Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
File: sgWR5euUhCdKdKyC_muRDivLE5k.mft (raw, json)
Hash identifier: P5uj3d6UIaeGCNgJUYBTqJ/IwXbZEC20DaeQqUxIfOM=
Subject key identifier: 1D:23:E9:D7:C5:10:D7:FA:81:32:68:59:71:44:61:61:A9:BB:B5:BE
Authority key identifier: B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
Certificate issuer: /CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Certificate serial: 019D9E1B1BC82D4541626F0EB963BAC8C6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
Manifest number: 21
Signing time: Sat 18 Apr 2026 01:01:09 +0000
Manifest this update: Sat 18 Apr 2026 01:01:09 +0000
Manifest next update: Sun 19 Apr 2026 01:01:09 +0000
Files and hashes: 1: YNiESc72RDLIiWhCHsXSi1o9cLE.asa (hash: l71vJ2s8lHSefHy7yMSFsWXnMilHTDdYBPtW2A9TX3g=)
2: sgWR5euUhCdKdKyC_muRDivLE5k.crl (hash: lrH6RRNQGcZ4A0+z9pBOfvzCt1G16Ju1+gliTjGxlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:1b:c8:2d:45:41:62:6f:0e:b9:63:ba:c8:c6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Validity
Not Before: Apr 18 01:01:09 2026 GMT
Not After : Apr 19 01:01:09 2026 GMT
Subject: CN=1d23e9d7c510d7fa8132685971446161a9bbb5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:10:15:56:87:da:4b:c9:41:f9:82:17:78:
ce:aa:05:ee:8a:4a:20:57:90:61:46:bf:25:3a:97:
7a:0e:d3:bb:a2:af:88:2b:63:82:84:95:bb:9b:e1:
fc:74:f4:c1:89:a0:f0:5d:d7:93:25:7c:2b:e6:94:
d8:28:b6:b8:6b:81:c8:e4:22:20:1b:2d:e6:96:2e:
f7:b4:d3:45:c6:5b:4d:34:f8:d2:4a:7e:4b:71:c5:
89:b0:83:88:22:4b:ee:e9:e4:c8:89:9a:91:07:10:
eb:8a:23:0a:b3:15:d6:2a:9e:6f:16:a2:b8:8a:67:
16:f4:ba:d5:15:6b:99:45:2a:9b:67:6f:32:92:6d:
fe:18:2b:e7:73:66:18:46:c2:38:67:4d:8c:6d:26:
a7:2f:d4:c0:34:46:4a:1f:a5:69:a9:27:a9:a6:53:
d6:94:5b:ac:d6:0d:a3:94:ac:18:48:0a:45:2e:da:
33:f3:8c:fa:96:23:76:96:74:7e:73:45:17:c3:5f:
e7:bf:36:6d:52:75:53:49:07:63:85:f7:8b:09:49:
4a:05:ec:e2:7d:13:76:7a:f2:81:61:49:9e:3a:3b:
ba:3b:71:17:8c:a3:9c:27:65:a0:67:2c:c5:2f:2f:
4f:db:b6:2f:16:b8:e5:6a:bf:3f:5d:a0:c4:21:c6:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:23:E9:D7:C5:10:D7:FA:81:32:68:59:71:44:61:61:A9:BB:B5:BE
X509v3 Authority Key Identifier:
keyid:B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9f:1a:68:6d:44:bd:c1:0e:5e:8e:f4:25:7f:29:6c:31:be:
cc:62:86:f1:55:06:d9:e8:9b:68:d0:d6:c8:97:47:9a:ab:8a:
09:f4:cd:36:c3:91:55:0f:85:3e:a8:82:09:30:d0:6b:42:a6:
e6:f2:f8:1d:0a:23:b2:66:87:0d:01:54:5b:56:33:9d:49:4e:
51:79:58:30:e9:f7:ff:9a:7e:27:b3:22:98:3d:f9:89:d6:69:
53:3c:ef:a6:d4:10:2d:80:00:d2:0f:d2:eb:ea:42:0d:9c:13:
41:c4:60:03:fa:ad:96:af:a9:69:cc:bf:e4:7a:bc:de:23:3a:
f5:c1:7d:04:74:af:08:90:ee:11:cb:dc:c7:10:f3:45:18:ee:
45:16:34:e4:61:ec:72:37:74:55:21:83:1a:39:61:25:c6:9a:
a6:aa:6b:9e:cd:f8:e1:90:d6:72:23:aa:3f:b9:12:e3:77:9b:
1b:b2:1e:52:f3:8d:25:bd:33:2c:e1:24:55:2f:63:ba:3f:3d:
e8:3f:cc:b6:9e:66:05:9c:70:6e:77:58:2e:6c:75:2c:80:7c:
35:52:dc:dc:56:1a:e2:f8:4e:f0:a2:32:26:68:27:0c:b5:47:
53:33:58:82:e6:12:a3:93:b2:9c:54:04:77:6b:9c:58:dd:16:
c9:75:6f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:52:30 2026 by rpki-client