Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
File: SGgL3la9O_VhV4oP4QjLwcanWds.mft (raw, json)
Hash identifier: figgqDfN7FGHcujCf/rqU9vLQcuR8gmEktvB37PAXRU=
Subject key identifier: 93:EF:8A:33:67:62:D2:85:58:34:07:01:AA:64:AC:15:F8:16:08:C9
Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Certificate serial: 019D25BA9EC99EB5AF8B71CA36F7F9B7E838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
Manifest number: 0D05
Signing time: Wed 25 Mar 2026 16:01:20 +0000
Manifest this update: Wed 25 Mar 2026 16:01:20 +0000
Manifest next update: Thu 26 Mar 2026 16:01:20 +0000
Files and hashes: 1: 2qKpe107wG5JVGZmhM-9ulhsBNk.roa (hash: YqAbcKnhc9tQvPIiqsxdd96YUAj8t/cCoA1qvpRjwZc=)
2: SGgL3la9O_VhV4oP4QjLwcanWds.crl (hash: McYnmUqSy8h/2YKpq4LOJucTqj3GJxgXn0WzDboe16o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:9e:c9:9e:b5:af:8b:71:ca:36:f7:f9:b7:e8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Validity
Not Before: Mar 25 16:01:20 2026 GMT
Not After : Mar 26 16:01:20 2026 GMT
Subject: CN=93ef8a336762d28558340701aa64ac15f81608c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:06:42:d9:6a:44:c0:73:f7:23:03:6b:8c:
99:1d:87:46:db:10:cf:bd:2e:f3:a8:70:73:10:b0:
81:d4:81:a3:37:c2:91:82:90:28:15:33:d9:91:44:
ef:50:cf:ed:6c:dd:d1:48:ca:7e:e7:5d:4b:9f:64:
be:a3:f8:2b:be:e5:7c:4c:ba:50:e3:41:56:1b:4c:
08:aa:ce:79:73:b5:e3:a1:1e:d7:aa:bf:f6:94:47:
ca:aa:34:89:c1:3d:f4:9c:04:ad:b5:6e:a2:7c:5c:
b3:85:89:b5:f5:39:fb:03:0a:ee:20:1c:51:f4:b8:
6b:9f:1c:ef:dc:a6:eb:66:50:98:6b:ff:00:65:0c:
ce:24:84:e4:4f:0f:e1:72:6a:1e:b5:5c:65:2c:12:
6e:45:45:e2:4c:53:24:ab:f8:10:26:b6:9e:17:7d:
a1:5a:b7:28:88:df:04:e5:f6:af:9f:eb:7e:ec:6b:
d4:86:8a:e8:13:65:08:69:78:ca:bd:b5:89:ca:6b:
e4:5f:da:6b:63:57:e3:60:ec:cd:e2:dd:b4:ba:a5:
82:bb:b9:ea:43:2f:84:b7:5e:1a:28:bb:6e:2b:61:
20:98:9b:2f:10:c1:ca:22:db:76:c6:88:c2:1a:9d:
e2:27:70:df:fc:27:9e:04:08:e9:67:f8:1c:21:02:
72:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EF:8A:33:67:62:D2:85:58:34:07:01:AA:64:AC:15:F8:16:08:C9
X509v3 Authority Key Identifier:
keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ed:5a:e4:f3:db:6f:70:a8:df:63:8e:7b:d5:6d:c3:6c:26:
86:bb:1b:91:bd:35:28:1a:39:6c:a9:d1:e1:d1:64:77:3a:05:
5f:58:01:5e:e3:da:79:60:f1:e3:4d:65:3e:af:e5:39:be:64:
84:b4:4b:90:28:6c:da:33:45:9b:f5:e3:f0:23:7f:9b:18:9c:
97:40:ca:59:9a:04:39:59:0b:ab:15:0d:2d:ad:55:f6:65:37:
5b:0a:10:79:cc:4a:d7:60:c5:41:eb:c4:d4:66:5e:99:a8:de:
4b:6f:26:e0:75:4c:37:43:3d:3a:ca:db:cf:2e:f9:e1:14:a9:
b2:6c:05:cc:54:b4:ae:b5:9c:f9:4c:6b:ba:e4:1e:e7:6a:24:
27:87:86:7d:db:73:00:5b:a3:14:ef:a4:25:5c:13:c9:a6:74:
e5:6c:4e:57:82:1d:fd:9b:b8:18:cf:14:e7:8e:fc:20:31:0d:
42:a4:55:56:32:b9:8d:81:f8:f3:e7:37:09:9d:d9:6f:9e:c2:
8e:01:44:23:6d:bb:f4:ee:c5:b4:34:e3:15:fc:fd:f4:15:31:
9d:88:7b:02:5a:2d:5d:e9:54:56:c8:6e:96:d1:e9:d1:04:fd:
60:14:8f:d9:5c:56:6b:3b:9d:1c:ab:53:3c:71:0c:40:8f:5d:
f2:27:5a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:15:23 2026 by rpki-client