Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: Uh89RzQB6T89Hl9Je2qeFO9ODzdVP0zcU3IjN90TS4s=
Subject key identifier: 5F:24:79:36:E4:0D:93:E5:2A:32:C5:86:0E:BB:F8:36:4C:55:9F:EC
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 019FAC769AC778B4835C15F07CC85A013AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 1603
Signing time: Wed 29 Jul 2026 06:01:21 +0000
Manifest this update: Wed 29 Jul 2026 06:01:21 +0000
Manifest next update: Thu 30 Jul 2026 06:01:21 +0000
Files and hashes: 1: 98TJQub4EtN4BXIRrG4cNKh1xfw.roa (hash: ZCcnqtJ6qlNXte/XKxn3WGiCx4J7iiLBNWDpocMLxz8=)
2: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: Eyy1XfO8CJkB4HXXtDOYkOWxKeJeduegkRTjuX7re4o=)
3: ysnZuAzsS0-HIAlzoijYxDjpjGM.roa (hash: KJi0IxqPbXmBRsHSikOn83iNnVBJ6syBP35Ejj1BE7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:9a:c7:78:b4:83:5c:15:f0:7c:c8:5a:01:3a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Jul 29 06:01:21 2026 GMT
Not After : Jul 30 06:01:21 2026 GMT
Subject: CN=5f247936e40d93e52a32c5860ebbf8364c559fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:77:ea:f5:98:66:12:a2:b6:7c:90:80:28:
9f:8d:b7:6c:7e:4e:55:87:c2:41:90:e7:f4:ea:77:
15:90:70:eb:61:4f:6f:7d:dc:68:56:7a:d9:2f:f3:
ca:bd:3b:2e:7d:85:30:16:7f:81:91:98:06:9f:72:
57:ef:54:bc:29:15:f8:92:74:78:13:b0:56:29:f6:
a0:db:61:39:a4:4d:95:1d:8a:21:db:43:39:ea:1b:
f7:87:11:a6:f7:8d:90:97:d9:56:b2:ed:28:bf:1d:
c1:2c:c1:65:3b:9e:fb:05:77:95:da:9c:83:75:0d:
f3:d7:4d:cd:1e:60:7b:95:39:be:d1:94:cb:97:71:
0e:77:e8:4b:1d:ff:de:b0:79:b6:fb:a1:24:2b:79:
67:b1:35:16:27:70:ef:e1:84:bd:1c:89:64:94:2d:
5b:6a:0d:34:5e:fe:01:ac:44:93:71:b7:77:40:1e:
85:91:db:cd:b0:11:93:30:50:3c:93:09:df:f2:73:
73:ce:97:89:42:88:67:ca:ba:f0:23:bf:9b:08:5d:
60:85:a4:d8:99:a0:f9:8e:09:75:8f:bc:99:8a:a9:
a7:bf:27:04:fa:7c:64:4e:a2:09:52:d0:70:8b:3f:
f3:8e:d4:cd:6a:52:99:52:34:63:84:48:ec:cd:c1:
9f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:24:79:36:E4:0D:93:E5:2A:32:C5:86:0E:BB:F8:36:4C:55:9F:EC
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:be:d1:15:be:ee:4c:6c:f6:84:91:d4:50:4a:0d:e8:0b:b7:
81:2e:07:3c:e9:5f:95:6c:96:e2:6e:88:5b:1c:34:c4:1b:3e:
f4:de:1b:be:bc:85:f8:be:e7:28:77:36:61:ca:d4:9c:95:d9:
d0:04:32:50:ce:17:d3:92:f0:d9:c5:ad:62:78:db:98:07:80:
29:1a:7a:95:63:90:83:ac:eb:a5:2f:0b:fa:df:54:4c:39:51:
83:5a:50:03:ca:c0:5c:33:88:d4:a2:19:4c:b1:e8:de:d4:1f:
90:84:f6:d4:94:0f:dc:df:6a:53:64:fc:df:b6:b3:46:f9:c7:
8d:66:96:10:25:03:bd:09:48:49:11:4d:c3:f2:66:ac:2c:cb:
16:8c:a4:2b:3a:0f:ea:bf:9f:e1:e8:74:35:c6:51:0d:6d:b6:
f6:eb:c3:dc:69:72:86:f2:b1:46:46:cc:9b:b7:ba:71:f9:64:
6b:e2:41:bb:5d:2a:88:bf:97:31:05:ef:18:22:ac:39:fb:d1:
4b:35:9e:52:6e:74:3f:56:c8:74:7b:04:9d:e9:8e:ac:d3:fd:
7d:ce:62:60:5e:65:9d:5e:26:2d:9a:ed:49:57:3d:46:d4:66:
5f:87:1d:b3:ec:eb:e5:08:4b:5f:c1:c2:48:0f:eb:29:0b:9b:
dc:24:72:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:18:27 2026 by rpki-client