Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
File: SGgL3la9O_VhV4oP4QjLwcanWds.mft (raw, json)
Hash identifier: ec74ocnz+Ip8gltqgZSi1qcuftIT/zIVWpxj9m6GqN0=
Subject key identifier: 75:D0:41:A8:19:B3:35:87:38:C9:A1:38:0C:89:3C:DF:26:AE:1A:05
Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Certificate serial: 019CAC0FE0219C8267A27E848536CA881552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
Manifest number: 0CC6
Signing time: Mon 02 Mar 2026 01:00:47 +0000
Manifest this update: Mon 02 Mar 2026 01:00:47 +0000
Manifest next update: Tue 03 Mar 2026 01:00:47 +0000
Files and hashes: 1: 2qKpe107wG5JVGZmhM-9ulhsBNk.roa (hash: YqAbcKnhc9tQvPIiqsxdd96YUAj8t/cCoA1qvpRjwZc=)
2: SGgL3la9O_VhV4oP4QjLwcanWds.crl (hash: 6FKyIxMOj2vKlZqcQbkAJ7+a2pixmk5Os+oVxf3tR64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e0:21:9c:82:67:a2:7e:84:85:36:ca:88:15:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Validity
Not Before: Mar 2 01:00:47 2026 GMT
Not After : Mar 3 01:00:47 2026 GMT
Subject: CN=75d041a819b3358738c9a1380c893cdf26ae1a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:1d:d5:40:1f:a2:c9:6d:9a:e6:bb:57:b1:
d5:d4:25:15:ab:40:15:b9:c9:23:ee:52:4e:f1:c8:
8e:ca:ea:fd:08:cc:f2:ca:de:18:1a:44:ef:b1:ed:
5d:37:bb:7c:6f:4d:84:60:1e:38:17:ba:c7:04:8e:
57:a3:09:b0:21:8e:d4:24:7a:cc:2f:5a:5a:98:da:
48:44:7a:49:7d:50:59:2f:d1:c2:92:b5:55:95:30:
8c:77:46:58:fe:3c:d7:2d:5f:3e:2e:ed:4c:6f:6e:
5d:8b:3a:d6:c3:c6:7f:1f:6c:cf:78:63:fd:d4:bb:
e5:ae:b7:7c:15:ed:34:36:d7:0f:23:9e:7b:ba:d7:
5b:4e:b8:a0:b9:15:37:94:91:7d:d3:dc:a3:28:b8:
19:e8:4e:7e:44:3f:4c:90:87:8e:8f:c3:39:54:fc:
e6:b3:44:cc:53:8e:92:98:90:06:c3:9b:6b:9a:e9:
67:ed:d1:79:7a:94:b5:67:94:b6:ae:36:1f:64:1b:
0d:55:7e:c8:f6:d3:cd:06:36:01:2c:79:f3:08:eb:
b7:e5:8c:ab:78:71:a7:ea:dd:4c:5f:98:ea:1a:5c:
22:4b:a2:0a:d2:c4:5d:b5:a2:20:13:18:fe:73:e8:
d1:db:35:da:fb:8c:86:06:dc:d4:bd:04:31:ff:0b:
cc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D0:41:A8:19:B3:35:87:38:C9:A1:38:0C:89:3C:DF:26:AE:1A:05
X509v3 Authority Key Identifier:
keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:52:3b:3b:13:47:84:b6:b3:5d:e3:04:5f:a5:78:b5:48:33:
9f:5c:95:ac:05:d3:5d:70:ba:4b:9c:3a:c1:b5:e5:43:6a:31:
68:f0:cd:b6:d1:33:45:80:61:57:f3:69:21:d6:de:53:21:9f:
76:69:6a:34:ea:bc:32:1e:f2:2d:df:4a:cf:8b:1f:76:0f:53:
f8:9c:23:5e:9e:84:7e:8c:e4:6b:8d:bf:8c:f2:31:90:db:20:
58:1a:02:3b:12:b9:9c:cf:18:d7:fe:42:f5:a1:5f:48:82:e9:
f1:18:45:b1:30:83:d1:79:16:77:e7:90:c3:b1:31:20:1f:22:
c3:21:b1:94:11:2a:cc:0e:cc:56:2a:d7:2f:8a:e0:19:0c:7b:
b5:0b:9b:c3:bd:93:fa:62:c0:83:4b:24:58:6d:bb:06:02:74:
ac:4b:72:89:dd:9c:18:df:c9:d0:11:b0:7d:3c:e4:29:57:ab:
b2:17:a8:80:3d:24:c3:2f:78:dd:dc:61:0d:b9:29:31:83:d7:
cc:5a:f6:a7:14:3f:db:01:9a:c9:d7:14:bc:77:07:47:da:8f:
71:ca:b2:7b:6e:8b:c5:27:46:88:15:cf:91:89:62:cb:86:50:
49:f6:61:31:69:7c:3b:b2:d0:f8:fe:6a:83:b4:b3:b1:6b:31:
82:87:c8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:16 2026 by rpki-client