Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: a8thT+323Teg2QT5BV35p3ht66S7hC1LwKZHJSKD5dY=
Subject key identifier: EC:76:6C:BF:43:99:D6:11:2A:1C:17:03:A7:A8:A1:F9:B1:90:C2:47
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 019D9A3EA50D70E0D1236FF65CAF8006B182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 14F0
Signing time: Fri 17 Apr 2026 07:01:29 +0000
Manifest this update: Fri 17 Apr 2026 07:01:29 +0000
Manifest next update: Sat 18 Apr 2026 07:01:29 +0000
Files and hashes: 1: 98TJQub4EtN4BXIRrG4cNKh1xfw.roa (hash: ZCcnqtJ6qlNXte/XKxn3WGiCx4J7iiLBNWDpocMLxz8=)
2: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: HHVKHEe4Eyv3o2c1bnRLi3rkBFBbJgvvxaPcQtSNEoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:a5:0d:70:e0:d1:23:6f:f6:5c:af:80:06:b1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Apr 17 07:01:29 2026 GMT
Not After : Apr 18 07:01:29 2026 GMT
Subject: CN=ec766cbf4399d6112a1c1703a7a8a1f9b190c247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fe:08:b8:1b:b1:c2:d1:ca:f7:cc:68:0a:d1:
45:6c:e1:b0:fe:d3:11:0a:af:f7:b8:74:91:3b:99:
f6:e5:c9:43:0c:c2:b2:1b:8c:48:ff:5d:68:97:d6:
47:64:7a:46:4e:6c:57:87:50:3f:ec:1f:4b:9d:35:
6f:ea:55:3b:61:55:26:59:3a:83:cd:d0:f7:89:08:
fe:d1:7e:08:45:00:9c:b3:f6:df:a4:9b:96:1f:28:
5f:93:c3:b0:da:a7:d6:f5:33:bc:ed:c3:e8:72:e2:
ab:04:8b:e8:3c:97:d1:b7:f3:39:37:ed:e1:3f:cc:
76:ef:b0:16:ae:d0:34:71:b5:14:6f:b8:03:8b:7c:
6f:b3:8b:16:8a:20:d8:d5:4a:41:92:07:e9:a8:e2:
0b:c6:91:06:03:49:a8:0f:b3:d5:9f:4f:40:a2:f4:
16:e4:68:92:eb:f4:3b:a6:f5:a2:22:e1:92:8f:47:
a9:df:16:0a:23:55:a1:ab:e2:e6:68:a6:b3:37:32:
c9:01:2e:30:ef:cd:6f:f4:21:79:97:c1:3a:a0:18:
2c:77:65:e1:52:4b:ef:97:4f:9c:10:94:52:ff:c5:
2c:81:00:8f:68:e7:d6:82:b8:c9:74:2a:ae:6f:fb:
bb:d1:62:2e:90:e2:8a:bd:17:ed:45:37:b9:c6:a2:
81:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:76:6C:BF:43:99:D6:11:2A:1C:17:03:A7:A8:A1:F9:B1:90:C2:47
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:43:3b:bf:0d:2f:66:96:83:c8:49:82:c6:7f:ce:f7:aa:eb:
28:d5:e3:df:98:81:e2:97:70:da:85:50:53:53:fb:25:da:05:
2c:c9:c1:b6:2f:8b:df:cb:7a:f7:ca:94:32:13:c1:e5:8d:6f:
ec:f4:6a:11:9b:40:f4:93:44:c6:d8:11:64:2d:3c:ba:56:99:
58:01:6f:a2:93:64:e5:d1:2c:87:8f:cf:3e:7d:68:c4:d0:39:
58:bf:b0:3f:cd:8b:cd:d0:ea:60:f3:62:56:e7:a2:74:ed:25:
ac:2d:19:25:03:f7:97:04:0a:d0:15:5f:9e:c9:f6:a9:ee:ca:
c0:f0:25:5e:45:b4:fb:19:ac:4f:a0:93:65:09:37:e2:ff:94:
eb:4b:21:51:81:5d:11:49:67:f1:27:08:38:5d:9c:75:a3:4e:
d3:77:00:28:00:c5:04:ea:29:5e:59:5e:11:d0:63:6d:0b:a4:
1f:c6:4d:2e:1f:66:35:70:11:be:10:ea:eb:64:1b:37:2e:e6:
2c:ad:3a:45:e3:4b:90:dd:b4:16:e8:01:61:43:02:f8:d6:c1:
46:86:72:77:69:13:60:60:cd:5f:0f:8a:ef:24:b7:f9:8b:f6:
56:0b:37:a9:03:81:a0:10:84:33:62:92:ed:7d:46:f8:05:c2:
45:67:07:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPqUNcODRI2/2XK+ABrGCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YTgxYmE3NTg5YThlMWJmMGUxYTA5Y2Y0YWEwZjRlOTA5
MDFkNTcwHhcNMjYwNDE3MDcwMTI5WhcNMjYwNDE4MDcwMTI5WjAzMTEwLwYDVQQD
EyhlYzc2NmNiZjQzOTlkNjExMmExYzE3MDNhN2E4YTFmOWIxOTBjMjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5P4IuBuxwtHK98xoCtFFbOGw/tMR
Cq/3uHSRO5n25clDDMKyG4xI/11ol9ZHZHpGTmxXh1A/7B9LnTVv6lU7YVUmWTqD
zdD3iQj+0X4IRQCcs/bfpJuWHyhfk8Ow2qfW9TO87cPocuKrBIvoPJfRt/M5N+3h
P8x277AWrtA0cbUUb7gDi3xvs4sWiiDY1UpBkgfpqOILxpEGA0moD7PVn09AovQW
5GiS6/Q7pvWiIuGSj0ep3xYKI1Whq+LmaKazNzLJAS4w781v9CF5l8E6oBgsd2Xh
Ukvvl0+cEJRS/8UsgQCPaOfWgrjJdCqub/u70WIukOKKvRftRTe5xqKBjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOx2bL9DmdYRKhwXA6eoofmxkMJHMB8GA1UdIwQY
MBaAFEmoG6dYmo4b8OGgnPSqD06QkB1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDIt
NjAzMWQ1ZGUzZjM5LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDItNjAzMWQ1ZGUzZjM5
LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUM7vw0v
ZpaDyEmCxn/O96rrKNXj35iB4pdw2oVQU1P7JdoFLMnBti+L38t698qUMhPB5Y1v
7PRqEZtA9JNExtgRZC08ulaZWAFvopNk5dEsh4/PPn1oxNA5WL+wP82LzdDqYPNi
VueidO0lrC0ZJQP3lwQK0BVfnsn2qe7KwPAlXkW0+xmsT6CTZQk34v+U60shUYFd
EUln8ScIOF2cdaNO03cAKADFBOopXlleEdBjbQukH8ZNLh9mNXARvhDq62QbNy7m
LK06ReNLkN20FugBYUMC+NbBRoZyd2kTYGDNXw+K7yS3+Yv2Vgs3qQOBoBCEM2KS
7X1G+AXCRWcHhg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:16 2026 by rpki-client