Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
File: sgWR5euUhCdKdKyC_muRDivLE5k.mft (raw, json)
Hash identifier: Buax+weY+iCifR49+lfeppvvEDTZcdnQwCS6vTecPT8=
Subject key identifier: 47:67:90:E8:70:20:AF:D6:DD:8D:42:D7:6B:A0:4C:3C:F1:AD:68:FA
Authority key identifier: B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
Certificate issuer: /CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Certificate serial: 01A0C369A3EEA71076246CC9594939BAB7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
Manifest number: 01C2
Signing time: Mon 21 Sep 2026 10:01:15 +0000
Manifest this update: Mon 21 Sep 2026 10:01:15 +0000
Manifest next update: Tue 22 Sep 2026 10:01:15 +0000
Files and hashes: 1: YNiESc72RDLIiWhCHsXSi1o9cLE.asa (hash: l71vJ2s8lHSefHy7yMSFsWXnMilHTDdYBPtW2A9TX3g=)
2: sgWR5euUhCdKdKyC_muRDivLE5k.crl (hash: aXNizWzMt/TWpQ/ViXccReGF/28Rcle3Oi60pI1smQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:a3:ee:a7:10:76:24:6c:c9:59:49:39:ba:b7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Validity
Not Before: Sep 21 10:01:15 2026 GMT
Not After : Sep 22 10:01:15 2026 GMT
Subject: CN=476790e87020afd6dd8d42d76ba04c3cf1ad68fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:66:ab:6c:3f:87:d7:f2:9e:94:d2:ad:2a:
79:1e:af:16:bc:88:ba:0a:93:32:99:85:16:11:b3:
9a:be:07:5c:0a:bd:d6:51:96:e2:f3:6c:2d:cc:d2:
7e:cd:33:6c:7c:bd:46:ef:51:a9:b3:6a:bb:25:25:
e0:c3:42:9a:36:fe:07:37:d4:2a:e2:23:81:a6:ac:
9a:a7:e2:fb:ed:50:fb:51:74:16:1a:ba:b0:04:03:
b8:21:eb:c5:11:41:c7:1c:58:08:37:89:15:a3:9c:
74:8a:ff:fa:18:81:96:3d:44:27:67:1d:e5:b5:64:
06:3e:38:dc:b9:3c:9a:17:41:ce:34:00:72:7d:0d:
5e:89:bf:1f:e1:f3:d7:c0:54:6d:38:23:13:d3:9f:
df:04:97:a1:7d:3e:2d:8c:24:95:b2:5b:d2:f9:5b:
4f:cc:14:22:bc:11:d9:b8:34:9e:00:43:e1:a0:b0:
da:8e:9d:0e:06:bb:51:67:9c:83:c7:34:a1:5a:4c:
df:48:8e:67:76:fc:46:d3:2a:92:bf:d3:6e:93:87:
3b:fa:0e:e7:ba:7e:77:93:50:cd:2f:a7:ab:f5:19:
db:fa:9e:cc:d6:e7:0e:78:1c:e2:a1:05:c1:73:d1:
cd:05:4e:94:66:5d:68:3f:90:57:1d:24:1b:6b:16:
3d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:67:90:E8:70:20:AF:D6:DD:8D:42:D7:6B:A0:4C:3C:F1:AD:68:FA
X509v3 Authority Key Identifier:
keyid:B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:77:90:5d:e2:08:e7:bc:3f:00:37:b2:1d:43:26:f9:fc:23:
12:cb:a3:70:f5:96:5e:e2:19:e4:f1:32:3f:99:0e:0a:ac:17:
fe:ba:b7:49:db:5e:16:f9:d6:60:44:df:e0:08:3f:9c:9c:be:
e1:f4:cf:bd:17:02:79:34:8b:68:d2:47:87:b1:f7:55:fd:2b:
65:47:74:87:95:f6:99:50:cc:a6:31:77:a8:a7:d3:12:e7:fc:
67:05:b9:7a:cd:d0:67:13:42:5b:83:d7:9f:e7:9e:ab:31:c2:
b9:17:ed:72:c2:66:56:20:ea:a7:59:36:e4:90:cb:a1:5b:9f:
28:b7:63:6f:e0:03:d2:3b:5a:59:5e:64:06:95:1d:8c:29:4a:
73:64:2f:55:ca:31:47:44:a8:ff:72:cf:44:c7:45:16:29:08:
6a:a2:26:cf:61:b7:bb:67:19:38:fa:de:ed:d6:fb:5c:cb:3a:
f0:b0:ce:36:fe:09:f5:47:3b:8f:11:4c:a6:8a:ae:44:ca:50:
91:44:b0:2c:85:4e:a7:95:54:ee:35:4b:e6:f1:48:e3:92:09:
a9:a0:ba:97:76:ad:04:23:c8:0f:5b:42:ce:93:f0:4f:49:94:
32:fb:24:c2:66:c7:1a:d1:d9:1e:8d:e6:07:6e:76:25:46:bc:
6b:56:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:20:29 2026 by rpki-client