Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json)
Hash identifier: 4NGPV1xCVwrAHcz0upFvKEwyVUohA3WnsKTeHbhoD6g=
Subject key identifier: 41:DD:AC:C0:8F:37:68:CF:11:55:EA:48:33:9F:D9:80:DB:DF:F8:79
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 01A0C8599EF03BE25F870608C90B685680EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
Manifest number: 0AA5
Signing time: Tue 22 Sep 2026 09:01:51 +0000
Manifest this update: Tue 22 Sep 2026 09:01:51 +0000
Manifest next update: Wed 23 Sep 2026 09:01:51 +0000
Files and hashes: 1: NwezYN_SSVVpS4ySwEt_yFRi-PQ.asa (hash: 6ugYz31WQf5MvMC/gtFmfZIhbfo2pPGMfKiHyLgTL0c=)
2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: Xl0vDjp5WxGhlDGlFxWL2X+0nDJWdDWmm5MeSi9+Gg8=)
3: vjQq9UampGvBxWRw_V3sL7pHCyY.roa (hash: TlwNEPo1u7VkHjLKctu36XpzTUSwJOLmKhGzSZcego4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:9e:f0:3b:e2:5f:87:06:08:c9:0b:68:56:80:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: Sep 22 09:01:51 2026 GMT
Not After : Sep 23 09:01:51 2026 GMT
Subject: CN=41ddacc08f3768cf1155ea48339fd980dbdff879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:03:4e:f7:c0:20:61:26:c2:09:be:8c:bc:
20:6a:10:ed:0d:c9:cd:35:50:d8:8a:0c:1c:4a:c5:
58:7e:19:54:43:5a:67:e7:14:a8:5b:f8:33:15:ba:
11:76:4f:28:2e:f7:af:8c:0c:b8:92:cb:1c:c3:b0:
a6:b7:ed:74:5a:cd:b2:a2:08:39:a8:25:ef:3d:9f:
1c:ff:b9:ad:33:2c:b6:86:3b:31:46:8f:fc:23:b7:
be:2c:4f:73:9c:2f:6c:98:92:12:1f:8f:c3:35:c0:
5b:14:f1:73:5e:bb:c8:3a:c8:01:61:70:f9:30:57:
bc:a6:1e:a2:b1:60:b0:43:10:e8:a5:1b:54:7e:41:
51:15:cb:e3:5d:3a:19:a5:3f:ce:63:9d:9b:10:8b:
a1:46:ae:f0:27:05:74:f2:95:85:3d:e2:6d:78:56:
8f:35:7e:1d:a1:12:a1:25:1b:a1:5d:37:3b:59:b8:
56:e5:92:ac:c8:96:c1:6f:58:29:15:cc:1f:ca:fc:
a2:2f:98:a2:12:7a:72:ab:95:21:64:9a:e1:4a:cb:
85:86:2e:71:f1:a0:7d:4a:c0:89:6e:d3:e1:cb:6f:
5c:30:65:49:d5:02:cb:8f:63:05:01:16:94:f0:7a:
ab:95:63:f3:59:e6:b8:43:64:96:e4:7c:a2:69:75:
0c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DD:AC:C0:8F:37:68:CF:11:55:EA:48:33:9F:D9:80:DB:DF:F8:79
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:92:75:e8:98:39:cf:49:dc:1f:af:30:19:5f:13:c8:b0:01:
b9:6c:8a:1c:03:a8:d9:a5:3e:d9:99:69:f4:bb:87:4c:5e:93:
9a:93:c3:86:5a:02:68:9c:44:d8:a4:40:a5:3a:40:8e:84:69:
97:4d:e9:5a:30:b9:32:d6:23:0e:6d:2d:db:9d:02:94:74:8d:
05:42:2f:36:ef:86:f0:cc:28:8c:8b:9e:0e:da:69:95:f5:72:
c0:81:e8:c9:f7:07:78:40:9d:8d:a7:38:e4:90:f3:02:d8:9c:
af:13:92:87:ff:2a:0e:76:20:f3:93:13:1a:1f:35:7b:18:2a:
de:14:17:9e:22:85:e2:29:67:e0:68:bc:85:4c:d8:0c:48:27:
f9:9d:8d:de:b1:d1:16:2f:89:22:43:85:68:a1:47:a9:71:8d:
2e:0f:51:d9:a7:64:06:22:cb:b0:26:2e:52:03:08:6c:d1:f7:
64:83:43:b6:9d:d2:ce:e9:25:e5:62:c1:ae:31:a0:cd:e8:6a:
0c:5f:7c:47:b9:e6:96:be:bc:cd:1b:34:f6:ab:bc:c0:fb:18:
08:7c:be:83:9d:b5:e0:28:32:5d:ea:9b:8e:34:73:21:d4:23:
46:73:b7:50:1a:f2:f2:fa:87:be:3f:88:ee:80:9d:6a:b2:73:
11:a4:98:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:36:25 2026 by rpki-client