Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: 1O4uCY1LWaudo0/bXoqyiHPkymw3wQGrLr3oiQMx7F0=
Subject key identifier: 53:F8:39:DB:42:EA:C4:F5:6F:9B:A8:A9:56:D7:EF:49:89:67:B5:48
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 019F86B1AB2D0F68B67C3BFEA16A2B2AE9A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 19C6
Signing time: Tue 21 Jul 2026 22:00:18 +0000
Manifest this update: Tue 21 Jul 2026 22:00:18 +0000
Manifest next update: Wed 22 Jul 2026 22:00:18 +0000
Files and hashes: 1: IpvtiB3ivhePmqqAbbVhFnX59zM.roa (hash: nW14dlZ+CXYt/syhRcngrlG7SAwArRMiAFD3SIPI6y8=)
2: XHqGlYDi_YYXP4_bxjxB51I_9sQ.roa (hash: JyJR1xe42ML2605S9E5QIfVP6eKECWWSWZ+zCzoVYQE=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: YnUwN3/XmP0h6YoUBWIpT7tiIbSSERzfj6yrPQBciFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b1:ab:2d:0f:68:b6:7c:3b:fe:a1:6a:2b:2a:e9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Jul 21 22:00:18 2026 GMT
Not After : Jul 22 22:00:18 2026 GMT
Subject: CN=53f839db42eac4f56f9ba8a956d7ef498967b548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:e9:bf:96:9f:08:95:85:a2:f3:5a:66:ef:
6d:d4:01:43:05:85:cb:13:48:11:63:4b:0f:31:0b:
31:83:40:e3:4f:7f:34:51:8c:ef:dd:68:c0:ed:9f:
9c:9f:cd:dd:76:d0:38:60:6f:91:07:3d:0c:aa:50:
30:f0:64:bf:45:7c:79:3a:2e:53:55:bf:17:f9:4e:
e1:2c:43:33:15:9a:9a:3c:3c:b9:a8:61:4f:25:8f:
23:7f:d6:17:94:ee:88:58:e4:27:66:05:97:85:b6:
d7:e5:d4:e2:35:0b:82:6c:3f:66:e6:14:14:06:7c:
a6:d5:41:2a:28:93:8a:a4:9a:71:3a:27:6b:0b:8c:
9a:80:09:5c:e1:2e:34:b5:1c:09:93:af:2a:ba:bc:
86:9f:59:bd:e3:76:3d:83:11:f2:6b:f3:ab:42:13:
48:1c:69:52:64:7f:46:ec:2a:7f:d8:be:0d:43:26:
1b:ca:18:41:51:c6:23:9f:8c:81:88:ee:0f:27:11:
c9:d3:a9:84:89:8f:fa:ba:52:94:28:b2:d2:30:8c:
1d:37:c9:1e:24:d4:ab:25:12:c4:8c:53:f2:a0:91:
b5:97:39:84:7b:cb:69:28:cf:f8:fe:5e:f8:d4:dc:
ad:87:fd:b2:5c:0a:84:67:25:f6:6a:0b:ef:cf:50:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F8:39:DB:42:EA:C4:F5:6F:9B:A8:A9:56:D7:EF:49:89:67:B5:48
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:d7:9c:2b:64:12:4e:04:97:a5:17:a4:48:8e:76:b6:b7:e6:
f2:63:38:ca:fd:51:88:4b:8d:38:72:d9:69:de:8c:dd:97:61:
35:47:79:89:66:d0:a8:dc:af:aa:ec:0a:50:30:f7:f7:4c:b8:
eb:10:ac:4f:ca:7c:9f:35:39:f6:9c:e1:95:a1:f8:6f:ab:0d:
de:83:98:5b:e6:4e:cc:90:c9:09:81:7d:f1:9b:9f:80:37:7d:
6c:4d:09:28:56:1d:ef:9c:be:db:e4:1e:1a:b2:7c:2c:18:31:
15:90:0d:84:69:8d:bb:91:bb:f9:61:0f:cf:ac:5f:7b:9b:f5:
a4:86:68:42:e9:e6:af:64:c9:2c:aa:f2:b6:5e:9d:7d:e8:ce:
62:9d:20:22:47:02:1e:e9:50:27:37:89:6c:1c:d9:88:09:00:
42:9a:0f:55:b0:2b:fc:90:d6:01:bb:78:ae:72:a6:c4:c2:71:
be:6c:99:20:63:eb:33:b1:41:ea:60:d4:ac:3c:7f:ea:2a:8b:
30:a4:66:6f:22:bf:da:a2:9d:a0:dd:44:06:56:46:b2:d7:97:
e7:bf:f4:9a:c7:27:15:fe:19:72:01:3b:0f:a9:e6:a7:12:91:
1e:1d:fb:1f:ae:e9:b6:aa:01:63:88:8f:74:6e:a9:04:71:c2:
1d:67:bc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:04:54 2026 by rpki-client