Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
File: sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json)
Hash identifier: motABJ2XqMX+e73cEvcIt8FeS3aB8mLh6AnqLtFjvsc=
Subject key identifier: B2:BC:53:D4:87:32:95:C0:AA:9F:D1:24:18:39:12:49:3F:9E:2D:4A
Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Certificate serial: 019F1B68C95DC130B1CD4DA9070707730E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
Manifest number: 0D1B
Signing time: Wed 01 Jul 2026 02:01:19 +0000
Manifest this update: Wed 01 Jul 2026 02:01:19 +0000
Manifest next update: Thu 02 Jul 2026 02:01:19 +0000
Files and hashes: 1: _by7AscKsdigQ-BwL976HgZ5JQ8.roa (hash: wziiFvH1qv+pWQ/UztPiXiVxbkfYgEe33kjW55/pvyo=)
2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: rpNhgum2EeAyDL6xVJLWvWKXf9tXeEhi5G/4H79bgiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:68:c9:5d:c1:30:b1:cd:4d:a9:07:07:07:73:0e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Validity
Not Before: Jul 1 02:01:19 2026 GMT
Not After : Jul 2 02:01:19 2026 GMT
Subject: CN=b2bc53d4873295c0aa9fd124183912493f9e2d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:7f:d4:29:cf:5f:88:0d:a7:84:e8:6d:55:
51:f7:1e:16:6e:83:fb:83:f3:f4:87:1b:0f:a7:96:
44:17:17:ae:73:3f:d4:88:e9:73:08:9d:b9:5a:75:
cb:f1:b7:59:80:d6:6b:b4:c3:e0:a6:fd:60:79:1f:
3c:dc:0a:5e:34:82:4b:04:62:71:20:c0:75:f0:40:
93:53:5b:00:e6:d3:17:a5:0f:f2:f6:91:01:ef:93:
15:38:3c:92:93:5d:5e:72:ca:bc:a9:3d:57:c5:33:
36:40:1d:1d:8f:40:4e:be:1e:ed:79:9b:b5:d4:be:
0b:c6:9c:b1:27:0c:f3:71:c3:6d:61:4c:19:9c:fd:
8b:87:01:55:32:ca:27:e7:41:b7:2e:cb:6c:bb:cd:
ea:76:41:cb:78:be:c3:cc:3e:5e:38:14:c2:97:49:
d1:0c:ab:9f:ca:d0:64:61:6f:59:f0:af:c7:4a:13:
19:89:84:22:2e:9b:7a:25:97:84:46:da:84:0c:8b:
18:9e:a1:84:9b:52:0a:48:6f:59:9d:fa:bd:db:a0:
8c:bb:f4:0c:ab:5e:69:bd:10:1e:63:82:5b:74:ec:
b8:aa:7a:31:ef:8e:f1:df:f8:7a:79:5a:46:ec:30:
84:d2:04:d9:30:dc:23:bf:b5:a9:2c:38:62:69:2e:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BC:53:D4:87:32:95:C0:AA:9F:D1:24:18:39:12:49:3F:9E:2D:4A
X509v3 Authority Key Identifier:
keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0c:f1:0c:6f:8d:f9:bd:fb:2e:19:4a:42:12:89:70:94:55:
68:e7:4d:e5:0f:24:91:89:f4:53:37:b8:06:14:fd:f9:06:12:
05:a7:6d:6d:85:5f:a2:a6:d6:ff:99:51:bb:62:58:3d:92:07:
98:12:bd:be:97:4b:f4:7b:5d:fd:a0:df:ca:18:ba:7a:56:0f:
12:59:64:b7:3c:17:06:1e:4a:8d:53:b7:aa:8f:41:76:fd:17:
cb:4a:eb:8b:49:e7:02:9f:78:87:49:29:1f:fb:9a:b4:63:9c:
9d:ee:a9:4d:62:fd:0a:5a:3b:36:35:40:5f:ab:65:dc:ce:f2:
43:e0:e2:10:f1:05:98:f4:10:d7:06:44:b6:f2:f1:17:f5:e0:
b2:44:3f:d1:b4:05:f9:06:82:17:93:6a:a7:21:12:f8:c1:2b:
7f:75:c2:41:9c:a8:b7:05:22:02:3d:48:e0:eb:59:05:d8:cd:
75:4b:25:61:78:e9:45:bf:83:f5:0b:98:a5:28:56:a8:2c:4e:
3d:80:15:a2:dd:a0:04:98:6c:17:92:b8:42:e8:08:84:a5:58:
f6:c7:0f:b1:21:c8:e9:a1:87:5d:ea:23:4b:55:72:61:b2:54:
e0:d5:d3:f7:93:95:ad:92:ba:96:83:3d:ec:40:fd:7e:a5:f4:
94:39:a7:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8baMldwTCxzU2pBwcHcw5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNjFiZDNjY2EzZDMzNjQ1YTI3NmUwZjMyMjRmZjg5ZWVl
NDQ4NTcwHhcNMjYwNzAxMDIwMTE5WhcNMjYwNzAyMDIwMTE5WjAzMTEwLwYDVQQD
EyhiMmJjNTNkNDg3MzI5NWMwYWE5ZmQxMjQxODM5MTI0OTNmOWUyZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsJ/1CnPX4gNp4TobVVR9x4WboP7
g/P0hxsPp5ZEFxeucz/UiOlzCJ25WnXL8bdZgNZrtMPgpv1geR883ApeNIJLBGJx
IMB18ECTU1sA5tMXpQ/y9pEB75MVODySk11ecsq8qT1XxTM2QB0dj0BOvh7teZu1
1L4LxpyxJwzzccNtYUwZnP2LhwFVMson50G3Lstsu83qdkHLeL7DzD5eOBTCl0nR
DKufytBkYW9Z8K/HShMZiYQiLpt6JZeERtqEDIsYnqGEm1IKSG9Znfq926CMu/QM
q15pvRAeY4JbdOy4qnox747x3/h6eVpG7DCE0gTZMNwjv7WpLDhiaS5/fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLK8U9SHMpXAqp/RJBg5Ekk/ni1KMB8GA1UdIwQY
MBaAFLBhvTzKPTNkWiduDzIk/4nu5EhXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEt
MzJmZGEzMTE4NmVmLzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEtMzJmZGEzMTE4NmVm
LzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANAzxDG+N
+b37LhlKQhKJcJRVaOdN5Q8kkYn0Uze4BhT9+QYSBadtbYVfoqbW/5lRu2JYPZIH
mBK9vpdL9Htd/aDfyhi6elYPEllktzwXBh5KjVO3qo9Bdv0Xy0rri0nnAp94h0kp
H/uatGOcne6pTWL9Clo7NjVAX6tl3M7yQ+DiEPEFmPQQ1wZEtvLxF/XgskQ/0bQF
+QaCF5NqpyES+MErf3XCQZyotwUiAj1I4OtZBdjNdUslYXjpRb+D9QuYpShWqCxO
PYAVot2gBJhsF5K4QugIhKVY9scPsSHI6aGHXeojS1VyYbJU4NXT95OVrZK6loM9
7ED9fqX0lDmnTg==
-----END CERTIFICATE-----
Generated at Wed Jul 1 08:27:09 2026 by rpki-client