Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
File: SGUQoxFpcvztleiova_W5FXe0Lo.mft (raw, json)
Hash identifier: rIb/JlCYQDHdWCKGyBLeY5omK1DSa2IsHuyizDCxDHE=
Subject key identifier: E5:C6:DC:53:88:E4:48:E6:C3:F0:8F:B7:AD:F1:C0:67:07:79:72:C2
Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
Certificate issuer: /CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Certificate serial: 019DD5E5069A675C266E3AF9CF291D7137C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
Manifest number: 18E6
Signing time: Tue 28 Apr 2026 21:00:49 +0000
Manifest this update: Tue 28 Apr 2026 21:00:49 +0000
Manifest next update: Wed 29 Apr 2026 21:00:49 +0000
Files and hashes: 1: 1-_tolY0Ku6cjK7uWuGIDT-aOsUM.roa (hash: zHmw/JUfBT58tzI52qKI6ZXBHiMslg81gZfcAbrW9BY=)
2: 1cDQdypkn0cjo9FfkDhM0paatNY.roa (hash: +ByPIkalEzr2Rwt/bFmRxra3ZwfCDb/OP1YXhCyI2zk=)
3: SGUQoxFpcvztleiova_W5FXe0Lo.crl (hash: Dd6PgSTIoGQRf0fKOH1iLyhmkXCv/lZmwqNGDqQ5A4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 20:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:e5:06:9a:67:5c:26:6e:3a:f9:cf:29:1d:71:37:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Validity
Not Before: Apr 28 21:00:49 2026 GMT
Not After : Apr 29 21:00:49 2026 GMT
Subject: CN=e5c6dc5388e448e6c3f08fb7adf1c067077972c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:cc:bd:a0:17:bf:f0:c2:ee:95:23:a7:da:
b7:87:7c:0e:63:3f:9e:90:58:db:5a:ad:87:4b:a9:
29:b1:a7:a1:69:fc:c3:5d:3e:be:bf:16:3e:aa:aa:
9d:da:cc:89:70:5f:84:2e:f1:47:b2:e6:7b:4c:46:
70:5c:f2:70:f6:30:39:25:26:41:15:34:c5:79:8f:
30:9f:20:44:59:28:ec:03:dd:70:7c:4c:e7:4e:69:
05:5e:8d:ac:c2:e4:e4:53:c2:5c:d3:c0:f6:85:74:
6c:44:31:1f:a0:72:c9:bc:02:55:9e:c7:b7:00:99:
00:47:b1:aa:b8:07:1f:fb:31:d2:e9:28:7a:e1:2d:
54:30:4a:09:88:93:b2:73:64:25:73:a2:b7:4d:f3:
ed:dc:67:a2:ea:0a:4d:b9:e3:f5:ac:eb:0e:43:f0:
10:59:ed:50:67:46:77:13:44:25:7b:9e:3d:f4:4e:
34:f5:10:47:c6:84:b1:0c:35:0f:99:85:11:f0:c0:
78:5d:62:7d:55:2b:71:71:dd:3b:c7:8a:19:4a:3e:
04:a1:ba:15:ac:05:9a:31:9a:4f:cc:9c:ac:18:5a:
c7:a2:e6:08:68:f8:9d:99:91:6c:2f:b3:34:c1:c4:
f7:a0:90:2c:a4:ca:5a:3a:89:a5:88:c3:bc:6b:4a:
56:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C6:DC:53:88:E4:48:E6:C3:F0:8F:B7:AD:F1:C0:67:07:79:72:C2
X509v3 Authority Key Identifier:
keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1c:e8:4b:e4:9b:e6:25:d4:96:2f:f4:9d:5d:22:f6:31:b6:
0a:d6:32:a3:cc:d0:f1:a9:0b:4f:df:16:29:5b:db:69:dd:17:
1a:fb:1f:92:52:c4:13:56:6a:ee:73:8f:4c:b1:4c:40:80:28:
36:ef:d0:fd:4d:54:14:b0:48:39:e3:ad:0a:19:b2:bc:39:40:
14:dd:c8:77:66:93:75:28:bc:fd:f9:cf:a3:05:14:9d:a9:84:
71:be:9a:a3:e6:5c:37:30:68:57:7a:96:73:6e:fb:3d:37:c5:
b9:a8:ef:e4:03:59:89:b6:40:9b:c7:99:eb:03:62:53:0d:4b:
2a:fd:77:fd:89:bf:f5:0f:52:c2:6f:a6:ef:f1:44:ad:d1:24:
e9:2f:65:90:58:f0:13:28:3e:e3:1d:2d:a9:6d:0e:c2:93:00:
7a:6e:7c:ca:ec:ee:03:b0:51:a1:8f:46:da:6d:90:53:7a:f8:
03:be:e1:9a:be:be:2f:78:9c:1b:e4:24:50:72:3c:7b:65:cb:
a0:96:80:da:7b:52:da:b1:07:5a:15:9c:55:07:e7:da:a8:f8:
c0:67:10:24:1c:71:e7:86:33:24:9a:71:58:c4:a9:a5:cd:67:
71:7e:56:e4:b4:f3:ab:64:37:8e:37:c5:52:8f:df:47:c4:87:
34:07:34:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3V5QaaZ1wmbjr5zykdcTfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NjUxMGEzMTE2OTcyZmNlZDk1ZThhOGJkYWZkNmU0NTVk
ZWQwYmEwHhcNMjYwNDI4MjEwMDQ5WhcNMjYwNDI5MjEwMDQ5WjAzMTEwLwYDVQQD
EyhlNWM2ZGM1Mzg4ZTQ0OGU2YzNmMDhmYjdhZGYxYzA2NzA3Nzk3MmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkybMvaAXv/DC7pUjp9q3h3wOYz+e
kFjbWq2HS6kpsaehafzDXT6+vxY+qqqd2syJcF+ELvFHsuZ7TEZwXPJw9jA5JSZB
FTTFeY8wnyBEWSjsA91wfEznTmkFXo2swuTkU8Jc08D2hXRsRDEfoHLJvAJVnse3
AJkAR7GquAcf+zHS6Sh64S1UMEoJiJOyc2Qlc6K3TfPt3Gei6gpNueP1rOsOQ/AQ
We1QZ0Z3E0Qle5499E409RBHxoSxDDUPmYUR8MB4XWJ9VStxcd07x4oZSj4EoboV
rAWaMZpPzJysGFrHouYIaPidmZFsL7M0wcT3oJAspMpaOomliMO8a0pWmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXG3FOI5Ejmw/CPt63xwGcHeXLCMB8GA1UdIwQY
MBaAFEhlEKMRaXL87ZXoqL2v1uRV3tC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hZWFlM2YtYWY0ZC00ZWVlLWIyODQt
YTVmNmMwYWExMWRlLzEvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hZWFlM2YtYWY0ZC00ZWVlLWIyODQtYTVmNmMwYWExMWRl
LzEvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtRzoS+Sb
5iXUli/0nV0i9jG2CtYyo8zQ8akLT98WKVvbad0XGvsfklLEE1Zq7nOPTLFMQIAo
Nu/Q/U1UFLBIOeOtChmyvDlAFN3Id2aTdSi8/fnPowUUnamEcb6ao+ZcNzBoV3qW
c277PTfFuajv5ANZibZAm8eZ6wNiUw1LKv13/Ym/9Q9Swm+m7/FErdEk6S9lkFjw
Eyg+4x0tqW0OwpMAem58yuzuA7BRoY9G2m2QU3r4A77hmr6+L3icG+QkUHI8e2XL
oJaA2ntS2rEHWhWcVQfn2qj4wGcQJBxx54YzJJpxWMSppc1ncX5W5LTzq2Q3jjfF
Uo/fR8SHNAc0EA==
-----END CERTIFICATE-----
Generated at Wed Apr 29 01:41:28 2026 by rpki-client