:13:0c:87:6c:
64:ee:8a:8c:bf:80:ba:68:13:13:21:b2:f0:a0:b1:d5:27:fb:
e6:92:48:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:38:15 2026 by rpki-client