Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
File: SGUQoxFpcvztleiova_W5FXe0Lo.mft (raw, json)
Hash identifier: ROmGGy6aY8TDwt5e9V1xTngsZgNVADne4nG2SHOeFEo=
Subject key identifier: CC:58:E3:BF:C1:63:1F:BE:2F:3B:61:E9:0D:50:70:FA:97:E2:EF:6C
Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
Certificate issuer: /CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Certificate serial: 01A0CEC8A36FF95C99F8EB4CCE47A1CB1C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
Manifest number: 1A70
Signing time: Wed 23 Sep 2026 15:00:50 +0000
Manifest this update: Wed 23 Sep 2026 15:00:50 +0000
Manifest next update: Thu 24 Sep 2026 15:00:50 +0000
Files and hashes: 1: 1-_tolY0Ku6cjK7uWuGIDT-aOsUM.roa (hash: zHmw/JUfBT58tzI52qKI6ZXBHiMslg81gZfcAbrW9BY=)
2: 1cDQdypkn0cjo9FfkDhM0paatNY.roa (hash: +ByPIkalEzr2Rwt/bFmRxra3ZwfCDb/OP1YXhCyI2zk=)
3: SGUQoxFpcvztleiova_W5FXe0Lo.crl (hash: P86ELuPpZQkHQKhLZmBCq/N5VRD2l2UTS6DppJdJiKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:a3:6f:f9:5c:99:f8:eb:4c:ce:47:a1:cb:1c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Validity
Not Before: Sep 23 15:00:50 2026 GMT
Not After : Sep 24 15:00:50 2026 GMT
Subject: CN=cc58e3bfc1631fbe2f3b61e90d5070fa97e2ef6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:fd:54:e0:fd:32:c4:0e:eb:bf:d3:4a:5b:
87:1d:fb:eb:5c:89:0f:d2:6c:b4:ee:3b:41:83:84:
b3:fd:2e:b5:a3:af:66:ed:1b:7f:2d:14:13:d6:25:
21:fd:a7:e5:65:1a:96:79:bb:4f:b8:d4:cb:0f:c5:
7d:21:f8:a1:20:40:e0:34:a5:20:fd:9f:9f:97:7a:
85:a1:28:16:c1:44:fe:c7:5d:3c:69:cd:ed:8c:28:
5e:30:3d:76:81:2f:11:f1:28:1f:75:32:b9:00:92:
5b:e0:ad:3b:71:bd:e9:67:05:47:ac:03:29:7b:73:
66:af:69:dd:b9:ac:0d:1f:d8:32:6d:73:cd:34:86:
00:1f:53:c9:ba:78:48:fc:22:cb:9e:a9:54:fa:8a:
71:bf:bf:7f:fe:4b:f3:83:c7:44:be:3d:e6:f7:8a:
34:a3:dd:bd:30:e1:3d:8b:1a:8e:15:63:b8:a3:29:
39:97:ad:ac:9c:cd:da:3a:9e:f1:30:a8:75:99:49:
36:7b:a1:c5:b5:fc:31:a6:98:55:23:b0:bf:f6:31:
cc:bf:58:7e:7f:05:29:87:ba:93:e2:21:a9:1f:14:
62:bb:e1:ba:7d:88:49:98:c6:e9:90:e7:ef:2a:cc:
fa:7d:29:4f:92:ea:45:5e:7d:20:3c:57:30:c5:46:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:58:E3:BF:C1:63:1F:BE:2F:3B:61:E9:0D:50:70:FA:97:E2:EF:6C
X509v3 Authority Key Identifier:
keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:48:a2:6d:26:f6:1b:79:ff:da:a0:7f:ee:0d:bc:01:c1:32:
24:7d:4d:52:7c:3d:d9:ee:d5:99:18:e3:4b:95:09:e7:a0:00:
9c:0b:83:2c:46:6c:fd:3c:1b:81:0f:04:66:82:23:d6:77:85:
d4:83:ad:49:6e:1a:d8:b5:e0:4e:01:7d:89:ad:1b:90:5c:e5:
47:96:77:21:4e:1d:4c:13:b1:2c:fd:7d:40:bb:93:f7:a3:8e:
03:bb:da:1d:09:59:ac:af:11:e4:fe:1f:3b:1a:d5:f8:be:1f:
8c:9c:b1:a0:8c:c0:65:d2:f8:8e:87:29:36:8e:37:e3:be:c8:
89:fe:e8:c1:e6:e7:1d:ad:37:3e:62:14:12:ea:d4:7b:e9:be:
54:af:98:4f:7c:26:41:dc:fe:98:56:4d:28:1a:0a:8f:ab:53:
37:96:99:a0:ac:14:17:01:8f:41:e8:78:eb:e6:0c:e3:57:1d:
01:f4:1a:a7:d2:aa:b3:21:c3:84:b5:1a:84:b5:ba:18:36:ca:
81:18:90:7e:d4:7e:12:bf:32:25:a3:7b:86:7c:09:43:76:80:
bc:ed:3f:81:d4:34:bf:f7:ee:1d:51:cd:21:a0:93:58:6c:f7:
61:d7:fa:82:2a:1d:22:3f:47:35:f5:77:1c:d1:74:b7:6b:ff:
c3:dc:0e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:11:52 2026 by rpki-client