Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: M/SUHkfKh1v9tcgieDfXanq4xFOf4XMl1UW+9F6JlhQ=
Subject key identifier: 4C:33:E2:4A:92:8C:8C:08:6E:61:DF:3F:7B:68:57:28:0C:5B:22:DE
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 019E9B16F2FF2357D571936501177AC74900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 194C
Signing time: Sat 06 Jun 2026 04:00:32 +0000
Manifest this update: Sat 06 Jun 2026 04:00:32 +0000
Manifest next update: Sun 07 Jun 2026 04:00:32 +0000
Files and hashes: 1: IpvtiB3ivhePmqqAbbVhFnX59zM.roa (hash: nW14dlZ+CXYt/syhRcngrlG7SAwArRMiAFD3SIPI6y8=)
2: XHqGlYDi_YYXP4_bxjxB51I_9sQ.roa (hash: JyJR1xe42ML2605S9E5QIfVP6eKECWWSWZ+zCzoVYQE=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: Eu8ulMtuaynnJ4i7xiP6vupHvS8ISc/4ZjXoZAUAsM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:16:f2:ff:23:57:d5:71:93:65:01:17:7a:c7:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Jun 6 04:00:32 2026 GMT
Not After : Jun 7 04:00:32 2026 GMT
Subject: CN=4c33e24a928c8c086e61df3f7b6857280c5b22de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:e3:d0:61:24:13:f1:a3:0a:54:a1:07:2d:
53:c9:ff:68:cc:17:5d:cb:55:4f:0d:10:e5:7a:cc:
00:65:24:e0:51:ec:8a:ab:bb:1d:e6:ba:7a:fb:0f:
84:9f:c8:7f:3d:2e:0f:88:ab:79:8d:e9:77:58:e1:
4b:c8:bb:86:78:fa:de:1e:00:7b:08:4f:eb:59:0d:
17:73:66:2e:36:32:7a:14:7f:fe:30:8d:70:7c:d5:
a1:3a:f6:a2:95:e6:de:bc:03:00:ea:75:b3:0a:93:
79:50:bd:6f:eb:b6:96:9c:42:9e:62:51:65:5c:30:
0e:a9:c7:61:f4:10:1b:a7:52:b9:f5:bc:35:59:81:
9c:7e:58:ea:f8:44:51:de:80:a4:e8:77:92:2a:2a:
36:ec:05:39:00:df:4b:99:c4:47:67:ff:45:9f:5c:
44:25:bf:ee:39:14:cc:f5:bc:4b:da:a2:5e:e4:53:
7f:af:99:6a:ba:00:1c:e9:b2:91:34:5c:e8:68:87:
a6:9c:ae:e1:8f:17:ee:1d:89:a5:ee:5c:93:8f:ad:
a2:ba:58:02:27:12:23:50:a0:aa:38:d4:e2:a1:44:
a7:da:f0:57:ad:3c:d8:e2:48:7b:f8:43:f1:56:39:
ea:7e:ad:21:b1:01:2e:4f:3e:3b:0c:5f:28:cf:dc:
49:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:33:E2:4A:92:8C:8C:08:6E:61:DF:3F:7B:68:57:28:0C:5B:22:DE
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ac:38:8e:59:03:05:e4:94:10:e1:9f:13:41:73:99:2e:c5:
ac:e5:03:eb:75:42:3b:93:c5:27:a4:b6:79:0a:78:1b:17:44:
64:27:cd:80:c7:df:75:a6:9d:52:0e:d9:9d:82:f8:63:7f:bd:
fe:95:b3:ea:84:48:7f:4e:3f:49:d7:a2:9b:bd:45:29:da:0c:
0c:f8:ce:a7:03:13:24:85:93:97:92:c9:92:31:4e:3c:05:f2:
7c:e6:f1:7a:c4:39:31:56:82:f7:7a:95:62:1d:33:6e:c4:0c:
4d:55:ba:44:8f:b7:e3:20:e7:67:e0:39:f6:d9:af:34:8a:9f:
e2:c7:0b:29:ad:9f:b4:14:6a:db:d9:03:4f:3c:d3:0a:b9:45:
0a:fb:61:e4:f6:94:63:92:03:53:22:c0:83:e2:89:f3:bd:39:
3d:89:ca:6e:9d:a1:9b:86:7f:31:16:dc:cc:64:51:19:23:49:
e0:b5:e7:0c:12:56:bc:e8:72:d8:41:a8:04:08:a3:be:0d:63:
12:57:1c:37:29:de:f4:0e:d3:cd:d8:81:23:8a:b6:73:04:80:
48:ef:9f:05:dc:30:c5:1d:6d:1d:e7:19:24:e9:bd:cf:35:74:
66:b5:f9:50:97:0d:70:5f:ae:5f:7e:06:63:68:e0:e6:c4:52:
fb:57:2f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:04 2026 by rpki-client