Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
File: SGgL3la9O_VhV4oP4QjLwcanWds.mft (raw, json)
Hash identifier: Johi8Qz3yc6PSJvg1OYJnohflZTHrrGPXCkCvenhCDE=
Subject key identifier: 53:A3:CA:8E:CE:9A:A8:39:13:CB:38:18:B7:F8:B1:30:99:26:7F:BD
Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Certificate serial: 019D9B882DA98163FA99F10D9670A6109B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
Manifest number: 0D42
Signing time: Fri 17 Apr 2026 13:01:25 +0000
Manifest this update: Fri 17 Apr 2026 13:01:25 +0000
Manifest next update: Sat 18 Apr 2026 13:01:25 +0000
Files and hashes: 1: 2qKpe107wG5JVGZmhM-9ulhsBNk.roa (hash: YqAbcKnhc9tQvPIiqsxdd96YUAj8t/cCoA1qvpRjwZc=)
2: SGgL3la9O_VhV4oP4QjLwcanWds.crl (hash: 81j5tPSTTUHMNcT41lG0tusjiSxPsfQNdUQ89yOfcrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:88:2d:a9:81:63:fa:99:f1:0d:96:70:a6:10:9b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Validity
Not Before: Apr 17 13:01:25 2026 GMT
Not After : Apr 18 13:01:25 2026 GMT
Subject: CN=53a3ca8ece9aa83913cb3818b7f8b13099267fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:26:8e:f6:3d:2c:be:d1:85:01:60:5f:d1:
1a:7e:fd:59:fb:18:d3:3e:4f:07:36:1b:a2:5c:9d:
86:de:0c:06:d6:da:d1:51:c7:d1:19:2f:5b:a3:40:
d1:15:5e:1b:21:c2:18:88:0d:f0:72:87:29:e2:94:
a9:e2:ce:79:de:12:8c:fa:e5:78:8f:fd:ac:b4:9b:
02:64:ba:f4:8e:0f:33:1d:a9:14:1f:61:d1:67:f7:
a8:73:a8:95:e1:ba:dd:47:f4:6e:be:4d:fa:24:46:
67:7e:f1:be:4e:00:d3:ab:66:7c:99:a0:e8:20:93:
7f:9e:35:e5:be:10:1f:10:bb:b8:7d:0c:ce:cf:7f:
37:aa:74:df:91:b3:d2:c5:1f:c7:2e:88:e7:43:1e:
1f:a3:6d:91:5c:a9:e5:2e:44:93:f4:53:be:2e:45:
d1:b0:a0:35:0f:39:7e:c7:af:ed:9a:dd:ad:43:be:
73:7e:9c:ae:32:83:22:e6:ec:7f:b2:a2:43:58:06:
5c:54:f3:fe:a7:6b:3d:ea:a1:02:11:f3:b0:db:61:
87:ad:37:54:6c:88:af:e1:77:a1:cc:2c:1d:74:74:
a2:3b:5d:a8:d8:05:2d:b1:c9:09:9a:69:bb:36:e3:
b1:13:e0:41:45:bb:e2:21:5d:8d:60:03:8c:0f:5a:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A3:CA:8E:CE:9A:A8:39:13:CB:38:18:B7:F8:B1:30:99:26:7F:BD
X509v3 Authority Key Identifier:
keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b4:f7:60:43:0d:98:66:98:ca:e7:13:04:91:74:ea:d4:29:
f4:a2:95:2e:c3:44:a1:c4:b8:75:c5:a8:31:42:79:5d:ae:b3:
b7:a6:f1:46:e0:d0:3e:6b:35:9a:75:82:e5:9f:3d:27:03:74:
11:f8:f4:19:de:64:80:98:17:18:21:14:a3:46:9a:d4:c5:61:
22:92:81:93:2f:c7:17:48:ae:4c:3b:f6:19:b8:be:b5:1a:1f:
62:03:2a:f1:1b:6b:cf:b7:05:78:27:f8:56:88:59:61:28:b6:
3f:90:b9:2f:98:83:4e:98:5d:ee:b7:b5:a8:6f:8e:c6:d3:44:
71:8e:d4:92:ae:f3:22:0d:c7:52:e3:b6:bd:5a:a1:1b:74:18:
a1:ce:0d:84:aa:8b:43:cc:ab:63:3d:7e:f6:39:10:0e:bb:98:
f0:6c:b5:ff:32:ec:9c:be:00:74:d3:99:c5:13:87:04:be:90:
ec:d8:0a:17:e3:ef:08:4a:8d:c6:fa:16:7b:44:7c:51:8d:5d:
94:8e:dc:80:ee:19:e1:04:00:76:06:2d:a5:9e:6c:01:41:09:
cf:b7:b7:27:e2:cf:a1:a5:b5:1c:a4:c1:f8:6c:cd:63:1c:d9:
4c:f4:65:49:c9:0c:90:a8:7b:47:e1:95:f0:89:1c:04:70:e0:
6c:f5:39:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:49:25 2026 by rpki-client