Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
File: SgvIUgmAGVIMeOmoC22EyzyrcEI.mft (raw, json)
Hash identifier: JzjAm+UiyuZ8i3G7oefGj+5ExBXtCIh225yh8ybCsLI=
Subject key identifier: 0E:FB:EF:F7:4A:BF:56:61:40:CF:50:24:27:4A:2F:50:43:C7:C7:5E
Authority key identifier: 4A:0B:C8:52:09:80:19:52:0C:78:E9:A8:0B:6D:84:CB:3C:AB:70:42
Certificate issuer: /CN=4a0bc852098019520c78e9a80b6d84cb3cab7042
Certificate serial: 019FA899D97D914EB4F5E1190A8B60DD5B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
Manifest number: 020A
Signing time: Tue 28 Jul 2026 12:01:22 +0000
Manifest this update: Tue 28 Jul 2026 12:01:22 +0000
Manifest next update: Wed 29 Jul 2026 12:01:22 +0000
Files and hashes: 1: DZUI_bEIrP-yvThfRpjcY2JDgZ8.asa (hash: RghHL1DuN+HQMkw8GbUaQPmzZB8C45TxXFTAWg1Ry2g=)
2: SgvIUgmAGVIMeOmoC22EyzyrcEI.crl (hash: sGodYAHoqOnIkb9GR38/1FN08puCfGCG62oSvSo0AEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:d9:7d:91:4e:b4:f5:e1:19:0a:8b:60:dd:5b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0bc852098019520c78e9a80b6d84cb3cab7042
Validity
Not Before: Jul 28 12:01:22 2026 GMT
Not After : Jul 29 12:01:22 2026 GMT
Subject: CN=0efbeff74abf566140cf5024274a2f5043c7c75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:87:db:b6:33:ee:79:6a:e4:96:21:94:cc:
60:42:fe:a8:b4:1e:11:d8:20:80:c4:59:f3:28:8a:
bc:2a:3c:82:0d:f5:74:f1:d2:86:dc:82:3c:1a:6f:
43:9e:72:0f:15:80:55:1b:8e:97:b9:cf:15:69:70:
be:39:71:b2:2b:01:19:09:47:a3:fb:18:0b:45:57:
74:22:d7:a5:02:31:48:0f:49:79:2e:44:cd:37:50:
75:d3:a3:b6:d4:bc:fc:df:ab:d0:a5:8e:41:8a:cd:
f5:82:46:87:bd:b9:38:72:61:65:2d:aa:52:92:f7:
c3:f9:ed:ed:39:be:41:44:48:1e:92:5e:5f:cb:6a:
4d:dd:ee:d3:a9:ae:6c:c2:29:1b:92:7a:14:1e:fe:
7b:bd:d8:c2:e5:46:d5:7a:dd:23:ce:c5:e9:f7:21:
4e:fb:1a:03:bd:a8:3f:db:03:3b:11:aa:3c:4c:d9:
a7:ef:af:54:e2:74:42:68:c0:98:4c:59:d0:c7:ca:
9f:44:07:b8:3c:dd:26:be:53:97:2c:4d:b3:ec:5e:
b8:7a:3f:8e:a1:c2:b1:e3:a1:de:cc:ea:55:bb:25:
10:c9:a3:6a:61:35:00:94:f1:86:c0:9e:28:77:78:
1e:5f:43:a8:d5:6c:40:47:b3:b6:1a:17:e7:40:db:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FB:EF:F7:4A:BF:56:61:40:CF:50:24:27:4A:2F:50:43:C7:C7:5E
X509v3 Authority Key Identifier:
keyid:4A:0B:C8:52:09:80:19:52:0C:78:E9:A8:0B:6D:84:CB:3C:AB:70:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:79:0d:17:c8:f5:84:55:cf:37:97:95:c9:0f:24:0b:27:b4:
2b:e1:57:59:c4:2a:2c:63:f1:3b:e1:d6:b0:1d:5b:39:0d:a6:
21:35:0e:17:00:02:66:90:58:d4:d1:6e:08:c8:ab:55:3f:1a:
c1:3b:4f:01:97:39:f0:a7:07:b2:8e:4f:39:da:3a:16:89:b1:
b6:73:39:76:95:f8:cc:d1:7d:bf:62:86:58:54:a5:51:0b:d4:
ce:b4:a9:43:7b:d4:b7:43:06:26:20:80:cf:07:19:e9:3c:a6:
b4:74:42:31:ad:17:87:1e:d1:35:00:b3:eb:a0:65:e7:e8:49:
0e:a0:75:1b:94:cb:a0:0e:4f:3b:0b:43:84:3d:be:75:e8:12:
18:ce:68:25:cd:66:80:c8:c3:ab:e6:56:89:91:7d:99:bd:77:
02:95:b8:83:14:0e:ea:0a:18:95:59:90:c5:58:da:d1:f3:33:
50:b6:86:b9:9d:29:ff:21:a9:42:36:52:0b:7f:07:5e:84:10:
0c:b1:a8:ee:29:2a:12:42:45:19:98:3c:a4:aa:26:c9:13:8c:
5d:1e:65:5b:25:a2:08:ab:5e:37:7a:a2:46:69:1e:16:c9:b7:
3d:85:66:e4:42:56:d8:79:0a:21:2a:90:ad:75:09:66:7e:b1:
ac:3d:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:32:44 2026 by rpki-client