Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File: sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier: 3HxxxaVfjJWlNkLvdprFubdxVKSKPlakpxPWEV1/maA=
Subject key identifier: 3F:F8:62:F2:14:B7:2D:17:B1:BC:D3:02:31:54:1D:3D:90:EB:12:39
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 019D389C38E9E24426EF4F9A6D90F77034D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number: 05B7
Signing time: Sun 29 Mar 2026 08:00:55 +0000
Manifest this update: Sun 29 Mar 2026 08:00:55 +0000
Manifest next update: Mon 30 Mar 2026 08:00:55 +0000
Files and hashes: 1: NDmhXzZ8uEuR9tjCtcKsEKDgyyw.roa (hash: 5IZVF4mjF20orEhDUu/WVZB3xhzdmh0JCOjJNcS3hA4=)
2: P1pi-fzHu11nz54MgyJAbBSwILI.roa (hash: UTJfTUyPTVBn82h248K6mdRAAGmP9nekxHQ3ON0RaUA=)
3: oiH1aC3hd-YG_5l_iFQf6YzX1ZI.roa (hash: /ZDMc+U53FKEQ3a7RMNSx6X/as7T1UTJjmNtNBktR18=)
4: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: Is3lKYf+VFmHP2A4sjr0XeE4t7T2K83gB7HcEsFgVG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:38:e9:e2:44:26:ef:4f:9a:6d:90:f7:70:34:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Mar 29 08:00:55 2026 GMT
Not After : Mar 30 08:00:55 2026 GMT
Subject: CN=3ff862f214b72d17b1bcd30231541d3d90eb1239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:f9:a4:eb:bc:87:6f:21:11:84:3c:e5:d8:
bd:29:71:86:23:94:8c:9f:e2:3f:ce:37:60:ef:d9:
92:51:75:be:a5:bf:8c:ef:c4:c9:ec:4b:36:62:7e:
1f:4f:03:0d:37:e5:09:1e:6f:2e:6e:0f:55:a0:40:
07:44:9d:22:10:84:da:0e:19:33:24:fb:e2:8b:f2:
cc:d9:0b:eb:20:3c:c1:11:25:31:db:76:97:98:3e:
ce:e6:ee:60:59:6d:76:52:7e:b6:31:bd:e8:e3:cc:
7c:04:53:a7:06:d1:42:f2:89:de:dd:5a:be:9c:35:
68:0a:9a:f4:38:3e:c7:67:49:21:a3:22:3c:3b:78:
1d:99:b0:f2:d5:a4:ad:ea:9b:cc:bb:e0:a9:8b:99:
a9:d4:d7:d7:d2:50:37:df:c4:d9:43:f5:93:91:c9:
f5:7d:9b:70:14:cb:2f:ed:42:af:c4:48:e8:2a:05:
90:4a:01:7c:f0:39:6f:72:a5:aa:7d:b4:f8:fd:15:
9d:e3:f1:46:54:8a:b5:4a:1e:a9:eb:81:32:0d:07:
2b:5a:89:51:2d:b0:20:fd:ce:62:bc:b0:92:e3:db:
e7:2f:16:5b:18:3b:b8:48:27:b9:41:87:45:da:7a:
fc:ea:9d:cf:17:88:f3:d5:a1:3e:20:7a:0c:bf:99:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F8:62:F2:14:B7:2D:17:B1:BC:D3:02:31:54:1D:3D:90:EB:12:39
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:38:4b:9a:d9:b6:65:44:e1:71:f2:cc:db:7e:d4:5d:8c:cd:
cf:d4:f4:25:8c:51:34:a6:fb:34:05:42:81:f7:fc:91:7d:c0:
68:79:99:9b:cb:b6:48:48:ad:e5:72:a0:82:15:85:f9:0d:59:
c3:ac:de:dc:b0:0b:c3:ac:ee:3a:15:3c:db:0e:f5:ec:d5:6c:
16:64:f7:db:e3:53:5c:ff:24:b0:54:55:3a:f8:fe:e6:ad:7e:
da:fb:e1:6f:28:ea:70:57:0a:4f:f2:03:2b:2c:05:db:9f:c3:
1e:0c:7b:4b:05:3f:81:27:64:d7:f1:d5:aa:d5:eb:2a:4e:05:
98:8d:3d:59:0f:85:71:b9:73:54:51:2b:8c:4e:06:10:7a:05:
2a:d8:b3:bf:ea:c5:32:19:59:29:22:88:87:7b:3a:1b:8c:7d:
a5:cc:d3:9a:33:f2:65:2f:6f:5d:61:e4:6c:58:9e:26:1b:e3:
e5:bf:21:54:08:96:67:40:74:b8:93:c1:23:dd:ba:b3:11:51:
d7:b5:37:67:28:18:d0:a0:fd:e3:6c:39:1b:fd:d6:85:a8:fd:
97:a2:b7:d3:5e:8f:ab:64:6c:39:1c:a3:6e:a9:59:e0:ef:60:
54:44:47:5c:af:27:e8:6f:ce:91:51:8e:de:54:f9:2d:64:0d:
5e:b5:e0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:57:58 2026 by rpki-client