Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
File: SGeaItDbyYDV1ZszNnn5ObmuPyU.mft (raw, json)
Hash identifier: HlasR5B6OIoM+kMww3+r5mbZ7c85YCS1WTWxk+/8IB0=
Subject key identifier: 16:CC:5E:2A:B1:4C:AA:5C:5B:23:35:4D:18:D1:5E:16:54:F0:78:C0
Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Certificate serial: 01A0BEE76884C68CF3C955EAE6C55A44E623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
Manifest number: 1A65
Signing time: Sun 20 Sep 2026 13:00:31 +0000
Manifest this update: Sun 20 Sep 2026 13:00:31 +0000
Manifest next update: Mon 21 Sep 2026 13:00:31 +0000
Files and hashes: 1: Cb3GNV7sEZagImQ0z2CzEtPQStc.roa (hash: WKt5YxPaUYaqlF+1A2ePA/t2PiJgruaRiTwSTzv9PKY=)
2: QgUGh2GJ1-JelSbN4pH0Q_1IOrw.asa (hash: JDQrvbF/UTSyK+KaVQFzmDlvQmxRQg7cAs9vDLu048g=)
3: SGeaItDbyYDV1ZszNnn5ObmuPyU.crl (hash: I0fz86eIuoK/mXsGVE2QENELXtWtxznJ//3bZtUyiJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:68:84:c6:8c:f3:c9:55:ea:e6:c5:5a:44:e6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Validity
Not Before: Sep 20 13:00:31 2026 GMT
Not After : Sep 21 13:00:31 2026 GMT
Subject: CN=16cc5e2ab14caa5c5b23354d18d15e1654f078c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:29:de:d7:20:a6:51:c3:79:5f:96:31:08:
aa:37:b3:e9:1d:ba:64:54:3c:bb:bb:8e:5a:77:1c:
9f:12:84:74:ef:b2:51:0d:2d:14:d8:bc:41:88:38:
8a:f3:3b:e4:fa:3a:bf:48:02:6c:47:d8:a0:23:01:
51:aa:a9:da:81:b3:8d:5a:5e:3b:c8:33:3d:06:86:
fb:e0:53:0e:6e:cc:4a:fd:46:ee:21:4d:3b:a1:97:
a1:30:13:c8:76:c1:94:6a:52:1a:7e:1a:79:75:c3:
c8:5e:cb:03:71:f4:52:6e:80:22:ab:28:b6:8a:b9:
49:49:91:12:bd:f3:b3:1c:04:6d:39:a7:11:ee:e3:
33:f3:2d:d0:ac:22:3b:4d:33:a9:1d:39:99:e1:52:
64:03:16:0b:a7:95:da:2d:d0:ac:aa:b7:80:dd:e4:
f6:21:6d:3a:7b:59:1e:e8:51:78:dd:0b:7d:22:51:
9f:e2:df:27:8c:5d:2e:76:53:f3:40:66:be:93:6e:
27:c3:23:39:6a:66:4f:8d:15:ce:51:12:96:00:86:
3f:dd:c4:fb:fc:9d:83:47:bf:e4:84:4c:99:0b:09:
6e:5c:8f:89:e6:45:1d:3d:f9:bf:61:c4:db:04:85:
4a:68:11:e8:a6:5a:cb:6f:c0:ad:d9:34:11:db:7c:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CC:5E:2A:B1:4C:AA:5C:5B:23:35:4D:18:D1:5E:16:54:F0:78:C0
X509v3 Authority Key Identifier:
keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c9:23:75:6a:8f:65:f9:20:7b:b7:8d:ca:f4:39:85:bd:38:
12:40:12:b9:53:0c:bd:09:05:99:00:6d:12:c6:88:ed:f0:c2:
ea:b8:2b:4d:9b:ea:04:0c:bb:d2:e5:9d:8d:b8:2b:cb:b1:d1:
fd:1f:f0:c3:a4:32:27:73:ba:d3:37:43:e4:e4:ed:49:68:b3:
2e:cb:36:76:39:69:ae:80:3b:72:83:1f:e2:56:84:14:b7:f2:
e3:1f:a0:72:bf:d6:c6:bd:f7:da:96:02:d7:68:56:bc:de:97:
5c:78:ae:67:aa:07:00:bc:1c:b0:fa:f5:40:5f:95:a5:cf:67:
fb:b5:c6:14:98:ae:f5:83:79:ed:50:24:b1:19:39:b9:bb:ea:
ab:e2:59:77:ec:27:91:10:48:6b:ff:cd:1f:78:24:23:d5:07:
f2:bc:15:28:e3:3d:41:fe:dd:40:76:3e:b6:05:04:50:ae:ba:
c4:3d:53:d3:0b:95:7a:98:87:fa:ea:a7:ca:07:9c:f6:b1:37:
07:5c:03:38:d5:c4:06:98:7a:37:f1:06:b4:f7:37:7e:cb:21:
df:49:3b:97:c3:99:2b:3e:7a:1a:8e:1a:2f:f4:21:72:bf:d3:
38:5a:2b:18:08:29:a9:4a:77:37:e7:f4:2b:9f:06:d0:9c:7a:
d9:f3:09:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:20:17 2026 by rpki-client