Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
File: SGUQoxFpcvztleiova_W5FXe0Lo.mft (raw, json)
Hash identifier: A/QuAxmN6aZaFRu9JvF+cXxDNKAi1lOOpxOIVOonKLM=
Subject key identifier: E9:20:D1:47:05:D9:F1:78:10:EF:3C:FC:02:A5:BA:AC:C1:36:D9:96
Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
Certificate issuer: /CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Certificate serial: 01A0D87263E51005A7BDCCF48530278C8A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 12:02:50 +0000
Manifest this update: Fri 25 Sep 2026 12:02:50 +0000
Manifest next update: Sat 26 Sep 2026 12:02:50 +0000
Files and hashes: 1: 1-_tolY0Ku6cjK7uWuGIDT-aOsUM.roa (hash: zHmw/JUfBT58tzI52qKI6ZXBHiMslg81gZfcAbrW9BY=)
2: 1cDQdypkn0cjo9FfkDhM0paatNY.roa (hash: +ByPIkalEzr2Rwt/bFmRxra3ZwfCDb/OP1YXhCyI2zk=)
3: SGUQoxFpcvztleiova_W5FXe0Lo.crl (hash: Xjf7vrHUoyxQ4fqJ17AH0tkG0eZe80TE+QeBBOq2P2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:63:e5:10:05:a7:bd:cc:f4:85:30:27:8c:8a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Validity
Not Before: Sep 25 12:02:50 2026 GMT
Not After : Sep 26 12:02:50 2026 GMT
Subject: CN=e920d14705d9f17810ef3cfc02a5baacc136d996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:9a:29:84:a4:71:91:66:87:86:d3:5f:2e:
3c:16:8e:22:0d:d2:6e:a4:f3:11:68:52:db:f8:bf:
48:2d:7f:34:f6:f7:cd:a7:d2:8a:22:0d:0e:32:c0:
51:3c:9f:a3:53:81:15:d8:2f:57:cb:90:28:3f:89:
fb:28:eb:e6:02:02:30:75:71:14:a8:3f:23:47:30:
34:d5:27:72:6d:56:a8:1f:1b:80:e1:37:1a:08:58:
5c:b4:76:e0:2d:9c:f7:d0:9a:e4:3c:f1:37:37:2c:
5d:7c:c3:20:95:43:27:fe:65:ce:eb:f2:fb:75:cb:
d2:57:34:63:af:e8:75:e8:af:dc:ff:ed:1d:b7:3c:
78:76:7a:9d:90:fb:72:1a:2c:6d:7b:79:ce:25:12:
90:21:a8:26:1f:e2:17:48:c4:c2:01:4a:77:f5:01:
3a:11:93:01:8f:c5:43:08:ff:92:3c:1b:65:ee:6a:
6d:e4:be:37:67:6f:ef:bb:46:d9:3d:73:1f:df:cd:
a6:44:9a:67:a4:a9:b1:a3:8c:6b:aa:85:e5:c0:11:
98:60:6c:56:35:47:90:e8:e9:1a:b0:0f:9b:8e:58:
37:4f:3c:81:35:06:ce:5b:d1:2f:15:ed:f5:98:1e:
7e:cf:70:c0:53:95:0e:f4:67:c7:d2:c4:9e:f0:2d:
4c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:20:D1:47:05:D9:F1:78:10:EF:3C:FC:02:A5:BA:AC:C1:36:D9:96
X509v3 Authority Key Identifier:
keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:d9:e0:e9:93:be:d7:92:aa:71:99:fb:85:df:94:53:1a:54:
39:f9:a6:ac:31:b1:17:1a:76:a4:1c:e6:81:5f:a3:3d:76:39:
44:6d:41:9c:70:32:01:d6:22:7b:5e:5b:9f:de:47:5a:ca:66:
a6:06:2e:aa:ba:9f:f7:8d:d7:3b:82:eb:c1:ea:62:57:ba:4a:
e6:ac:97:f3:3b:6c:3e:27:5c:1d:73:8e:12:07:76:72:d4:69:
bb:d4:04:de:18:65:aa:5f:7e:75:57:ea:2e:bd:cc:cd:f5:86:
f0:9b:ce:ed:f3:f0:c3:5a:bb:d7:da:0d:25:e8:67:14:e1:44:
a3:94:f0:13:68:f5:2c:da:4e:18:18:b1:aa:95:3c:cc:09:7c:
3c:06:04:4f:a8:89:ab:8d:1e:78:c4:8f:66:dd:c3:05:43:d9:
ef:c5:6f:cd:84:b8:55:72:c0:c7:67:72:2e:40:f8:fe:86:db:
da:54:d0:d5:e4:a5:5b:19:5d:24:00:0f:fb:e8:ae:e4:13:53:
33:ef:f3:57:2b:ec:c1:4c:e8:75:63:8b:18:a2:3c:89:76:23:
f4:00:45:93:06:32:09:b8:fc:e6:a6:af:06:98:ef:5f:7f:2e:
95:7f:d5:0f:20:97:c9:21:86:0f:8d:f9:a4:a3:4a:22:97:69:
d1:ac:6c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:42:56 2026 by rpki-client