Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: ++Nt1Xk/Kpp8tmdnCTgslrniWIRXo2Qhd8CV02MkR7s=
Subject key identifier: 70:59:6C:89:FC:C9:EB:F9:D0:E6:7E:61:47:8C:0C:09:B5:3A:60:43
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 01A16F49EE299C3EA5130F69A6D5CCBD1ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 1AC3
Signing time: Sat 24 Oct 2026 19:01:18 +0000
Manifest this update: Sat 24 Oct 2026 19:01:18 +0000
Manifest next update: Sun 25 Oct 2026 19:01:18 +0000
Files and hashes: 1: IpvtiB3ivhePmqqAbbVhFnX59zM.roa (hash: nW14dlZ+CXYt/syhRcngrlG7SAwArRMiAFD3SIPI6y8=)
2: XHqGlYDi_YYXP4_bxjxB51I_9sQ.roa (hash: JyJR1xe42ML2605S9E5QIfVP6eKECWWSWZ+zCzoVYQE=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: KGx11LoJvJ31JkaK1nPVXAgSjY9G5nU/b1YzEpfqm3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 15:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:49:ee:29:9c:3e:a5:13:0f:69:a6:d5:cc:bd:1a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Oct 24 19:01:18 2026 GMT
Not After : Oct 25 19:01:18 2026 GMT
Subject: CN=70596c89fcc9ebf9d0e67e61478c0c09b53a6043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:bb:38:a7:61:5e:e0:09:4e:e3:67:c5:29:
13:dc:a0:0f:5c:54:0c:fc:81:77:52:56:f4:17:dd:
a7:91:65:dc:cb:b0:c4:12:bb:99:1a:03:49:ce:5c:
44:c6:dd:c1:d5:df:b3:61:65:ac:9c:e7:8c:c5:bf:
e1:2c:e6:c3:41:09:ee:4a:ac:72:76:ef:37:44:7e:
34:25:07:92:da:f0:22:9f:aa:77:01:01:71:50:51:
a5:7e:c2:63:62:52:67:d5:cb:3b:e3:d7:7f:d8:a4:
5d:11:38:2d:d4:2f:c9:f0:13:52:42:ac:e4:b0:cf:
b1:95:fe:c5:12:41:7f:4f:9a:2c:32:a7:c6:b5:54:
f2:56:e4:3c:08:b5:0c:39:c2:cd:05:f7:75:d3:32:
14:3c:2c:c2:79:8d:ec:38:70:6b:da:d0:35:c9:7f:
e0:af:2b:3b:e1:55:86:16:dc:ef:94:b8:59:ee:1d:
5a:21:19:1c:dd:04:69:01:41:65:15:d9:60:c4:90:
6b:f9:25:7f:30:78:1d:0e:63:22:e3:44:b6:93:17:
cc:b4:e4:2f:16:32:95:b5:a0:8f:f7:fb:e6:56:25:
ef:f0:40:1c:08:13:4d:9e:a2:9c:fa:95:bd:59:2e:
6a:b3:37:62:be:71:01:cb:69:bf:c3:0d:67:39:73:
da:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:59:6C:89:FC:C9:EB:F9:D0:E6:7E:61:47:8C:0C:09:B5:3A:60:43
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:12:e5:fa:7e:95:d3:a5:db:3a:c6:b0:0b:69:fa:07:f3:e3:
59:b8:48:9a:41:5d:bf:41:fd:6e:30:46:f7:16:21:8f:89:2f:
f1:16:84:c9:84:81:be:da:68:60:da:2c:d0:f3:53:aa:d2:c3:
a2:20:50:b0:b6:46:ef:89:3f:e1:c1:dd:6c:40:40:86:be:0a:
90:a8:3c:01:df:c0:8b:6d:ca:59:53:2e:45:67:53:f2:90:0c:
20:84:0a:07:9b:a8:3c:53:f8:3e:78:60:08:1d:c0:0d:6f:6f:
ad:1a:cf:7a:53:3b:af:df:0a:51:7e:69:95:98:53:5f:f0:f7:
b0:c5:e4:1a:71:ec:b3:20:c7:bd:2e:32:78:e4:85:57:09:a9:
77:53:5d:27:01:a4:0a:80:56:fe:66:84:ef:2a:4f:17:05:34:
ad:7a:33:3b:12:57:72:02:6d:d3:16:46:a3:86:b9:0d:b4:ec:
36:5d:f3:f6:ef:b3:5c:92:e4:1d:6f:12:90:3d:d8:96:c3:2d:
a7:37:4c:b4:1f:c3:45:63:8c:60:48:e0:4f:b7:e4:46:b5:b2:
0c:fa:cb:08:58:45:f1:df:0b:6e:06:e2:a9:16:7b:f2:7e:8c:
36:5e:c9:60:a3:67:06:31:8e:91:10:34:5e:1b:ed:82:c3:ba:
ac:66:ff:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:39:34 2026 by rpki-client