Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File: SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier: 8Lm4+dytqTXHhqd9xkgHx8zwh82Uj1BvoviRk36bYB8=
Subject key identifier: 4D:E7:57:2D:AC:89:7A:D9:8E:83:3F:E5:AB:B7:22:0B:96:BE:1A:C9
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial: 019EC1800F951FC5FD931D9761E5E1EA162A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number: 1944
Signing time: Sat 13 Jun 2026 15:00:55 +0000
Manifest this update: Sat 13 Jun 2026 15:00:55 +0000
Manifest next update: Sun 14 Jun 2026 15:00:55 +0000
Files and hashes: 1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: wf48jKEiskeWiN71Ohvxmme21G/MzrSKiDvpiqu3w5g=)
2: r_1SBfNhdBcm7JVeR9X_A84AJes.roa (hash: 5FQO7eCKudZ+J7HgNfZUcYEMcJXj0nI8UpKfM1ybpwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:0f:95:1f:c5:fd:93:1d:97:61:e5:e1:ea:16:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Validity
Not Before: Jun 13 15:00:55 2026 GMT
Not After : Jun 14 15:00:55 2026 GMT
Subject: CN=4de7572dac897ad98e833fe5abb7220b96be1ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c9:e5:b6:08:04:e7:de:08:23:72:7f:95:eb:
54:64:bb:cb:93:01:2c:6c:34:02:43:0d:a1:f9:18:
4b:45:68:c4:bd:d0:cb:89:7c:46:ff:b9:ee:8d:49:
b7:a9:22:f9:71:5d:5a:f9:2c:d8:ad:c0:3e:46:fb:
fd:97:f1:51:c6:57:dc:e4:c1:85:62:3a:4c:11:d6:
ff:ad:57:70:cd:39:5b:c8:5f:3e:db:26:eb:25:c3:
c8:fa:5e:3c:c6:d8:65:85:a2:19:a5:df:0a:b9:b9:
bc:f1:9b:80:33:0a:85:b3:60:bf:cd:5b:45:b2:6a:
74:2b:85:72:92:b7:7d:8b:ad:3c:b9:d4:49:8e:a1:
05:39:16:9c:b1:9a:86:b2:b9:82:78:d7:f8:f7:23:
39:c0:13:e3:b4:2f:01:3c:3e:ec:f4:fc:d7:ca:39:
2f:4a:28:7d:e7:63:3d:df:1a:19:ac:ae:df:22:bc:
2b:e7:79:51:6f:4f:14:db:ef:41:70:b7:2d:61:cd:
0d:4f:47:6f:47:cf:bd:81:84:04:96:a8:14:5d:53:
bd:0b:74:c5:3c:40:f8:9a:83:57:4b:46:38:fe:29:
ca:4a:49:84:b7:71:e9:50:a7:b0:11:3b:73:4d:7c:
38:2a:a0:0e:80:77:2d:e9:83:2f:de:9e:5c:0d:31:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E7:57:2D:AC:89:7A:D9:8E:83:3F:E5:AB:B7:22:0B:96:BE:1A:C9
X509v3 Authority Key Identifier:
keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c6:f4:10:bc:a1:b1:b3:82:b5:22:a9:43:68:c4:50:6c:6f:
86:c8:98:78:b0:d2:3d:43:ea:92:17:fa:26:b7:cb:38:89:dd:
de:68:75:86:6b:38:b7:a3:38:10:ed:b8:e4:28:27:fe:ef:31:
66:8d:35:b0:f8:02:f0:ed:ee:34:5f:aa:88:5d:38:2d:93:4b:
0d:21:03:43:0b:b4:37:a6:6c:e1:d6:83:04:58:fa:84:34:e8:
a7:26:b9:4f:1d:cb:df:9e:ba:3c:06:52:d6:89:32:eb:98:60:
32:f6:0e:d1:a8:44:9f:e0:cf:10:72:0e:6e:81:19:ce:6a:3a:
5f:94:fb:79:45:58:cb:59:c1:7f:ba:1c:bf:69:60:eb:21:f1:
6f:2b:6b:f6:6a:33:d6:46:30:a9:bb:55:78:e8:1e:bd:78:a7:
fc:82:e8:b2:e7:df:2f:ca:8d:d8:bd:db:18:c1:5a:25:64:8d:
36:1a:a9:0c:54:ea:ef:04:18:61:e3:d3:80:54:0c:10:3b:03:
18:1f:b8:4d:00:c4:a5:24:7a:6e:a6:05:e1:cd:db:b2:15:15:
bd:0d:d4:92:a1:ea:cb:dd:45:05:8f:12:09:e2:e2:20:99:2e:
b1:a4:9c:b5:e5:76:5f:7c:0b:3b:23:cb:ab:99:09:6a:50:4f:
3a:cb:3e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:07:55 2026 by rpki-client