Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
File: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft (raw, json)
Hash identifier: 38VBJwkiSCVoKdZspeqvrzW5A8xZyAP9XrYUZt8dq9o=
Subject key identifier: F5:D9:D8:8E:E1:5A:3B:3A:CF:8C:B9:CE:4C:7B:B0:D1:BC:D0:B4:B1
Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
Certificate issuer: /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Certificate serial: 019D9B87E144C3624B54E55478CF5C9155EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
Manifest number: 057D
Signing time: Fri 17 Apr 2026 13:01:06 +0000
Manifest this update: Fri 17 Apr 2026 13:01:06 +0000
Manifest next update: Sat 18 Apr 2026 13:01:06 +0000
Files and hashes: 1: LZgnWlWrjTCukxd_XCJP8Vtjqkk.roa (hash: rbZKiC7VxvRdtB9FGEjRH+5pWBKmKmF8M+8quOww67M=)
2: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl (hash: 46XttjdG5Jtw4c1O1BTXwqygPOKI9ZSpiHkCk4UF4X4=)
3: h9b4JeNT7A8pWHM8uaXkZ3HWW2c.roa (hash: 8n1s/5mgSp5GN9ljUgJO+fSaluuMo/7ZenBSfeNwrrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:e1:44:c3:62:4b:54:e5:54:78:cf:5c:91:55:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Validity
Not Before: Apr 17 13:01:06 2026 GMT
Not After : Apr 18 13:01:06 2026 GMT
Subject: CN=f5d9d88ee15a3b3acf8cb9ce4c7bb0d1bcd0b4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5d:d4:68:d7:1b:53:d7:64:5f:21:d6:54:f5:
a2:1f:74:22:0e:bf:e8:2f:07:ae:97:e0:c8:f2:f7:
5d:3c:e2:6d:ef:2e:9f:a4:68:aa:fb:96:19:11:23:
3c:7d:6a:05:2d:49:78:06:b7:70:d4:75:df:9a:1f:
36:98:0a:71:6b:dc:ba:c2:4d:d7:cb:55:3a:38:de:
1a:64:3a:ab:c7:7c:d5:95:33:e3:9d:57:13:5f:db:
8a:ea:8d:c6:40:21:2d:5b:60:41:e7:dd:ba:7f:8d:
d6:98:f6:41:30:c0:79:ec:03:8e:15:67:4a:e2:ab:
8b:23:0a:b3:ca:ec:9b:ac:34:fd:9e:cc:d1:2b:29:
87:0f:24:54:bb:9e:dc:a0:c0:0f:a3:28:8a:28:a4:
d5:83:cc:22:77:8b:e0:9f:cb:16:a4:dd:bb:19:6d:
64:c7:91:e7:a4:85:e7:41:55:8f:60:ac:56:9b:19:
dd:90:3a:e6:ac:4f:14:36:42:02:22:b9:6c:2c:8a:
5f:84:65:4a:f1:a5:33:af:04:7c:67:5a:e7:7b:3e:
c1:c7:b3:88:45:56:43:a6:49:be:6c:7b:11:79:35:
49:3e:2a:34:7e:43:43:66:3a:0b:fd:6c:90:5e:d4:
81:fe:c7:e9:41:06:46:b1:52:56:f7:b5:3f:9d:c4:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D9:D8:8E:E1:5A:3B:3A:CF:8C:B9:CE:4C:7B:B0:D1:BC:D0:B4:B1
X509v3 Authority Key Identifier:
keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:41:79:65:0c:1d:ef:08:36:30:97:0e:4e:c8:dd:84:e5:ef:
2c:27:53:d9:d0:46:7b:23:3b:f7:49:d1:c9:74:71:5c:00:b2:
30:de:04:25:6d:be:6d:a8:cf:be:57:cd:d6:c7:2d:3d:25:ef:
e3:a5:f6:ea:f1:e0:78:92:8d:2d:ec:60:76:97:c4:89:ac:35:
a4:c7:1b:84:79:25:84:55:5b:e0:27:49:6c:80:cb:56:2a:8f:
80:e7:48:0b:ed:80:59:aa:97:bd:2d:c8:0a:18:5c:b4:bb:f7:
78:9e:62:55:ed:25:ca:50:01:53:d5:28:f0:24:86:a3:25:81:
f0:61:7e:44:da:9d:57:27:87:41:6e:fd:36:22:d3:14:e9:6c:
8c:bf:95:a7:25:41:0d:da:fc:3d:30:0d:c3:32:06:e4:35:40:
74:39:33:47:2b:83:b5:b9:51:94:24:ef:92:9a:16:83:42:34:
7f:b1:4c:26:15:af:23:fa:d7:dc:76:e3:c1:0b:cb:65:4b:79:
5a:5b:f5:ae:33:f6:c8:7e:6e:46:fe:a6:88:d1:64:cc:16:73:
23:69:75:29:a8:ca:18:32:27:10:b2:02:5a:19:dc:09:47:2a:
e4:2b:27:2a:55:d4:95:b2:96:e3:08:e3:ea:b5:77:50:87:13:
2a:1d:aa:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh+FEw2JLVOVUeM9ckVXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMDRiY2MyZmVlMWMzYTJlMDQzODgyNjBlMTA2NDRiNjVl
NzAxZjMwHhcNMjYwNDE3MTMwMTA2WhcNMjYwNDE4MTMwMTA2WjAzMTEwLwYDVQQD
EyhmNWQ5ZDg4ZWUxNWEzYjNhY2Y4Y2I5Y2U0YzdiYjBkMWJjZDBiNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl3UaNcbU9dkXyHWVPWiH3QiDr/o
Lweul+DI8vddPOJt7y6fpGiq+5YZESM8fWoFLUl4Brdw1HXfmh82mApxa9y6wk3X
y1U6ON4aZDqrx3zVlTPjnVcTX9uK6o3GQCEtW2BB5926f43WmPZBMMB57AOOFWdK
4quLIwqzyuybrDT9nszRKymHDyRUu57coMAPoyiKKKTVg8wid4vgn8sWpN27GW1k
x5HnpIXnQVWPYKxWmxndkDrmrE8UNkICIrlsLIpfhGVK8aUzrwR8Z1rnez7Bx7OI
RVZDpkm+bHsReTVJPio0fkNDZjoL/WyQXtSB/sfpQQZGsVJW97U/ncQwpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXZ2I7hWjs6z4y5zkx7sNG80LSxMB8GA1UdIwQY
MBaAFEoEvML+4cOi4EOIJg4QZEtl5wHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTk3NDAtYjk2ZS00OWM0LWI2MDQt
NjNmMTk3ZmIxYzk2LzEvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81OTk3NDAtYjk2ZS00OWM0LWI2MDQtNjNmMTk3ZmIxYzk2
LzEvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0F5ZQwd
7wg2MJcOTsjdhOXvLCdT2dBGeyM790nRyXRxXACyMN4EJW2+bajPvlfN1sctPSXv
46X26vHgeJKNLexgdpfEiaw1pMcbhHklhFVb4CdJbIDLViqPgOdIC+2AWaqXvS3I
ChhctLv3eJ5iVe0lylABU9Uo8CSGoyWB8GF+RNqdVyeHQW79NiLTFOlsjL+VpyVB
Ddr8PTANwzIG5DVAdDkzRyuDtblRlCTvkpoWg0I0f7FMJhWvI/rX3HbjwQvLZUt5
Wlv1rjP2yH5uRv6miNFkzBZzI2l1KajKGDInELICWhncCUcq5CsnKlXUlbKW4wjj
6rV3UIcTKh2qcg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:51 2026 by rpki-client