Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.mft
File: sGKZHTGLDrYDrRfLOlEU7tW3fjQ.mft (raw, json)
Hash identifier: hih//QhFdR2UFDciAdP8XheFzU5MamxcxD/tZ/PZvpc=
Subject key identifier: 13:CC:95:37:BA:82:ED:43:BA:2D:9F:D4:BD:E8:D9:9D:7E:64:F0:65
Authority key identifier: B0:62:99:1D:31:8B:0E:B6:03:AD:17:CB:3A:51:14:EE:D5:B7:7E:34
Certificate issuer: /CN=b062991d318b0eb603ad17cb3a5114eed5b77e34
Certificate serial: 01A175B9A4EF150ABC2834A129F5CA2173C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.mft
Manifest number: 4C
Signing time: Mon 26 Oct 2026 01:01:02 +0000
Manifest this update: Mon 26 Oct 2026 01:01:02 +0000
Manifest next update: Tue 27 Oct 2026 01:01:02 +0000
Files and hashes: 1: q7L0IplR48XvIYXG1vo7q0nqStI.roa (hash: OtAKeVylVZxm/6LVx9Mo+nBXdTqqgUjXcDKzesZIhas=)
2: sGKZHTGLDrYDrRfLOlEU7tW3fjQ.crl (hash: Pe+jO3pD6/RpDnhNrejRPxPn4YwSv/ah6vHFU5eb9wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:a4:ef:15:0a:bc:28:34:a1:29:f5:ca:21:73:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b062991d318b0eb603ad17cb3a5114eed5b77e34
Validity
Not Before: Oct 26 01:01:02 2026 GMT
Not After : Oct 27 01:01:02 2026 GMT
Subject: CN=13cc9537ba82ed43ba2d9fd4bde8d99d7e64f065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8e:73:a5:81:25:cd:73:2a:2f:6d:a7:9a:80:
60:74:98:ee:70:8f:3e:d4:6f:92:0a:bc:82:d6:85:
73:5f:5d:1d:66:37:c7:a5:f1:d3:86:92:40:01:55:
58:8e:8b:b1:32:f3:f4:32:70:91:06:b0:c0:d7:2a:
f8:20:28:6e:9c:9e:e4:6c:48:d8:68:57:3c:0a:62:
0f:3b:1c:a9:a7:7b:cb:f1:eb:c8:36:29:36:73:da:
7d:d1:eb:83:b2:8f:7f:81:9d:c8:1f:3f:b0:1e:1a:
3a:d3:02:b6:dc:aa:0a:38:01:d3:88:56:38:b3:7b:
1e:e1:27:b7:e7:bc:c5:d5:81:ad:34:6d:e9:16:b7:
f1:7f:3a:4a:c0:74:31:ce:c1:2a:a1:74:2e:97:29:
35:cf:a3:03:fc:70:2a:23:24:77:49:d6:f5:60:eb:
72:5f:90:66:d3:b9:f9:89:87:46:71:af:32:f0:60:
25:b0:96:5a:a8:11:42:b6:3e:cd:85:d3:69:34:43:
1b:2a:92:83:db:99:12:73:b0:96:21:60:f4:94:a4:
6a:3e:a5:a4:f7:db:b1:36:34:42:32:81:9f:93:11:
47:10:da:75:06:8c:20:cc:b8:00:ad:32:85:7f:26:
59:75:d7:2f:de:61:c7:32:81:46:85:09:66:7d:82:
2e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CC:95:37:BA:82:ED:43:BA:2D:9F:D4:BD:E8:D9:9D:7E:64:F0:65
X509v3 Authority Key Identifier:
keyid:B0:62:99:1D:31:8B:0E:B6:03:AD:17:CB:3A:51:14:EE:D5:B7:7E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a4:2a:d7:f5:73:a5:36:41:c9:5b:4d:eb:08:5e:bf:1a:1b:
b2:d5:6a:fa:b6:a6:06:41:6a:a7:f1:9a:e0:a5:0a:27:19:81:
dc:53:3c:f3:d8:b4:35:0b:10:a7:e3:78:35:02:81:bf:d0:b9:
7f:8c:53:ac:c5:77:77:30:95:21:a2:17:1b:cd:a1:a2:2e:50:
78:d8:b3:bf:d6:e1:f6:f2:4f:db:88:b6:6f:a1:b6:96:67:91:
67:7a:60:96:93:b9:22:30:3c:1c:cc:4b:b3:48:8a:aa:a4:80:
5a:13:a0:87:7a:95:23:db:e8:cc:45:c8:b4:72:36:b3:a3:6a:
bb:ed:c7:3e:59:51:29:ba:59:94:f0:51:57:c8:d5:e0:86:fe:
01:8d:c7:29:32:60:ce:7d:bd:46:c4:64:06:40:d5:ad:56:4b:
ef:ab:2f:fc:25:9e:45:b1:4f:41:e0:ad:64:91:fa:cf:84:d0:
58:e1:99:43:8e:05:d0:43:36:8e:13:cd:15:c0:8d:69:70:3f:
35:30:ae:91:70:9e:b0:a4:94:b1:6c:62:f8:07:8e:9e:fa:4f:
12:77:da:35:1c:e7:3b:dc:d8:5c:86:3b:f9:de:eb:ec:7d:91:
4f:83:80:5c:c4:1f:ac:23:c7:1a:80:cc:d2:ce:12:a3:92:68:
cf:cf:ee:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:38 2026 by rpki-client