Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
File: sgWR5euUhCdKdKyC_muRDivLE5k.mft (raw, json)
Hash identifier: OHzDPLmfVyPQl1bFcNxeHWIo3tbcl32i0jdjej0NyCs=
Subject key identifier: DA:43:11:F6:55:25:E1:CE:2A:B4:BA:5F:A1:0D:6A:15:F9:48:33:17
Authority key identifier: B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
Certificate issuer: /CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Certificate serial: 01A0C74686E6AF01B9DD14CCA344FC4126A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
Manifest number: 01C4
Signing time: Tue 22 Sep 2026 04:01:22 +0000
Manifest this update: Tue 22 Sep 2026 04:01:22 +0000
Manifest next update: Wed 23 Sep 2026 04:01:22 +0000
Files and hashes: 1: YNiESc72RDLIiWhCHsXSi1o9cLE.asa (hash: l71vJ2s8lHSefHy7yMSFsWXnMilHTDdYBPtW2A9TX3g=)
2: sgWR5euUhCdKdKyC_muRDivLE5k.crl (hash: h9/elSS80xSNy6oc2P5qNsN6AQrPHY8d0muTTY0Tq2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:86:e6:af:01:b9:dd:14:cc:a3:44:fc:41:26:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Validity
Not Before: Sep 22 04:01:22 2026 GMT
Not After : Sep 23 04:01:22 2026 GMT
Subject: CN=da4311f65525e1ce2ab4ba5fa10d6a15f9483317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:e4:17:ee:ab:08:3b:fb:45:7f:83:17:a5:
9c:7b:d6:0a:4d:95:3c:14:0c:c8:0b:b5:3f:70:8f:
f5:c6:f4:12:e7:14:17:80:33:83:da:87:76:c3:f7:
ec:b8:f0:c3:6c:3b:9b:99:3e:b4:99:87:85:b0:9b:
63:97:a9:47:3e:12:ac:be:67:2a:6d:8e:70:b9:07:
fc:3f:d8:48:a6:fd:38:46:04:05:1b:0d:29:30:fd:
f5:b4:6d:e8:33:d8:13:dc:cb:3d:dd:bc:24:37:ba:
1d:46:8e:13:ae:78:fe:11:41:4f:d1:f8:40:74:eb:
1a:11:07:0a:8b:56:02:0e:ef:58:d1:7a:bd:7e:b2:
fa:79:0d:ce:28:c3:5e:71:f2:4b:ae:05:b9:f5:7f:
dd:58:e3:0a:d7:3a:1a:2a:75:ee:ce:84:a5:28:bc:
ca:cc:38:64:78:08:98:98:2f:31:07:21:db:c0:ee:
87:c4:25:f1:60:78:3c:16:34:63:a1:44:26:f8:87:
8a:f3:46:2d:9b:66:a0:2a:69:b0:c0:b0:cf:ed:1e:
19:7c:b0:c6:37:d4:1f:6d:36:c1:26:a9:9e:a8:b5:
2c:33:56:00:22:7c:2a:bc:73:38:2d:be:c6:b3:f3:
fd:21:38:3a:80:11:6a:18:d8:8c:ba:7c:33:b1:d5:
f4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:43:11:F6:55:25:E1:CE:2A:B4:BA:5F:A1:0D:6A:15:F9:48:33:17
X509v3 Authority Key Identifier:
keyid:B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:05:8c:3e:94:51:b4:7c:be:b0:3a:17:e0:8b:49:b2:db:bb:
8d:0c:31:6e:ae:56:7a:d1:e0:f0:9f:6b:68:44:f7:0f:7d:0c:
