Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: o3E0qK2tsnz1+yb6d14HEePn7x4Pa/28PVK6wKVXH90=
Subject key identifier: F8:BA:FA:55:F3:56:53:20:16:1A:EE:5B:47:BA:C6:D6:7E:D5:55:0C
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 019CAEA2EFB6213C8382CE0816F5B4A53C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 1476
Signing time: Mon 02 Mar 2026 13:00:39 +0000
Manifest this update: Mon 02 Mar 2026 13:00:39 +0000
Manifest next update: Tue 03 Mar 2026 13:00:39 +0000
Files and hashes: 1: 98TJQub4EtN4BXIRrG4cNKh1xfw.roa (hash: ZCcnqtJ6qlNXte/XKxn3WGiCx4J7iiLBNWDpocMLxz8=)
2: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: w+OfqB7tMBzTV1QslQIgaSP96nSckl77PtvsI6nWKCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:ef:b6:21:3c:83:82:ce:08:16:f5:b4:a5:3c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Mar 2 13:00:39 2026 GMT
Not After : Mar 3 13:00:39 2026 GMT
Subject: CN=f8bafa55f3565320161aee5b47bac6d67ed5550c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:cf:78:16:48:fd:57:df:91:55:36:60:7c:
3f:d1:4d:48:7c:95:1d:b6:28:4b:28:b7:11:f8:11:
8f:a5:90:07:84:10:8d:27:54:4a:dd:7a:a9:a4:29:
c6:6d:51:ab:0f:3d:ae:47:2d:01:4f:42:ce:ad:a1:
74:99:99:de:6f:b6:e7:dd:d9:8c:2b:98:6c:c3:9c:
57:8e:fe:9f:3f:80:97:0a:be:d8:ce:50:ae:15:bf:
01:50:8a:4f:bd:45:c3:d7:06:ce:f3:ce:f0:79:0d:
52:ec:4d:1b:9e:29:4a:95:18:7d:67:44:7b:81:a9:
dd:ff:7c:ef:99:7a:d2:19:ae:a3:52:9d:cd:27:f9:
b9:cd:5c:61:90:62:28:58:d3:0d:ac:f8:3a:b5:f4:
62:78:5a:91:4c:9b:2e:b0:35:56:9c:90:74:b1:a4:
1a:da:08:0e:78:27:56:e7:90:4a:3e:f8:9e:8d:dc:
7c:e6:d5:60:8d:4d:39:b3:7a:2d:ae:09:43:53:69:
aa:b6:50:0a:18:eb:50:19:67:7b:38:ac:ee:a7:f1:
5a:07:7f:3f:51:8b:22:96:c4:a5:fa:37:a9:a8:50:
9c:f8:42:08:7c:e1:20:c0:06:f4:1a:a9:c0:4d:ac:
df:5f:80:9c:26:97:e9:81:25:e9:49:b5:85:59:7e:
68:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BA:FA:55:F3:56:53:20:16:1A:EE:5B:47:BA:C6:D6:7E:D5:55:0C
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ac:9f:95:b7:6e:53:97:95:09:a2:06:2f:3b:52:fb:c0:6d:
06:c3:aa:76:a1:ed:94:7e:5b:d4:e2:83:94:d5:15:1c:d6:9a:
09:cd:aa:b0:5b:a6:2b:18:c4:84:8f:21:da:72:6f:7d:12:4d:
1d:d1:5f:20:74:f6:18:be:b4:45:61:f5:2b:8c:64:88:e7:31:
12:89:ca:b7:f0:6d:13:54:77:bf:5d:f0:ea:eb:29:d9:c7:45:
bb:f1:23:45:c7:4d:4f:5c:4b:0b:a8:a8:bb:01:09:5d:50:9f:
2f:51:10:5c:cd:29:fa:cf:c1:5a:28:66:a8:8b:d7:1a:5b:fc:
a5:58:33:d8:75:c2:d8:48:56:83:37:ab:4d:51:d9:ca:94:96:
c4:99:16:2a:06:ae:98:e9:1e:36:b3:c4:93:d0:86:8e:c9:ea:
15:c4:ce:35:81:e9:4b:33:c1:2b:ea:49:55:7c:19:07:28:7e:
93:fa:d3:be:53:c4:b2:14:7b:06:d8:a8:f4:17:c4:44:9c:ed:
64:33:ab:a4:9c:64:b2:03:17:3c:e5:8d:41:0d:50:cf:73:e2:
60:de:e4:dc:79:e4:16:8a:f9:0b:9b:62:69:34:92:10:61:e6:
74:e3:7f:08:25:cc:01:e5:03:65:a7:2f:f8:ad:90:6e:df:ff:
78:66:9b:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuou+2ITyDgs4IFvW0pTxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YTgxYmE3NTg5YThlMWJmMGUxYTA5Y2Y0YWEwZjRlOTA5
MDFkNTcwHhcNMjYwMzAyMTMwMDM5WhcNMjYwMzAzMTMwMDM5WjAzMTEwLwYDVQQD
EyhmOGJhZmE1NWYzNTY1MzIwMTYxYWVlNWI0N2JhYzZkNjdlZDU1NTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA053PeBZI/VffkVU2YHw/0U1IfJUd
tihLKLcR+BGPpZAHhBCNJ1RK3XqppCnGbVGrDz2uRy0BT0LOraF0mZneb7bn3dmM
K5hsw5xXjv6fP4CXCr7YzlCuFb8BUIpPvUXD1wbO887weQ1S7E0bnilKlRh9Z0R7
gand/3zvmXrSGa6jUp3NJ/m5zVxhkGIoWNMNrPg6tfRieFqRTJsusDVWnJB0saQa
2ggOeCdW55BKPviejdx85tVgjU05s3otrglDU2mqtlAKGOtQGWd7OKzup/FaB38/
UYsilsSl+jepqFCc+EIIfOEgwAb0GqnATazfX4CcJpfpgSXpSbWFWX5oEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPi6+lXzVlMgFhruW0e6xtZ+1VUMMB8GA1UdIwQY
MBaAFEmoG6dYmo4b8OGgnPSqD06QkB1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDIt
NjAzMWQ1ZGUzZjM5LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDItNjAzMWQ1ZGUzZjM5
LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiayflbdu
U5eVCaIGLztS+8BtBsOqdqHtlH5b1OKDlNUVHNaaCc2qsFumKxjEhI8h2nJvfRJN
HdFfIHT2GL60RWH1K4xkiOcxEonKt/BtE1R3v13w6usp2cdFu/EjRcdNT1xLC6io
uwEJXVCfL1EQXM0p+s/BWihmqIvXGlv8pVgz2HXC2EhWgzerTVHZypSWxJkWKgau
mOkeNrPEk9CGjsnqFcTONYHpSzPBK+pJVXwZByh+k/rTvlPEshR7Btio9BfERJzt
ZDOrpJxksgMXPOWNQQ1Qz3PiYN7k3HnkFor5C5tiaTSSEGHmdON/CCXMAeUDZacv
+K2Qbt//eGabRg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:31 2026 by rpki-client