Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: KRTLAXSGa6ZYwpwx0ndOACmqAzYIygqpquTckcrehQI=
Subject key identifier: 5B:ED:07:C9:4B:38:0C:44:81:89:E0:7E:82:15:5B:A4:21:FF:B7:56
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 01A06E7043CD0F0E2A26767D94043BEF30B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 1A3E
Signing time: Fri 04 Sep 2026 22:00:46 +0000
Manifest this update: Fri 04 Sep 2026 22:00:46 +0000
Manifest next update: Sat 05 Sep 2026 22:00:46 +0000
Files and hashes: 1: IpvtiB3ivhePmqqAbbVhFnX59zM.roa (hash: nW14dlZ+CXYt/syhRcngrlG7SAwArRMiAFD3SIPI6y8=)
2: XHqGlYDi_YYXP4_bxjxB51I_9sQ.roa (hash: JyJR1xe42ML2605S9E5QIfVP6eKECWWSWZ+zCzoVYQE=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: M5TumoiP594JWJUNN5XGU4p7hF9duIYcKs1uo99+Fjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:43:cd:0f:0e:2a:26:76:7d:94:04:3b:ef:30:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Sep 4 22:00:46 2026 GMT
Not After : Sep 5 22:00:46 2026 GMT
Subject: CN=5bed07c94b380c448189e07e82155ba421ffb756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:ba:c4:6d:92:53:79:2f:fe:aa:c6:25:7f:
97:46:e6:a6:8c:bd:d1:3a:a4:37:c1:a5:2a:ee:63:
b3:a8:52:1a:7b:83:63:2b:a5:4f:f6:19:c7:23:02:
82:76:ab:10:a6:62:9d:7a:d6:77:ed:b7:5a:49:55:
ba:96:35:36:26:7c:33:1d:2a:50:aa:4a:55:82:d0:
87:c0:e5:af:70:c5:4a:88:f0:32:cc:a3:3c:a5:ea:
2c:78:0e:e8:5e:d6:fb:b5:f1:11:a7:ff:f4:37:77:
3d:f9:d3:b0:ef:3e:0e:4b:fc:94:22:20:62:93:f6:
74:43:80:cd:88:95:13:39:2d:1d:50:2a:f2:6e:65:
10:fd:94:c4:10:66:f4:c0:87:9d:3a:be:b6:f1:55:
ac:c7:3f:24:3a:1f:d1:ce:fc:9c:40:b2:ec:8f:ed:
fb:15:89:48:ae:4d:dd:19:a5:33:51:fa:6f:b1:ce:
7e:06:8c:c0:9f:b6:50:49:ff:90:b0:98:2c:82:3c:
7b:f2:85:67:cd:28:5f:f5:7b:23:f8:be:cb:55:ba:
4f:64:46:55:df:dc:b4:35:43:3f:1b:83:89:24:76:
05:04:78:78:8c:65:da:6b:80:f8:b8:9f:0f:2d:59:
2f:75:be:ed:ea:06:f0:0a:e4:d8:94:bc:d7:f0:f8:
4c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:ED:07:C9:4B:38:0C:44:81:89:E0:7E:82:15:5B:A4:21:FF:B7:56
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a1:1e:5a:6f:e8:51:01:23:54:91:54:fe:cc:ee:c1:f7:c9:
78:ff:e4:6b:bd:c9:a4:94:e9:28:be:0c:db:38:85:fb:bc:69:
d6:d6:33:48:d7:0a:28:5c:2d:e4:e2:c6:4d:ed:08:87:ff:c8:
79:b3:13:5c:c7:39:31:4c:07:06:67:bd:2e:6d:44:2e:a9:39:
20:fa:ce:2c:58:ee:73:cb:ed:0e:e9:19:20:d2:f8:fd:be:a5:
7e:17:ae:87:b3:0c:75:34:7a:88:8a:05:51:3c:07:e0:a4:b3:
24:0d:47:1a:dd:ac:5a:fd:73:39:2f:7e:13:f7:ef:2b:f1:a0:
ff:b0:1a:53:80:8d:3f:e8:55:b9:82:a9:2f:d7:9e:33:86:83:
37:2a:4b:7f:ab:ae:4e:90:4b:0c:d1:43:f6:f8:6c:0e:8c:ed:
8a:83:27:66:2e:ac:e9:c9:05:a9:b9:e9:0d:f4:07:18:dc:1f:
11:aa:cd:50:29:48:31:c9:a7:00:b2:98:b9:27:e6:53:75:4e:
31:19:6a:4e:0d:3e:8e:cf:42:20:d0:c3:a3:4b:06:85:1c:7c:
48:ab:d6:55:52:56:56:4c:3d:27:b6:16:77:dd:ee:78:f6:9d:
43:41:7a:d2:99:8b:ab:51:3b:26:60:30:24:bc:6f:25:f2:cc:
8d:9a:0c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:33:55 2026 by rpki-client