Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
File: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft (raw, json)
Hash identifier: u6S9uw/ZBGuHiTT5+eni75bgH30NrdZ2seVRcF/O6gM=
Subject key identifier: B1:28:76:51:56:39:38:CB:6F:55:EB:11:CA:50:15:EE:6E:02:E6:0D
Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
Certificate issuer: /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Certificate serial: 019CAC0FD7EA36CC7DE9B4B07E9A8AF0DAD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
Manifest number: 0501
Signing time: Mon 02 Mar 2026 01:00:45 +0000
Manifest this update: Mon 02 Mar 2026 01:00:45 +0000
Manifest next update: Tue 03 Mar 2026 01:00:45 +0000
Files and hashes: 1: LZgnWlWrjTCukxd_XCJP8Vtjqkk.roa (hash: rbZKiC7VxvRdtB9FGEjRH+5pWBKmKmF8M+8quOww67M=)
2: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl (hash: dJZLmoksb0UqjUWO8Nw1b1oZ/CxVVe6CZctNWGTrojk=)
3: h9b4JeNT7A8pWHM8uaXkZ3HWW2c.roa (hash: 8n1s/5mgSp5GN9ljUgJO+fSaluuMo/7ZenBSfeNwrrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d7:ea:36:cc:7d:e9:b4:b0:7e:9a:8a:f0:da:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Validity
Not Before: Mar 2 01:00:45 2026 GMT
Not After : Mar 3 01:00:45 2026 GMT
Subject: CN=b1287651563938cb6f55eb11ca5015ee6e02e60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:12:2c:12:1e:66:b2:88:96:ad:80:38:1c:
91:d5:aa:bf:89:8d:80:94:53:f9:46:f6:58:98:45:
8a:6c:2f:bf:3e:c0:99:30:7c:cc:ca:05:9b:13:02:
86:89:cd:b4:18:fe:81:07:cb:9a:24:22:4d:a9:01:
5c:2c:e1:aa:2a:b9:1b:04:65:f9:50:50:a4:9f:3f:
c6:3f:e4:c7:d3:71:b4:e7:e5:cf:97:40:72:26:d9:
0c:55:91:4f:dc:6f:c1:2d:81:f6:2e:4b:9a:dd:6e:
da:d8:b9:46:a2:27:fc:7c:01:3c:84:58:0d:d1:e2:
95:80:af:9f:96:7c:47:75:eb:a3:47:dd:ef:dd:12:
67:da:4a:8e:42:aa:b5:aa:38:c4:c2:cc:ba:00:ca:
bb:c7:c8:c1:27:60:89:da:c7:c3:77:b8:a3:eb:e9:
ca:06:d7:a1:34:06:d9:9f:ad:b1:52:62:8e:2a:cb:
b2:0c:e3:ad:f1:82:a7:83:75:bd:67:c0:d8:14:9b:
c0:1f:aa:f5:59:ed:71:f6:65:c8:53:d7:80:c0:37:
95:d3:1e:36:38:7c:94:75:4b:43:7b:54:ac:6b:8a:
4c:17:0a:0e:87:64:b6:bb:0f:9a:c5:b2:2b:09:f5:
7f:c4:29:0d:69:23:69:f7:b1:2a:d7:d9:a5:41:94:
88:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:28:76:51:56:39:38:CB:6F:55:EB:11:CA:50:15:EE:6E:02:E6:0D
X509v3 Authority Key Identifier:
keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d8:7e:a8:69:9c:f2:bf:a5:bd:24:de:e7:4a:d4:ba:54:2c:
75:a8:a0:85:de:ce:39:26:bf:b1:69:5b:b4:61:61:f8:c0:0b:
09:f7:c2:67:60:4a:03:06:18:30:e9:a0:eb:2a:0a:47:39:af:
a9:62:b6:6c:6e:c1:25:9c:2a:cd:9f:14:b4:49:cc:fe:c2:55:
04:01:cb:72:e5:5d:87:cd:79:1d:c8:a2:ee:52:35:1d:f8:80:
ba:3a:96:15:8b:5a:1c:1b:35:e4:5d:89:5c:3a:76:5e:3a:e3:
a5:60:36:de:aa:ae:a4:e4:b0:28:0e:e4:86:64:3c:0f:4e:8a:
e2:d6:af:e9:75:12:94:3c:51:90:1d:37:1b:b8:e1:f7:9f:4e:
3c:5f:2f:5d:87:dc:d8:31:fc:13:90:14:cd:da:dd:e8:ae:7f:
5b:67:27:50:c1:9d:94:30:c7:6c:82:25:bd:1a:f6:ae:d0:93:
23:9d:49:91:26:bf:89:96:93:ab:a5:2c:4f:12:c7:89:35:40:
af:5f:31:56:34:72:d3:df:ce:94:b1:85:23:5f:da:69:17:b6:
f3:56:7c:0b:38:f5:31:ef:94:85:8a:a7:d9:3b:55:d7:18:68:
0f:cc:66:f7:90:ba:fc:c1:8c:79:f8:ee:74:90:be:31:a5:e2:
28:23:ab:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD9fqNsx96bSwfpqK8NrQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMDRiY2MyZmVlMWMzYTJlMDQzODgyNjBlMTA2NDRiNjVl
NzAxZjMwHhcNMjYwMzAyMDEwMDQ1WhcNMjYwMzAzMDEwMDQ1WjAzMTEwLwYDVQQD
EyhiMTI4NzY1MTU2MzkzOGNiNmY1NWViMTFjYTUwMTVlZTZlMDJlNjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2agSLBIeZrKIlq2AOByR1aq/iY2A
lFP5RvZYmEWKbC+/PsCZMHzMygWbEwKGic20GP6BB8uaJCJNqQFcLOGqKrkbBGX5
UFCknz/GP+TH03G05+XPl0ByJtkMVZFP3G/BLYH2Lkua3W7a2LlGoif8fAE8hFgN
0eKVgK+flnxHdeujR93v3RJn2kqOQqq1qjjEwsy6AMq7x8jBJ2CJ2sfDd7ij6+nK
BtehNAbZn62xUmKOKsuyDOOt8YKng3W9Z8DYFJvAH6r1We1x9mXIU9eAwDeV0x42
OHyUdUtDe1Ssa4pMFwoOh2S2uw+axbIrCfV/xCkNaSNp97Eq19mlQZSIcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEodlFWOTjLb1XrEcpQFe5uAuYNMB8GA1UdIwQY
MBaAFEoEvML+4cOi4EOIJg4QZEtl5wHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTk3NDAtYjk2ZS00OWM0LWI2MDQt
NjNmMTk3ZmIxYzk2LzEvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81OTk3NDAtYjk2ZS00OWM0LWI2MDQtNjNmMTk3ZmIxYzk2
LzEvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdh+qGmc
8r+lvSTe50rUulQsdaighd7OOSa/sWlbtGFh+MALCffCZ2BKAwYYMOmg6yoKRzmv
qWK2bG7BJZwqzZ8UtEnM/sJVBAHLcuVdh815Hcii7lI1HfiAujqWFYtaHBs15F2J
XDp2XjrjpWA23qqupOSwKA7khmQ8D06K4tav6XUSlDxRkB03G7jh959OPF8vXYfc
2DH8E5AUzdrd6K5/W2cnUMGdlDDHbIIlvRr2rtCTI51JkSa/iZaTq6UsTxLHiTVA
r18xVjRy09/OlLGFI1/aaRe281Z8Czj1Me+UhYqn2TtV1xhoD8xm95C6/MGMefju
dJC+MaXiKCOrIQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:21 2026 by rpki-client