Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: tUfqt+5iFuVMjQw1HwYD8Oz9eUx12+DfGdZPWBreGGc=
Subject key identifier: D3:1D:D6:75:89:A6:A2:14:59:51:E8:AD:8F:2D:7B:96:57:4A:9D:58
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 01A1250B34793231F16D82FC6EBC3D976757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 16C6
Signing time: Sat 10 Oct 2026 09:00:53 +0000
Manifest this update: Sat 10 Oct 2026 09:00:53 +0000
Manifest next update: Sun 11 Oct 2026 09:00:53 +0000
Files and hashes: 1: 98TJQub4EtN4BXIRrG4cNKh1xfw.roa (hash: ZCcnqtJ6qlNXte/XKxn3WGiCx4J7iiLBNWDpocMLxz8=)
2: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: XFkSwAKhIbzjHBccHvSg/GBfDv+sc92mE4lHR3zkRcc=)
3: ysnZuAzsS0-HIAlzoijYxDjpjGM.roa (hash: KJi0IxqPbXmBRsHSikOn83iNnVBJ6syBP35Ejj1BE7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:34:79:32:31:f1:6d:82:fc:6e:bc:3d:97:67:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Oct 10 09:00:53 2026 GMT
Not After : Oct 11 09:00:53 2026 GMT
Subject: CN=d31dd67589a6a2145951e8ad8f2d7b96574a9d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:81:8a:b9:0b:73:b8:14:d4:a0:bf:97:84:
3b:2d:61:1b:32:47:5f:60:84:08:c3:b0:2a:9f:bd:
2e:b6:1d:cb:6f:16:5b:53:ea:55:90:38:72:5c:e2:
48:6e:f7:e2:37:7c:34:d6:1f:90:e4:7d:0e:62:10:
0d:10:d3:6d:a2:28:17:ae:74:7d:a9:e1:c7:7f:79:
c6:2a:1a:d3:54:e0:85:a7:c4:bc:70:a6:ed:3a:b0:
0c:dd:7e:2d:79:ca:c5:5b:3d:ea:09:1f:e0:5e:35:
31:1a:2d:bc:97:a1:e1:bb:93:b2:7d:60:aa:08:ce:
28:ab:b0:46:d9:ea:59:b9:f2:e6:1a:27:3c:3f:72:
2e:2f:4a:23:f0:c5:71:ae:c5:a1:74:08:32:c0:3d:
bc:f5:3e:51:de:7e:79:18:62:40:38:6e:43:cc:5f:
3c:d9:2a:2b:a9:d9:07:a7:fd:a6:0b:fa:48:c0:dd:
8d:6b:b2:b6:f9:2b:df:23:35:5a:e5:cc:31:3e:3f:
eb:f1:cb:e7:b4:a7:82:43:77:16:b9:44:b7:fe:82:
de:64:e1:54:19:97:29:63:d4:ef:82:fd:7f:a2:e0:
77:f6:9c:9f:2e:cf:f0:a7:17:f9:68:f0:81:0a:92:
cb:17:73:63:c6:13:69:c9:8f:2a:45:e3:4a:25:64:
15:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1D:D6:75:89:A6:A2:14:59:51:E8:AD:8F:2D:7B:96:57:4A:9D:58
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bb:a4:c1:3a:26:f4:7d:fe:0f:31:a8:47:de:96:bc:de:e1:
28:0f:81:91:05:50:fd:ce:f3:98:2b:1e:8c:e1:3e:2b:53:4f:
8a:c3:1c:06:50:58:98:db:2e:b5:a1:ab:a0:af:db:de:16:e4:
cd:27:f4:a2:49:e3:28:cc:65:0d:84:55:a4:67:2c:6e:47:0c:
1b:36:7b:b5:46:7a:66:65:ad:ce:e5:b0:6e:61:82:4b:f9:8e:
f3:fc:29:c0:8e:dd:a5:b5:22:01:dc:2b:38:40:55:a0:f1:90:
49:16:a0:f3:55:a2:0d:1d:7b:13:e1:a7:68:de:db:12:57:14:
b8:1b:d4:ed:d3:5c:05:1e:fd:45:03:6d:e7:e9:da:3b:2f:f0:
dd:7a:8f:17:88:8c:f6:d3:0b:a7:be:34:ab:99:dd:69:2d:56:
9a:31:86:be:f7:88:da:5e:3e:47:02:c9:40:bc:72:77:ca:df:
81:f8:2a:02:24:ba:5b:b9:de:7f:e1:9e:33:d1:98:6a:fc:77:
ad:1d:0b:28:5d:95:d2:b2:1b:19:96:cf:b2:aa:24:5b:ab:b5:
6d:77:a5:e9:9e:90:cc:b2:22:e7:82:80:9d:32:37:21:93:44:
e8:03:84:1b:e6:6b:fd:7b:ea:5d:09:ce:17:5c:23:2b:53:40:
a8:80:1a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:47:20 2026 by rpki-client