Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json)
Hash identifier: Bzg2i4s8oBhWnUi7VAWBwnM6D89He+ko891mqTGL8GA=
Subject key identifier: 1B:E7:F0:A5:4E:8F:0F:70:FE:8E:5A:AA:D1:A0:76:15:AA:04:F1:CC
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 019D9886775137686D5F028A7BEC546A583C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
Manifest number: 08FA
Signing time: Thu 16 Apr 2026 23:00:42 +0000
Manifest this update: Thu 16 Apr 2026 23:00:42 +0000
Manifest next update: Fri 17 Apr 2026 23:00:42 +0000
Files and hashes: 1: LYSUx4SMBcbGx0lrMelOBoIjRXY.roa (hash: iufH3SnKKEFM6xvywdqZRBnEAvhiQJCFx10ZIhfElHs=)
2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: dm0sue5p832yZtkbt9UykiOyKvK3o5eeOVlXRpy+XIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:77:51:37:68:6d:5f:02:8a:7b:ec:54:6a:58:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: Apr 16 23:00:42 2026 GMT
Not After : Apr 17 23:00:42 2026 GMT
Subject: CN=1be7f0a54e8f0f70fe8e5aaad1a07615aa04f1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:69:89:42:ae:35:b2:ad:35:e4:cb:c7:79:
ea:53:fd:a9:e0:8c:0f:f7:c0:2d:00:ae:42:96:56:
af:0f:90:d8:44:33:a3:e8:3a:c5:7e:3d:c1:0c:8d:
96:53:4c:90:39:57:64:19:f2:ca:34:e5:08:67:3f:
cf:fa:40:48:b5:42:76:21:95:7f:c3:18:d6:d5:94:
8d:4f:16:1c:19:eb:45:aa:f7:df:18:92:c5:7b:4d:
2b:eb:4b:7f:14:29:8b:e3:f7:dc:6b:e1:11:a2:ac:
8d:e7:a3:aa:2d:98:17:76:4c:14:ff:0b:c8:5f:39:
43:38:ab:3d:a9:dd:4d:95:d0:ff:83:31:61:3a:f7:
24:71:be:b5:1c:cd:f1:ec:1f:07:85:30:86:81:7e:
be:04:8a:a3:cf:1f:a5:5b:d6:8a:36:95:c8:98:af:
28:da:d5:56:c3:f2:a9:37:e9:46:95:85:2d:fc:66:
35:1b:a1:08:c4:01:37:7e:90:fe:04:11:4e:6e:f6:
1d:2b:e9:fc:ec:44:00:a9:64:78:49:a6:c1:81:d4:
ee:73:2e:42:91:87:e8:78:a9:bf:2d:73:a5:83:18:
19:2c:34:e3:04:2d:db:4c:40:a7:ac:68:d9:24:2c:
dc:f2:1b:96:cf:97:34:c1:1d:1a:c8:79:0f:ae:2f:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E7:F0:A5:4E:8F:0F:70:FE:8E:5A:AA:D1:A0:76:15:AA:04:F1:CC
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ea:b8:42:20:17:0b:71:39:95:36:6b:98:11:d1:f6:17:d7:
c1:88:dd:6f:76:70:79:9d:af:ab:64:b6:c0:73:a8:f1:cb:b8:
fd:89:95:2b:17:a1:d4:fa:7e:58:14:be:12:08:3b:17:8a:02:
51:83:20:d3:79:15:a2:b0:c2:ed:c2:75:7e:f0:a1:1c:f2:73:
83:85:48:ec:62:72:be:26:a6:1c:2a:85:77:a0:c6:de:c6:38:
4d:9a:f8:5f:03:22:58:a9:23:a7:f1:64:e7:ff:0f:c3:3c:f2:
8a:7c:92:4a:c2:4d:67:10:d0:bc:f3:8b:4b:1f:2a:4a:3c:cb:
10:48:cc:26:c0:7e:32:5d:12:74:72:9d:71:3d:66:22:ea:f9:
32:47:b1:2e:bf:c4:3d:f9:70:0d:be:b6:d8:a6:59:dd:bf:cb:
42:a6:c0:8b:15:b9:fa:63:15:86:18:06:64:04:b8:3b:74:33:
72:82:c1:fe:d4:87:c4:99:fc:8a:b9:0e:2e:b6:b2:ab:4b:1f:
f3:95:17:62:91:1b:30:14:d7:7a:2b:51:2f:f7:4d:65:fb:4f:
96:94:dc:8b:0b:e7:2d:27:d1:c9:47:fb:63:71:17:9f:74:f1:
53:ac:27:bf:f6:79:f0:fc:8f:6a:ef:14:ff:e3:b0:1d:8c:80:
b6:9b:02:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:42 2026 by rpki-client