Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File: SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier: CVwK0zmBVoZKvQf+GUPADboXTZfRgrT7+fShDP9PWAU=
Subject key identifier: 71:45:42:6A:CE:31:CB:3F:18:A9:00:E6:64:FD:81:7F:44:06:81:B7
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial: 01A0DC4DE949D5C10957761885051D6A84BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number: 1A5B
Signing time: Sat 26 Sep 2026 06:01:28 +0000
Manifest this update: Sat 26 Sep 2026 06:01:28 +0000
Manifest next update: Sun 27 Sep 2026 06:01:28 +0000
Files and hashes: 1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: 1aXab7Kg/l6EzG3OazDs72MG2slwwy71q6rNnBPNqas=)
2: r_1SBfNhdBcm7JVeR9X_A84AJes.roa (hash: 5FQO7eCKudZ+J7HgNfZUcYEMcJXj0nI8UpKfM1ybpwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:e9:49:d5:c1:09:57:76:18:85:05:1d:6a:84:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Validity
Not Before: Sep 26 06:01:28 2026 GMT
Not After : Sep 27 06:01:28 2026 GMT
Subject: CN=7145426ace31cb3f18a900e664fd817f440681b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f3:98:11:45:87:fb:19:e0:9d:9f:30:16:25:
6b:e7:7f:96:e6:34:b0:8d:b9:c9:d3:1f:1b:6d:5f:
d6:98:d1:28:a4:d0:b8:de:de:1a:04:0e:5f:44:f7:
2c:6c:d4:49:85:db:1e:02:77:db:3b:80:f7:a5:0b:
e8:81:08:8b:2d:67:a2:bc:ec:41:da:f8:78:ae:b5:
59:7c:5d:c7:04:dc:c3:e8:b0:4d:0e:55:be:a5:31:
13:2b:f1:df:9f:e0:49:3e:a0:d8:b4:ed:85:78:e1:
c4:2f:bf:be:6d:97:6e:d0:e6:af:0e:1f:5e:a5:23:
bc:de:77:85:af:36:6a:0f:bd:21:09:94:4e:26:9d:
e2:58:ed:6b:02:80:50:8f:95:a1:3d:52:81:0e:31:
b7:1e:ef:03:33:d5:74:ee:4a:4a:a3:6c:61:1d:1d:
79:94:20:c2:71:a8:0e:5a:87:fc:49:eb:64:78:e3:
ad:d4:b0:a9:ca:9d:36:9c:3a:de:e6:d6:8f:da:9c:
c9:65:c4:fd:f5:34:12:cc:d2:38:31:3b:31:82:16:
23:38:80:42:92:8a:4b:45:dd:9b:2d:c4:98:09:3e:
25:64:fc:e9:4e:9d:2f:6d:94:4e:63:a4:b8:71:45:
c5:e9:4b:39:20:08:23:82:e1:b0:06:16:7c:43:91:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:45:42:6A:CE:31:CB:3F:18:A9:00:E6:64:FD:81:7F:44:06:81:B7
X509v3 Authority Key Identifier:
keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:31:0b:f0:04:77:64:31:37:38:3c:64:f9:fb:4f:98:43:03:
12:31:5c:86:58:bb:f4:03:6a:2b:24:76:c9:b8:98:f9:6f:18:
00:49:23:28:88:22:3a:d1:b7:0f:c1:58:6b:ef:26:29:4b:40:
6b:72:26:e6:a1:13:bf:88:c6:24:98:d1:29:69:39:f4:48:5a:
91:e1:cf:9e:e1:26:d4:69:a2:7e:7b:cd:ec:c7:cb:df:9d:af:
7c:9f:7c:d9:2f:7a:f8:a7:15:af:b3:d4:82:1c:6e:99:35:a9:
ce:30:60:9b:18:7f:cb:5c:f9:78:8f:38:dd:0d:9e:98:2e:78:
6f:52:ef:d7:b1:68:eb:b0:97:e8:ec:7a:32:dd:86:ed:06:46:
a2:a5:04:8f:75:f5:b4:8f:c3:e1:e2:67:71:17:dc:2c:8f:c9:
45:01:03:0e:eb:58:ec:5d:ae:ff:8a:43:e3:4a:8b:3f:33:50:
78:04:64:29:f2:fe:1f:50:db:98:59:be:c5:8c:92:3e:cf:9d:
43:40:09:53:fe:75:3e:ba:06:54:a4:04:89:ec:0b:96:d5:db:
41:b8:b1:8c:45:fb:f9:49:04:70:5d:50:5e:92:da:af:ec:5d:
7f:54:2c:40:8c:c5:bb:44:81:5e:ec:f8:17:19:da:ce:7f:c7:
1a:93:3d:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcTelJ1cEJV3YYhQUdaoS+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjgwNjk3ZmUyZTJkOTdiNTkxYWQ1YjkxNTgwNTU1YTQ0
ZDAzODgwHhcNMjYwOTI2MDYwMTI4WhcNMjYwOTI3MDYwMTI4WjAzMTEwLwYDVQQD
Eyg3MTQ1NDI2YWNlMzFjYjNmMThhOTAwZTY2NGZkODE3ZjQ0MDY4MWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/OYEUWH+xngnZ8wFiVr53+W5jSw
jbnJ0x8bbV/WmNEopNC43t4aBA5fRPcsbNRJhdseAnfbO4D3pQvogQiLLWeivOxB
2vh4rrVZfF3HBNzD6LBNDlW+pTETK/Hfn+BJPqDYtO2FeOHEL7++bZdu0OavDh9e
pSO83neFrzZqD70hCZROJp3iWO1rAoBQj5WhPVKBDjG3Hu8DM9V07kpKo2xhHR15
lCDCcagOWof8SetkeOOt1LCpyp02nDre5taP2pzJZcT99TQSzNI4MTsxghYjOIBC
kopLRd2bLcSYCT4lZPzpTp0vbZROY6S4cUXF6Us5IAgjguGwBhZ8Q5GCZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFFQmrOMcs/GKkA5mT9gX9EBoG3MB8GA1UdIwQY
MBaAFEn4Bpf+Li2XtZGtW5FYBVWkTQOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yNGRmNzItZmNjYy00OGRmLWE1YWUt
MWE2NGE4MDc3YjE0LzEvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8yNGRmNzItZmNjYy00OGRmLWE1YWUtMWE2NGE4MDc3YjE0
LzEvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjEL8AR3
ZDE3ODxk+ftPmEMDEjFchli79ANqKyR2ybiY+W8YAEkjKIgiOtG3D8FYa+8mKUtA
a3Im5qETv4jGJJjRKWk59EhakeHPnuEm1GmifnvN7MfL352vfJ982S96+KcVr7PU
ghxumTWpzjBgmxh/y1z5eI843Q2emC54b1Lv17Fo67CX6Ox6Mt2G7QZGoqUEj3X1
tI/D4eJncRfcLI/JRQEDDutY7F2u/4pD40qLPzNQeARkKfL+H1DbmFm+xYySPs+d
Q0AJU/51ProGVKQEiewLltXbQbixjEX7+UkEcF1QXpLar+xdf1QsQIzFu0SBXuz4
Fxnazn/HGpM9xA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:33:55 2026 by rpki-client