Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
File: SGUQoxFpcvztleiova_W5FXe0Lo.mft (raw, json)
Hash identifier: lZViE+D6fP82WB6AFOoJTErvTAV5KG4V9f03gVHRGqQ=
Subject key identifier: B7:22:0E:A7:43:3F:34:D1:32:D6:E3:2D:01:5D:C0:9F:95:0D:26:25
Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
Certificate issuer: /CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Certificate serial: 019FAB2C808A9A567C6B3077319462436700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 00:00:48 +0000
Manifest this update: Wed 29 Jul 2026 00:00:48 +0000
Manifest next update: Thu 30 Jul 2026 00:00:48 +0000
Files and hashes: 1: 1-_tolY0Ku6cjK7uWuGIDT-aOsUM.roa (hash: zHmw/JUfBT58tzI52qKI6ZXBHiMslg81gZfcAbrW9BY=)
2: 1cDQdypkn0cjo9FfkDhM0paatNY.roa (hash: +ByPIkalEzr2Rwt/bFmRxra3ZwfCDb/OP1YXhCyI2zk=)
3: SGUQoxFpcvztleiova_W5FXe0Lo.crl (hash: YRVMlVQilB4a1EIB5JmrouFu0F2pH4WqDjEJKzWR6aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:80:8a:9a:56:7c:6b:30:77:31:94:62:43:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Validity
Not Before: Jul 29 00:00:48 2026 GMT
Not After : Jul 30 00:00:48 2026 GMT
Subject: CN=b7220ea7433f34d132d6e32d015dc09f950d2625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:3c:d9:67:91:e0:4d:3c:ee:19:28:4e:bf:
8e:32:4c:35:bd:69:1d:c7:22:d2:a6:32:1b:ee:c3:
c1:ce:09:61:59:98:d6:f4:65:c7:1f:20:91:35:58:
d7:67:99:86:67:c6:aa:26:60:39:7b:c6:22:66:7d:
58:71:60:5d:b5:f5:0c:e6:01:90:b9:f7:68:e4:b8:
ee:8e:dd:d0:e0:e5:0c:64:8e:1f:d2:eb:c8:23:e4:
40:42:32:a3:fd:fc:b3:7d:df:35:7e:d6:2e:9a:8d:
90:e4:8f:f3:e7:63:4b:16:2c:46:1f:c8:6a:ef:c1:
05:2a:23:da:eb:d3:a6:97:a0:9b:34:51:f4:99:63:
a3:92:9b:af:f4:9e:db:0e:5d:03:28:bd:d9:a3:40:
75:fc:a1:2b:dc:75:9f:c3:5d:7c:bb:f1:2b:5b:6f:
96:1b:53:6d:79:a6:e8:fb:74:fa:25:6f:a8:f7:ec:
22:00:ae:df:cc:f9:11:1e:26:f2:42:c4:70:06:f5:
a5:44:55:a3:8c:04:c6:cd:a1:27:65:ea:a0:ec:4c:
24:e7:e5:3d:df:e5:d2:cf:dc:7b:ed:74:99:ff:2c:
bf:ce:24:66:36:5b:e2:09:93:b8:dc:2f:4d:55:d3:
4b:a8:9f:ba:c7:9b:b9:27:da:44:34:2e:5b:b0:5f:
70:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:22:0E:A7:43:3F:34:D1:32:D6:E3:2D:01:5D:C0:9F:95:0D:26:25
X509v3 Authority Key Identifier:
keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f5:82:ce:4e:b0:be:c4:07:9c:17:81:c0:7a:2b:f3:07:b4:
8e:5a:72:06:6f:bb:00:94:6b:97:ce:7b:11:38:c7:77:12:4f:
ef:41:5f:96:88:0e:66:de:67:b8:25:18:42:04:96:d6:f1:92:
dc:2b:39:1b:56:eb:5a:dd:03:24:fb:0b:99:f3:45:b7:cc:f8:
d8:14:de:38:95:cc:f5:65:a8:18:19:2b:59:94:db:b0:e8:41:
2e:05:4f:54:56:10:6c:45:b2:a3:43:f9:00:60:48:90:8f:90:
4d:dd:98:4a:dc:89:7d:36:70:5e:4d:41:26:40:b7:0b:dd:52:
46:a3:b4:45:91:29:06:9f:f4:d7:95:a6:66:7a:b7:34:32:7c:
ca:97:ef:ca:20:2e:b2:30:38:70:6c:b7:ad:24:a2:7e:b6:95:
82:22:d1:2e:ed:dc:2b:79:a9:59:2f:28:fb:fd:0f:a4:e3:c1:
77:48:86:fe:4d:7f:ba:74:3f:97:69:45:c9:fa:c3:1a:c6:65:
66:94:4e:e9:cc:b8:d1:9e:dc:35:4d:b3:db:6b:04:80:55:64:
16:c6:af:52:70:a4:e7:56:a6:ee:9c:43:6f:b6:9b:89:e2:69:
70:9f:e7:cb:94:aa:16:1d:5c:72:09:b1:99:92:f1:47:95:e5:
69:d0:7c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:25:22 2026 by rpki-client