Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File: SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier: 4wIrC34NyukmkN/46p5IvPgnhyJ13ENbGHrLIPSqa0M=
Subject key identifier: 6F:59:35:5D:AB:72:E2:C6:C2:D3:DF:B0:FF:7E:D8:40:1D:B4:06:AA
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 019CACEB506691A7288BB6FF2DE37A8A6056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number: 1646
Signing time: Mon 02 Mar 2026 05:00:28 +0000
Manifest this update: Mon 02 Mar 2026 05:00:28 +0000
Manifest next update: Tue 03 Mar 2026 05:00:28 +0000
Files and hashes: 1: 32houEZJjYMHYgPuRqIg-2gVrRU.roa (hash: SgYOhNo4HZLgeATCDQYMmqSzEM1MXHyJPN6hUBC7MIM=)
2: JnkLx50ImRIwe6DLwjoBPmLJiIM.roa (hash: ZgcI3W3bS8GffqjlQ449bvcUFmbTNqw4WdF2nIUN8ao=)
3: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: W4YyO0maYkAhwVqOmlsmIIwTzNnOXKUPwn2yRXd46ig=)
4: TSB5mTZZzRTTPnt6-Y8o-3CQEPA.roa (hash: PsDTk/dMLVROLGkVcO0KwNjR8rb+3K2JtemVORHSo8Y=)
5: Vzeyp2a_2ybj2YU-0i2OoZlnwnI.roa (hash: OMd6zbL5MprZ3M6eB+ZY4S4Gxx6gPSlVJAESUBQW+L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:50:66:91:a7:28:8b:b6:ff:2d:e3:7a:8a:60:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Mar 2 05:00:28 2026 GMT
Not After : Mar 3 05:00:28 2026 GMT
Subject: CN=6f59355dab72e2c6c2d3dfb0ff7ed8401db406aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:4c:ee:c8:3c:f7:7b:e9:b5:65:32:6c:5d:
35:39:ed:8e:a4:ed:0b:6d:55:9e:b8:3b:b2:c8:e4:
6a:6e:82:bd:d0:4f:9d:b2:5e:7b:cb:2c:13:c8:18:
13:cd:13:af:69:75:9a:03:49:84:95:1f:9e:12:88:
38:ca:c3:c3:11:cb:47:d5:65:3c:76:d2:9d:99:24:
ce:3c:47:83:d1:58:31:b7:05:dc:83:c5:35:a5:d5:
1e:c3:f2:49:f5:2c:c2:6f:d4:ab:15:43:10:a5:4d:
0b:5a:37:4a:bd:ed:81:f8:3f:16:33:c9:bb:63:68:
71:8d:30:e6:74:98:7b:b8:7d:ff:c0:a5:3b:c2:bf:
fd:60:76:13:cf:c3:1c:76:67:2a:fd:cd:e3:f7:64:
c7:a0:52:47:2e:5e:49:7f:ec:91:80:a0:bb:e3:e9:
6d:b2:09:f7:fe:af:5f:a1:fe:df:fa:54:0e:95:0a:
e0:a1:39:5e:4f:f6:ec:04:89:b0:02:6b:34:27:9b:
7e:39:c4:5f:3c:7e:ff:47:3d:52:14:89:24:32:9a:
07:e5:c5:f2:0d:6a:45:1b:f0:29:37:27:bc:83:34:
33:2b:f9:15:d1:21:40:c5:14:0a:78:bb:07:55:39:
53:13:7a:f2:dd:fc:86:79:4f:07:5c:07:6a:77:51:
15:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:59:35:5D:AB:72:E2:C6:C2:D3:DF:B0:FF:7E:D8:40:1D:B4:06:AA
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b8:31:af:7d:49:cd:5b:14:a7:f7:58:9b:0d:d9:73:7e:c4:
36:c5:95:64:f3:a7:1d:02:a6:e9:e3:47:54:51:5a:55:12:36:
0f:29:40:e5:75:1e:a7:88:f2:b3:12:f9:73:e3:77:d3:9b:a3:
4b:4a:e0:f7:24:6e:1b:31:8f:66:c1:a4:78:d5:81:13:d6:41:
c5:bb:46:ef:a9:6a:6f:77:e6:8b:04:71:09:89:fc:9b:c3:6b:
62:d8:09:5b:64:ca:94:5e:39:13:b4:f8:0d:eb:be:f1:88:d2:
e7:9c:8d:66:b3:1b:dc:c2:26:9b:2a:7d:f5:ce:4c:8b:86:bb:
bc:7c:a9:5f:6c:68:de:c1:79:61:3e:53:d7:e2:d6:90:3a:c0:
83:09:ad:75:3c:6a:d4:68:ab:bc:c2:e5:c6:57:50:ac:31:40:
5d:fd:3a:88:31:2f:c8:13:ce:a6:91:6c:98:3c:63:7c:d3:b7:
63:ef:9f:5d:59:5f:1e:4a:f3:f3:5f:74:c2:32:18:e6:dc:cc:
31:26:20:85:7b:54:a4:0e:cd:f5:39:7d:22:31:59:8f:41:03:
75:e6:4c:64:b6:2c:a0:5c:41:33:cd:26:7d:77:30:11:f9:39:
08:34:d0:6f:b1:77:98:6a:7a:0e:96:6b:b3:fd:66:85:9e:3b:
d9:bd:27:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:38 2026 by rpki-client