fb:7f:1f:a9:29:fa:fd:93:fd:7a:87:9e:5b:a0:3f:8f:a0:57:
ec:9f:3f:b3:9a:ac:df:4b:6a:4e:40:2c:83:c0:f6:02:95:90:
7b:05:b8:47:8f:17:4c:4b:51:46:35:3f:50:6f:68:d6:5f:0d:
f7:54:ef:91:39:be:91:ea:9b:24:3f:b7:49:4c:93:09:36:5e:
56:3c:2f:5c:de:31:59:86:64:5f:98:11:c7:cf:7c:f7:ba:98:
54:c0:df:89:1e:14:2d:f4:33:25:c6:b3:64:e9:70:59:23:4a:
23:b0:89:40:0e:f9:2c:b7:9f:e4:91:02:80:13:b5:80:27:98:
b5:f4:e1:c7:45:fb:1b:d0:cb:2c:76:8b:a7:e3:82:a2:c1:47:
56:0a:70:09:7a:6a:35:07:ff:fc:9f:c0:8e:bf:79:e6:df:93:
67:a1:a1:a5:c2:70:c0:19:a9:0b:80:ee:b7:51:c0:14:99:f5:
bd:82:ee:64:44:6c:4d:11:ee:60:fb:a4:e6:a9:74:39:6a:fc:
f7:b7:cc:55:2c:32:68:8d:75:7f:d8:5a:16:ba:ed:70:47:c0:
49:3a:a7:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRobmrwG53RTMo0T8QSajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMDU5MWU1ZWI5NDg0Mjc0YTc0YWM4MmZlNmI5MTBlMmJj
YjEzOTkwHhcNMjYwOTIyMDQwMTIyWhcNMjYwOTIzMDQwMTIyWjAzMTEwLwYDVQQD
EyhkYTQzMTFmNjU1MjVlMWNlMmFiNGJhNWZhMTBkNmExNWY5NDgzMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3HkF+6rCDv7RX+DF6Wce9YKTZU8
FAzIC7U/cI/1xvQS5xQXgDOD2od2w/fsuPDDbDubmT60mYeFsJtjl6lHPhKsvmcq
bY5wuQf8P9hIpv04RgQFGw0pMP31tG3oM9gT3Ms93bwkN7odRo4Trnj+EUFP0fhA
dOsaEQcKi1YCDu9Y0Xq9frL6eQ3OKMNecfJLrgW59X/dWOMK1zoaKnXuzoSlKLzK
zDhkeAiYmC8xByHbwO6HxCXxYHg8FjRjoUQm+IeK80Ytm2agKmmwwLDP7R4ZfLDG
N9QfbTbBJqmeqLUsM1YAInwqvHM4Lb7Gs/P9ITg6gBFqGNiMunwzsdX01QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpDEfZVJeHOKrS6X6ENahX5SDMXMB8GA1UdIwQY
MBaAFLIFkeXrlIQnSnSsgv5rkQ4ryxOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2dXUjVldVVoQ2RLZEt5Q19tdVJEaXZMRTVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83OWJlZjEtY2Q1Ni00ZThiLTk3NDkt
OTU4MzhjN2M4NGY1LzEvc2dXUjVldVVoQ2RLZEt5Q19tdVJEaXZMRTVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83OWJlZjEtY2Q1Ni00ZThiLTk3NDktOTU4MzhjN2M4NGY1
LzEvc2dXUjVldVVoQ2RLZEt5Q19tdVJEaXZMRTVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgWMPpRR
tHy+sDoX4ItJstu7jQwxbq5WetHg8J9raET3D30M+38fqSn6/ZP9eoeeW6A/j6BX
7J8/s5qs30tqTkAsg8D2ApWQewW4R48XTEtRRjU/UG9o1l8N91TvkTm+keqbJD+3
SUyTCTZeVjwvXN4xWYZkX5gRx89897qYVMDfiR4ULfQzJcazZOlwWSNKI7CJQA75
LLef5JECgBO1gCeYtfThx0X7G9DLLHaLp+OCosFHVgpwCXpqNQf//J/Ajr955t+T
Z6GhpcJwwBmpC4Dut1HAFJn1vYLuZERsTRHuYPuk5ql0OWr897fMVSwyaI11f9ha
FrrtcEfASTqn2Q==
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:17:51 2026 by rpki-client