Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
File: sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json)
Hash identifier: CsevKClv6dkObgfdoqyEYkIx0bqdgjwGf66oaV4Wsvg=
Subject key identifier: 6D:5D:AF:95:EF:10:78:2B:53:BA:DE:99:B6:0F:3A:D0:D6:B0:75:20
Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Certificate serial: 019D389C6784E58E8B221717E8CD583A1EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
Manifest number: 0C21
Signing time: Sun 29 Mar 2026 08:01:07 +0000
Manifest this update: Sun 29 Mar 2026 08:01:07 +0000
Manifest next update: Mon 30 Mar 2026 08:01:07 +0000
Files and hashes: 1: _by7AscKsdigQ-BwL976HgZ5JQ8.roa (hash: wziiFvH1qv+pWQ/UztPiXiVxbkfYgEe33kjW55/pvyo=)
2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: EaZcJC6sVU+4Hu5r1BauayeGC1loEZL4d83WBUiI+bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:67:84:e5:8e:8b:22:17:17:e8:cd:58:3a:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Validity
Not Before: Mar 29 08:01:07 2026 GMT
Not After : Mar 30 08:01:07 2026 GMT
Subject: CN=6d5daf95ef10782b53bade99b60f3ad0d6b07520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:44:17:f4:51:d6:b5:ce:7f:ba:88:bd:49:
52:60:4f:c9:ab:bd:07:cb:1b:b7:84:ca:f6:41:2f:
da:7c:5f:dc:e4:53:19:8f:e1:aa:33:09:3b:19:c3:
3a:a3:25:eb:12:fa:0b:d3:25:66:6c:3b:72:08:94:
85:db:f9:fc:bb:a7:15:d5:05:65:75:b1:8f:ea:d6:
bf:ed:6a:50:78:fd:06:a8:9b:cb:29:fd:c0:40:7f:
2e:15:ed:80:65:90:f4:20:f3:00:37:32:b9:c5:93:
65:72:4f:fd:14:da:d0:bf:37:ab:93:98:f3:d4:c0:
86:2a:9e:8d:33:30:17:3b:ff:66:64:f6:96:4d:82:
44:d7:ad:4f:c7:2b:e1:7f:67:67:8a:7d:1d:e6:91:
b4:96:e8:4f:73:1d:44:ee:82:a8:54:46:b7:52:df:
89:2a:83:93:3a:59:b4:dd:ce:1e:8a:7a:4f:1d:51:
57:6a:07:47:bb:e7:99:23:90:19:33:58:a1:86:1d:
8e:62:47:d1:50:64:f7:47:c6:9a:e8:10:f4:2e:33:
a0:05:e6:8c:66:92:9b:c1:2a:7e:10:74:af:b0:ea:
b0:e2:15:9d:1e:05:39:63:fa:06:ec:00:e7:be:26:
05:73:b9:e3:9a:4d:8b:1a:d6:c7:d4:d6:f4:0f:60:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5D:AF:95:EF:10:78:2B:53:BA:DE:99:B6:0F:3A:D0:D6:B0:75:20
X509v3 Authority Key Identifier:
keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8d:3d:43:b9:e5:80:5d:ba:c9:3e:27:5f:a1:94:5e:30:dd:
62:a7:3d:1d:c8:24:d7:9d:15:2e:f5:be:d0:fc:e3:e3:1c:ce:
d5:2f:ca:8d:5b:74:c0:f7:30:05:7e:e8:55:7c:b5:f9:ef:45:
2f:14:27:67:c6:79:ae:3c:24:8f:06:28:b3:73:b4:c2:a5:62:
f7:25:17:8b:31:c1:52:10:0f:0c:a4:f2:3f:18:1a:de:a7:9a:
1d:1c:28:a1:06:20:a6:45:55:14:16:28:2e:55:28:30:c5:80:
22:70:29:4d:c6:3d:c4:54:b9:c5:5e:94:7f:df:19:46:7b:95:
75:09:2b:c3:fd:9c:62:ea:f0:70:63:8e:85:6e:7d:4d:24:92:
2f:ee:38:94:2f:61:89:2d:03:65:84:01:95:0a:ca:b2:8d:e0:
0b:61:cc:ff:a3:20:97:b3:24:b3:25:e0:85:f3:ac:58:88:7d:
25:5a:cf:95:71:1b:9b:de:f5:55:f3:10:a9:20:f8:42:17:1e:
1a:90:6e:34:ec:20:4b:c5:56:ef:58:8e:14:bd:3a:ac:fb:88:
e8:5c:87:18:1f:56:3c:7a:31:8c:74:41:d2:35:f9:87:63:1f:
5c:c6:11:99:cf:b1:f5:99:2a:9d:ff:c6:d5:e8:8d:68:b7:0b:
c6:12:6d:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nGeE5Y6LIhcX6M1YOh7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNjFiZDNjY2EzZDMzNjQ1YTI3NmUwZjMyMjRmZjg5ZWVl
NDQ4NTcwHhcNMjYwMzI5MDgwMTA3WhcNMjYwMzMwMDgwMTA3WjAzMTEwLwYDVQQD
Eyg2ZDVkYWY5NWVmMTA3ODJiNTNiYWRlOTliNjBmM2FkMGQ2YjA3NTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/REF/RR1rXOf7qIvUlSYE/Jq70H
yxu3hMr2QS/afF/c5FMZj+GqMwk7GcM6oyXrEvoL0yVmbDtyCJSF2/n8u6cV1QVl
dbGP6ta/7WpQeP0GqJvLKf3AQH8uFe2AZZD0IPMANzK5xZNlck/9FNrQvzerk5jz
1MCGKp6NMzAXO/9mZPaWTYJE161Pxyvhf2dnin0d5pG0luhPcx1E7oKoVEa3Ut+J
KoOTOlm03c4einpPHVFXagdHu+eZI5AZM1ihhh2OYkfRUGT3R8aa6BD0LjOgBeaM
ZpKbwSp+EHSvsOqw4hWdHgU5Y/oG7ADnviYFc7njmk2LGtbH1Nb0D2B0KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1dr5XvEHgrU7rembYPOtDWsHUgMB8GA1UdIwQY
MBaAFLBhvTzKPTNkWiduDzIk/4nu5EhXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEt
MzJmZGEzMTE4NmVmLzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEtMzJmZGEzMTE4NmVm
LzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADI09Q7nl
gF26yT4nX6GUXjDdYqc9Hcgk150VLvW+0Pzj4xzO1S/KjVt0wPcwBX7oVXy1+e9F
LxQnZ8Z5rjwkjwYos3O0wqVi9yUXizHBUhAPDKTyPxga3qeaHRwooQYgpkVVFBYo
LlUoMMWAInApTcY9xFS5xV6Uf98ZRnuVdQkrw/2cYurwcGOOhW59TSSSL+44lC9h
iS0DZYQBlQrKso3gC2HM/6Mgl7MksyXghfOsWIh9JVrPlXEbm971VfMQqSD4Qhce
GpBuNOwgS8VW71iOFL06rPuI6FyHGB9WPHoxjHRB0jX5h2MfXMYRmc+x9Zkqnf/G
1eiNaLcLxhJt9A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:08 2026 by rpki-client