Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier: b1Ytes1ZglDaSv87jjSO2zOfQINbSetNvqz5H9F92TA=
Subject key identifier: A9:26:8A:B7:17:8E:CF:A1:18:05:48:2C:64:D3:AF:C4:7E:9F:35:42
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 019FA89A325D3A868D813E1195F555655CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 12:01:45 +0000
Manifest this update: Tue 28 Jul 2026 12:01:45 +0000
Manifest next update: Wed 29 Jul 2026 12:01:45 +0000
Files and hashes: 1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: afPd8ztDAsGMoPeqeMTitcGeeKtxSDnz4g+F8An8mK8=)
2: i7JFrF70bzBo-gwwIdRO8VszDSY.roa (hash: tGNZRPLTTkwJbCKJRv1gdNJVG7D13l/23dduFfdxkF8=)
3: j-RqQ-Jv6xwxZVAttzs0WSOfmLc.roa (hash: 8oVyr5bD2ep8rJ+/mCDqgEEEeQzSBWCENnyJGHUEE6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:32:5d:3a:86:8d:81:3e:11:95:f5:55:65:5c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: Jul 28 12:01:45 2026 GMT
Not After : Jul 29 12:01:45 2026 GMT
Subject: CN=a9268ab7178ecfa11805482c64d3afc47e9f3542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:03:d1:1f:35:4a:65:e8:81:48:19:bb:b0:
05:49:7e:05:1f:94:d5:bf:af:98:72:14:77:04:b9:
e8:be:2d:7f:ad:1b:99:e4:2a:97:21:31:a8:0b:d7:
3b:65:e2:a3:25:e5:41:27:6c:ee:25:ec:92:c3:9f:
fa:80:eb:0a:e3:4f:3c:cf:9d:18:b0:a3:4c:f0:77:
58:bc:46:74:7c:9c:91:91:f5:38:d3:ff:ca:c1:15:
39:4c:68:98:95:ed:19:23:45:a1:11:78:f8:04:40:
b0:a8:49:7d:07:d2:99:8e:61:1a:65:c4:a7:42:73:
06:a9:8d:ed:d3:41:72:b1:f2:e4:27:40:97:f1:c5:
06:60:94:2d:9f:3a:31:d4:4b:c9:31:e6:0b:5b:66:
31:a0:9e:ca:82:c1:d1:02:9b:11:07:45:f7:29:22:
4a:14:95:51:f1:7f:e2:3f:54:df:aa:cb:89:c3:02:
22:e0:66:12:fe:52:4a:d4:b9:b8:ca:5e:cf:f3:e9:
53:9f:d7:ac:d8:ff:07:0e:d1:8b:8a:68:b5:1b:59:
e9:3f:79:76:41:09:e6:cc:0c:d4:51:89:59:f2:73:
9a:e7:7f:d8:ff:ee:a6:15:9d:a6:f7:ad:28:ba:41:
c0:f9:81:a5:7b:d0:f2:de:e7:47:9d:ff:bc:43:05:
df:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:26:8A:B7:17:8E:CF:A1:18:05:48:2C:64:D3:AF:C4:7E:9F:35:42
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:02:5b:2d:41:7c:d6:74:5c:de:16:cc:71:35:60:b2:a8:5a:
dc:ad:4f:04:4e:dd:90:ff:e5:bd:23:80:b7:6b:b0:25:f7:b8:
8a:b0:91:be:23:6f:5e:94:ee:25:fc:f8:60:98:09:20:22:8f:
fb:fb:8b:93:51:ed:5e:6b:7d:18:17:5c:66:e1:0f:f7:be:76:
5b:2a:2e:00:f9:81:99:80:74:f6:56:4e:55:19:13:8f:e9:8e:
b5:51:cb:5d:d6:eb:bb:13:3c:31:0b:1f:03:55:51:c6:99:9b:
50:cd:36:dc:69:ea:c7:d6:18:e7:23:69:79:32:01:5f:5f:5a:
0b:75:42:9e:0f:f3:67:6c:ee:58:2d:9d:67:8b:b5:f2:a2:7e:
90:de:4f:4d:d4:42:d3:43:a2:4b:8a:f7:dd:6b:f9:bc:b8:e3:
42:09:77:95:95:7f:f3:53:40:91:49:ed:53:e6:f7:6d:f7:60:
ef:17:80:50:f8:e2:ee:66:51:1d:ee:a9:35:7e:20:a3:99:2f:
e6:5c:d7:54:31:fe:9f:fe:94:fa:61:5c:36:ff:9b:21:f7:f4:
12:c9:bb:48:0f:de:58:c3:37:e5:94:c4:28:96:28:82:a1:05:
66:cb:11:55:e7:d7:42:e6:91:3a:e8:95:fa:93:c3:95:fc:c9:
f3:bc:f2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:55 2026 by rpki-client