Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json)
Hash identifier: Y8FOYSrfgcSpxzS//rauK0ab12t2CVaa7QVPgrJ9dkw=
Subject key identifier: 09:F9:6C:31:B1:09:DE:F9:E9:BA:18:38:4E:9E:22:62:A3:2B:6C:39
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 019FA89A3742DDDF4F01314E5C19DF728833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
Manifest number: 0A10
Signing time: Tue 28 Jul 2026 12:01:46 +0000
Manifest this update: Tue 28 Jul 2026 12:01:46 +0000
Manifest next update: Wed 29 Jul 2026 12:01:46 +0000
Files and hashes: 1: NwezYN_SSVVpS4ySwEt_yFRi-PQ.asa (hash: 6ugYz31WQf5MvMC/gtFmfZIhbfo2pPGMfKiHyLgTL0c=)
2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: Jha5SEcZvV5H43TJmnb4ZVN4UAJ5pDm+fq4bu4ssEaw=)
3: vjQq9UampGvBxWRw_V3sL7pHCyY.roa (hash: TlwNEPo1u7VkHjLKctu36XpzTUSwJOLmKhGzSZcego4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:37:42:dd:df:4f:01:31:4e:5c:19:df:72:88:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: Jul 28 12:01:46 2026 GMT
Not After : Jul 29 12:01:46 2026 GMT
Subject: CN=09f96c31b109def9e9ba18384e9e2262a32b6c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:0d:95:82:c3:fa:f1:1b:c2:c8:8c:17:42:
8d:0c:e4:4e:e0:cb:b3:e5:d8:66:10:31:3c:b2:2d:
e2:db:9e:8f:30:2d:bf:3f:2d:50:64:ca:20:8b:8f:
70:95:ba:89:d4:40:ae:53:2b:26:46:99:07:ba:09:
77:7b:a3:75:cd:33:df:24:01:3b:a3:99:b8:23:d1:
07:55:f2:a9:1a:36:b9:c1:4d:86:78:7c:7a:af:19:
12:3a:33:4d:5c:c9:e6:13:d0:c1:41:93:9e:5d:28:
76:9f:9f:1e:7e:a1:51:3a:fb:86:4e:e3:e9:ca:a7:
7b:0f:e1:b8:df:73:da:24:d7:93:ee:50:27:6d:27:
9e:bb:20:7d:d5:81:a0:fe:5a:c5:b4:3e:45:78:6d:
63:fe:a7:6d:e9:bc:70:33:3f:2e:c0:22:48:78:2a:
2f:67:fe:6c:10:5e:64:1a:51:d3:70:62:df:9c:e6:
74:41:5d:c4:c1:6a:e9:eb:da:fe:02:4d:73:16:67:
a4:97:a1:be:50:db:fe:dd:33:6a:4f:03:08:fc:75:
0f:52:f4:fe:66:eb:9f:21:05:40:c6:9d:25:01:14:
ac:c0:19:eb:ec:bf:bd:90:eb:73:a9:fc:ff:02:dc:
18:55:ea:16:fd:91:f7:83:b8:42:7e:ee:8c:bc:a7:
d1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F9:6C:31:B1:09:DE:F9:E9:BA:18:38:4E:9E:22:62:A3:2B:6C:39
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9a:0a:68:a8:f5:1b:84:f5:38:8d:3a:7a:76:8d:87:c9:05:
a6:fb:a5:5e:18:bc:cc:f5:ff:23:01:79:8e:46:bb:6d:d7:5e:
53:ef:2d:cb:34:61:8b:0f:cb:24:52:18:8e:67:48:bc:74:e0:
95:7e:0a:36:1a:2f:e0:f9:ec:08:a4:b1:77:f1:ea:f8:16:a4:
6e:45:5f:c6:27:92:3e:00:66:3a:af:b8:ef:2b:97:42:78:f6:
7b:db:9a:39:be:7c:33:a2:d7:1d:1e:88:20:e6:a1:4e:ae:3c:
93:00:e2:a1:94:a0:af:06:4f:df:ff:0c:ca:0a:6f:17:3b:6f:
e6:12:85:58:1f:42:dd:db:45:ce:0f:10:49:cf:fa:77:8f:39:
20:92:6b:ce:bc:0d:f4:47:04:c9:52:09:5e:98:30:96:c0:d7:
bd:28:0e:a7:07:76:b8:23:25:b8:b5:cf:20:b8:af:47:53:8f:
b3:28:4f:c8:54:48:7b:d8:c1:84:54:97:82:9a:35:b8:6d:49:
e8:29:f5:55:a0:2b:f7:d7:af:b5:57:1b:30:8f:dc:0f:e8:4f:
3b:10:a2:ed:55:f0:72:73:1c:3b:ed:0f:af:46:8d:5e:b7:1a:
95:83:7b:6e:d4:72:8d:0f:39:fc:5d:57:36:3d:03:76:3f:3d:
8a:59:1a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:04:03 2026 by rpki-client