Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json)
Hash identifier: MAQVcej8FQKHUqZbFJPhkwHkfth4v/NFLLGQ1orLQ8Y=
Subject key identifier: 1D:F3:50:BF:16:B1:B9:53:4A:00:E0:61:6E:E4:00:56:3F:CF:2A:08
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 019CAAFD39E0B7657A7C7B44B10253194581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
Manifest number: 087F
Signing time: Sun 01 Mar 2026 20:00:47 +0000
Manifest this update: Sun 01 Mar 2026 20:00:47 +0000
Manifest next update: Mon 02 Mar 2026 20:00:47 +0000
Files and hashes: 1: LYSUx4SMBcbGx0lrMelOBoIjRXY.roa (hash: iufH3SnKKEFM6xvywdqZRBnEAvhiQJCFx10ZIhfElHs=)
2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: UsKNPrSwPruWHDMMJebzapLPbnf+dxGJJLCZuO0oTbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:39:e0:b7:65:7a:7c:7b:44:b1:02:53:19:45:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: Mar 1 20:00:47 2026 GMT
Not After : Mar 2 20:00:47 2026 GMT
Subject: CN=1df350bf16b1b9534a00e0616ee400563fcf2a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:96:e8:e2:c0:86:e7:b1:a9:b6:f6:07:4f:
64:4b:9e:2b:3a:75:ac:e7:97:38:46:f5:36:cd:3e:
7b:11:61:e6:07:0a:ce:02:4e:31:e8:27:eb:69:c8:
c1:23:bc:0d:bb:3f:10:5b:ac:b7:fa:eb:c2:ce:f3:
ba:da:96:f2:37:0e:b9:71:6e:45:cc:98:ed:ec:66:
4b:d5:f6:86:e9:ee:ae:82:e9:80:98:f9:55:d1:49:
31:2f:03:03:d1:53:92:76:4f:2f:77:90:92:a9:16:
c5:d2:bc:41:33:c2:0e:26:1b:a5:d9:67:ae:78:8f:
a4:0f:ca:89:e3:06:e3:d0:4e:b9:e6:c3:de:e9:79:
0a:05:10:06:da:d0:1c:73:a3:f2:8e:44:54:55:9d:
be:5a:46:39:ac:ae:dd:63:38:6a:08:cc:c7:86:83:
0d:87:30:b7:ff:5d:a5:85:02:b1:3a:75:e6:9e:b5:
3a:69:94:3e:5c:50:f2:b4:58:6f:37:86:30:2d:cf:
19:22:6c:85:6f:5d:fc:56:0b:c0:1f:e0:02:b7:04:
a2:f4:29:f7:3e:6b:02:33:50:00:9b:74:72:8f:66:
f4:cd:c2:5f:c5:ce:1c:56:d7:a4:c8:64:6c:47:9f:
e8:5c:bc:21:7d:27:ff:ee:ea:cd:31:41:36:1c:ca:
a4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F3:50:BF:16:B1:B9:53:4A:00:E0:61:6E:E4:00:56:3F:CF:2A:08
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1c:74:59:e4:dd:0c:e9:c4:7c:8a:86:5b:bf:2f:bd:d4:c6:
3e:2c:44:41:23:a0:b0:de:9b:40:14:bd:d5:5a:4b:41:1f:93:
97:16:9e:16:d9:21:15:89:f9:ff:19:f2:4b:af:e4:73:1f:e8:
8f:bd:77:e1:b4:d5:11:50:d3:51:09:f7:81:a8:1b:1f:76:a9:
ea:d1:9b:c2:e9:c6:ec:0b:96:c8:5e:28:e5:d2:4a:00:9f:ba:
d8:9b:73:8e:d8:35:dc:0c:3a:19:1f:44:87:e9:f8:3d:8d:24:
de:b1:6b:f4:fc:7c:29:16:55:75:d3:c7:e2:8f:a5:a0:80:fb:
61:b2:04:a7:b0:28:0e:09:4a:69:d3:86:7e:83:65:40:48:fb:
b8:7d:e6:9e:01:53:ec:70:dc:75:4f:18:60:49:b2:29:13:8e:
4f:c8:62:04:53:d4:ba:59:2a:bf:6a:1d:bc:24:8d:2a:5a:a2:
a2:36:9e:dc:b6:77:43:3e:9e:76:d0:28:76:d6:ad:ea:81:bf:
a7:7a:8e:72:68:21:ed:04:f5:61:c6:17:24:6e:b4:65:e6:ff:
d2:1f:b1:47:b8:de:94:e5:34:e8:03:f6:a1:f9:f2:bc:de:91:
dd:61:67:0f:b9:79:44:2e:f9:30:47:69:2c:80:9e:2e:ca:fa:
75:82:77:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:40 2026 by rpki-client