
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File: SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier: 9CBRm8AD9aInOTakYo2/YcvGAvAWNuFexJ3Do4z/1vE=
Subject key identifier: 15:97:3A:E9:79:A7:6E:A2:DE:0A:17:1B:C1:1B:99:2B:7D:2D:D7:E3
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 01A0CD48353A2EE73C46B56C4136A5B9225B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number: 1869
Signing time: Wed 23 Sep 2026 08:00:56 +0000
Manifest this update: Wed 23 Sep 2026 08:00:56 +0000
Manifest next update: Thu 24 Sep 2026 08:00:56 +0000
Files and hashes: 1: 32houEZJjYMHYgPuRqIg-2gVrRU.roa (hash: SgYOhNo4HZLgeATCDQYMmqSzEM1MXHyJPN6hUBC7MIM=)
2: JnkLx50ImRIwe6DLwjoBPmLJiIM.roa (hash: ZgcI3W3bS8GffqjlQ449bvcUFmbTNqw4WdF2nIUN8ao=)
3: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: Ht1mqfZLtcAnJbkXJ7eZNxoWQT89hDwILh7YmQRa11Y=)
4: TSB5mTZZzRTTPnt6-Y8o-3CQEPA.roa (hash: PsDTk/dMLVROLGkVcO0KwNjR8rb+3K2JtemVORHSo8Y=)
5: Vzeyp2a_2ybj2YU-0i2OoZlnwnI.roa (hash: OMd6zbL5MprZ3M6eB+ZY4S4Gxx6gPSlVJAESUBQW+L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:35:3a:2e:e7:3c:46:b5:6c:41:36:a5:b9:22:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Sep 23 08:00:56 2026 GMT
Not After : Sep 24 08:00:56 2026 GMT
Subject: CN=15973ae979a76ea2de0a171bc11b992b7d2dd7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:c9:ff:c2:dd:97:9f:1f:c8:75:37:c5:16:
2d:83:87:9b:7d:51:55:dd:02:e2:30:e6:37:3e:f5:
f9:1e:3c:07:b0:40:48:4d:94:60:a8:d4:7a:8f:8b:
cb:12:d6:34:63:ad:71:1a:5a:7e:5e:1e:b9:a2:a0:
95:0a:d9:60:89:f4:e3:f9:9a:db:83:4a:17:f1:fe:
f3:0e:57:b7:aa:07:cd:d6:f7:4c:0e:d3:71:69:1e:
c8:f1:d3:f2:48:9b:ad:4c:ee:bc:f8:b4:dc:2a:18:
73:f6:84:b9:08:85:a8:85:6e:4b:a4:9f:80:8a:44:
79:f8:0d:7e:db:33:ff:f4:4e:85:45:00:69:ca:cf:
14:f1:02:6e:13:38:fa:6e:70:64:a6:8f:37:de:5c:
a9:be:ff:54:01:eb:46:fe:dc:27:7e:58:6a:c4:4e:
67:2c:22:bd:10:85:a3:08:75:55:0c:5f:cc:09:ba:
be:ca:9b:69:88:70:3f:67:d6:f3:71:e9:3b:4d:66:
5c:05:bb:08:82:2e:2b:9b:c9:b4:89:3b:cb:4d:5f:
51:e9:0d:c4:c7:25:55:18:6e:6b:dc:c9:36:06:e0:
e5:26:71:b3:1e:1e:8f:97:d3:4b:3b:58:d6:7a:ed:
4c:ab:80:39:08:ca:76:28:de:22:25:95:fd:3c:ca:
84:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:97:3A:E9:79:A7:6E:A2:DE:0A:17:1B:C1:1B:99:2B:7D:2D:D7:E3
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ac:66:43:98:28:b4:47:33:74:33:30:54:b2:86:dc:3b:4a:
38:a2:e9:5d:39:16:2f:0b:61:cd:b1:6b:f5:5f:fa:c7:f8:46:
a7:92:1e:b5:1c:e4:b4:61:80:9b:7d:5a:43:4d:b6:35:c8:0b:
b5:79:56:06:6d:b1:75:c0:02:ef:e3:80:ee:59:53:b3:a2:b3:
5b:de:30:ee:45:16:3a:31:c8:22:f3:b8:8f:bf:e3:c0:dd:6b:
75:14:f7:66:ed:7f:52:ea:d1:4d:1c:8d:52:a9:cc:21:d9:1d:
f0:41:88:4f:74:3a:55:5b:69:16:43:5a:d8:21:f5:b3:0f:6c:
17:23:80:eb:b9:79:a6:b9:b6:22:06:59:ed:98:0c:9a:c2:aa:
dd:83:2a:e4:f5:2e:ca:00:47:52:d8:29:99:26:28:a7:94:00:
c9:fb:85:7a:cc:34:ee:98:e8:62:e9:85:0e:07:13:91:07:95:
2a:f1:18:d8:4b:2b:fc:52:ec:c1:9f:7d:5d:b2:dd:d1:7e:e4:
56:56:a8:a3:12:1b:46:fd:e0:8f:7e:cc:93:7b:25:80:db:8f:
85:ca:b6:66:68:ae:47:e4:df:1e:ba:8d:c5:5c:8c:54:d2:38:
e5:32:de:90:29:be:c0:4b:76:78:30:60:5a:bb:ee:a3:0e:59:
0e:8d:66:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNSDU6Luc8RrVsQTaluSJbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDFhNWI4MTYxNThmMDdhOGNhOGFjYjM3ZTk3ZTJmMjBi
MDY5MTEwHhcNMjYwOTIzMDgwMDU2WhcNMjYwOTI0MDgwMDU2WjAzMTEwLwYDVQQD
EygxNTk3M2FlOTc5YTc2ZWEyZGUwYTE3MWJjMTFiOTkyYjdkMmRkN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhnJ/8Ldl58fyHU3xRYtg4ebfVFV
3QLiMOY3PvX5HjwHsEBITZRgqNR6j4vLEtY0Y61xGlp+Xh65oqCVCtlgifTj+Zrb
g0oX8f7zDle3qgfN1vdMDtNxaR7I8dPySJutTO68+LTcKhhz9oS5CIWohW5LpJ+A
ikR5+A1+2zP/9E6FRQBpys8U8QJuEzj6bnBkpo833lypvv9UAetG/twnflhqxE5n
LCK9EIWjCHVVDF/MCbq+yptpiHA/Z9bzcek7TWZcBbsIgi4rm8m0iTvLTV9R6Q3E
xyVVGG5r3Mk2BuDlJnGzHh6Pl9NLO1jWeu1Mq4A5CMp2KN4iJZX9PMqExwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWXOul5p26i3goXG8EbmSt9LdfjMB8GA1UdIwQY
MBaAFEgBpbgWFY8HqMqKyzfpfi8gsGkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS83MDkwYTktZmVlZC00ZWExLTg0NTkt
ZWU4MTBiODNhZGNkLzEvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS83MDkwYTktZmVlZC00ZWExLTg0NTktZWU4MTBiODNhZGNk
LzEvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaxmQ5go
tEczdDMwVLKG3DtKOKLpXTkWLwthzbFr9V/6x/hGp5IetRzktGGAm31aQ022NcgL
tXlWBm2xdcAC7+OA7llTs6KzW94w7kUWOjHIIvO4j7/jwN1rdRT3Zu1/UurRTRyN
UqnMIdkd8EGIT3Q6VVtpFkNa2CH1sw9sFyOA67l5prm2IgZZ7ZgMmsKq3YMq5PUu
ygBHUtgpmSYop5QAyfuFesw07pjoYumFDgcTkQeVKvEY2Esr/FLswZ99XbLd0X7k
VlaooxIbRv3gj37Mk3slgNuPhcq2ZmiuR+TfHrqNxVyMVNI45TLekCm+wEt2eDBg
Wrvuow5ZDo1mCQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:56:42 2026 by rpki-client