Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
File: sgWR5euUhCdKdKyC_muRDivLE5k.mft (raw, json)
Hash identifier: v/Zc16wFVIoi+oBinwnog8FHrHdA3A48RhUj7MLge2s=
Subject key identifier: E9:22:EF:8F:F6:8C:3B:BD:D1:23:95:E4:15:E8:AA:C7:BA:4F:1B:8E
Authority key identifier: B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
Certificate issuer: /CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Certificate serial: 019EFBA8EAD1E64DBCFA245548FFB8E440C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
Manifest number: D6
Signing time: Wed 24 Jun 2026 22:03:31 +0000
Manifest this update: Wed 24 Jun 2026 22:03:31 +0000
Manifest next update: Thu 25 Jun 2026 22:03:31 +0000
Files and hashes: 1: YNiESc72RDLIiWhCHsXSi1o9cLE.asa (hash: l71vJ2s8lHSefHy7yMSFsWXnMilHTDdYBPtW2A9TX3g=)
2: sgWR5euUhCdKdKyC_muRDivLE5k.crl (hash: qvqodAdEs/AG4vAKSSpTthcOhtBgEsQCUZ4VNdlxT/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 22:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:a8:ea:d1:e6:4d:bc:fa:24:55:48:ff:b8:e4:40:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Validity
Not Before: Jun 24 22:03:31 2026 GMT
Not After : Jun 25 22:03:31 2026 GMT
Subject: CN=e922ef8ff68c3bbdd12395e415e8aac7ba4f1b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:22:74:5e:47:dd:d4:38:5a:7f:fc:ff:42:
03:8e:02:48:d1:88:3d:01:a7:5f:b0:0b:b2:43:fe:
42:81:84:7e:f1:69:33:09:d6:0d:5e:ae:b8:67:80:
cf:46:5b:1d:79:1e:f4:3b:28:67:14:97:d1:60:eb:
8c:16:4b:89:0e:e8:77:c1:4c:79:8d:c5:40:63:e8:
a9:c4:de:53:ef:99:06:c4:52:13:23:f5:90:e8:11:
f0:51:a8:0b:29:8a:d5:4f:95:05:c5:3d:4f:84:48:
22:f0:ca:c2:0c:9a:37:31:59:b5:5e:a6:b6:c9:ae:
92:55:95:1f:9f:ae:09:4a:15:d9:ae:3e:ca:2b:83:
ac:81:e7:78:28:fd:9c:6c:6c:1d:12:fe:42:8c:9c:
c5:b3:4d:4e:32:62:c3:96:1e:92:10:e2:36:00:5f:
c9:1b:3b:30:77:d9:a6:a9:6b:58:e3:42:9c:26:27:
4d:7c:f1:cf:72:35:bf:24:6b:9f:65:53:14:fe:e2:
9a:07:e5:6f:f7:32:36:1d:50:fd:23:f7:f4:2f:38:
20:90:09:7d:fb:c6:0e:40:7c:0f:b4:f6:57:db:c6:
01:49:84:96:e0:41:77:e4:7d:2a:ca:ff:9e:a9:29:
af:31:f4:28:c3:db:fe:6f:1b:62:2f:1d:62:9b:b7:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:22:EF:8F:F6:8C:3B:BD:D1:23:95:E4:15:E8:AA:C7:BA:4F:1B:8E
X509v3 Authority Key Identifier:
keyid:B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:32:a8:eb:f4:f4:71:16:b0:23:2c:9a:8f:06:e0:26:1c:3a:
a1:77:28:ab:9d:97:bc:81:76:41:1d:4b:b3:0a:e8:eb:5f:5a:
cc:3d:88:f6:1d:4c:5f:e3:26:3f:7d:63:24:de:2e:41:39:b5:
a8:6b:aa:1f:5a:33:0a:1d:26:d5:f5:fe:04:10:67:50:87:d4:
9b:88:67:e2:0d:a1:3d:f0:e4:94:fa:77:7c:31:06:a6:6f:41:
fc:1b:55:d1:09:93:cc:87:e6:b2:29:8b:c6:26:9f:17:2e:65:
a5:0f:9a:3b:2b:f0:52:88:b7:2c:6d:89:17:c3:f0:7d:44:6f:
ff:c8:30:94:3e:c6:26:d7:07:b8:26:2b:0e:ac:53:11:54:0f:
73:3c:d4:d3:9a:c2:3e:f0:bc:f2:cb:73:37:e2:2f:4c:c2:ad:
67:e1:0c:e6:d2:7c:e0:a6:cf:a3:f4:f2:a4:0b:8c:ff:aa:55:
da:c3:ab:dc:7d:64:be:9e:21:8e:af:0e:d7:8a:8f:cc:3e:43:
8a:e7:e0:0f:82:f4:ee:aa:70:15:9b:5a:a6:e0:13:ae:3c:2b:
eb:ce:57:99:c6:d3:1a:29:11:19:d5:75:fc:84:4e:99:63:7a:
b9:0b:d9:70:00:c0:c9:c8:c6:43:3b:29:2d:54:ff:e3:81:2e:
b3:7b:b9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:26:55 2026 by rpki-client