Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
File: sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json)
Hash identifier: +bIaXep+HZD/OOJxQBesO+FH+FHmfCeVZZ7Bmb7CEpI=
Subject key identifier: 5C:38:F8:13:7C:C6:8E:96:F9:F4:0B:65:74:0E:FB:91:54:6B:32:2F
Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Certificate serial: 019CA9B3CE6D53156D59D47B7BA17C630F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
Manifest number: 0BD7
Signing time: Sun 01 Mar 2026 14:00:59 +0000
Manifest this update: Sun 01 Mar 2026 14:00:59 +0000
Manifest next update: Mon 02 Mar 2026 14:00:59 +0000
Files and hashes: 1: _by7AscKsdigQ-BwL976HgZ5JQ8.roa (hash: wziiFvH1qv+pWQ/UztPiXiVxbkfYgEe33kjW55/pvyo=)
2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: sgTElpWWQpBn8gbzmZrpMQVbav602CL7QCHtSwfQtmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:ce:6d:53:15:6d:59:d4:7b:7b:a1:7c:63:0f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Validity
Not Before: Mar 1 14:00:59 2026 GMT
Not After : Mar 2 14:00:59 2026 GMT
Subject: CN=5c38f8137cc68e96f9f40b65740efb91546b322f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:bd:ad:20:21:61:42:ff:4b:4e:e5:af:3d:
88:bb:c6:95:4e:9a:8f:8e:59:13:d2:bb:49:94:75:
52:a3:66:f8:8f:9a:7d:97:3e:2b:60:ff:b0:7e:27:
51:5d:bb:fc:d4:dc:ed:d5:47:39:66:e6:bc:45:a2:
e5:c6:8c:06:6c:e5:b6:1d:41:75:11:a0:11:77:14:
6d:e4:32:39:5f:b1:09:62:ef:79:ad:61:07:77:84:
32:04:01:53:8e:d6:67:2c:c4:93:70:29:42:a6:96:
2e:23:8a:50:6d:d6:8e:c8:fd:71:54:f3:42:46:70:
bb:2a:33:44:7d:71:e5:2a:09:4a:3f:64:f8:b5:f4:
41:0a:2b:75:0f:e5:a4:fa:f3:27:87:ce:c7:33:4b:
54:b9:89:a8:7f:8a:9c:65:ab:0c:61:b5:30:24:5f:
1b:c3:49:ce:99:d2:65:27:6c:cb:32:ac:8a:e5:76:
ad:5c:0f:e9:84:1b:30:59:f3:5d:27:ea:5b:41:a7:
3b:c9:da:de:95:64:1a:32:92:fa:24:5c:b4:d1:37:
ad:c3:cc:83:9b:99:e2:ca:8c:0f:e3:21:01:bb:aa:
43:2f:ca:44:09:11:ad:9c:b1:53:de:53:5b:dc:f6:
dc:48:9b:ff:37:8c:56:0a:0c:ec:4a:2d:44:14:20:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:38:F8:13:7C:C6:8E:96:F9:F4:0B:65:74:0E:FB:91:54:6B:32:2F
X509v3 Authority Key Identifier:
keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b0:60:db:f1:e3:ba:80:2e:4e:71:cd:c7:70:21:dd:81:1a:
d3:0a:71:94:47:ba:0b:f9:cc:df:7d:af:0b:c7:e4:5c:a8:f5:
ad:b3:af:3f:54:d2:8e:c2:0c:61:bb:7f:ef:cf:9e:10:0c:d1:
c1:97:eb:18:c8:05:b6:c5:b9:07:a5:fd:07:c0:c2:f7:e5:79:
ba:b2:e6:3d:01:88:84:12:a2:45:f1:54:39:f2:61:89:2f:a1:
ea:e0:25:1e:1f:87:3c:bd:d3:fb:a2:ee:04:df:9b:a1:65:06:
2e:7c:16:40:d1:c8:98:c3:bc:e3:60:55:41:0c:2c:ad:1e:6e:
b8:4e:2e:c3:bd:b7:af:6e:97:32:5a:e1:ec:2a:5f:28:d7:30:
4f:08:1a:8f:35:70:36:5b:49:11:e7:ec:6a:74:e7:de:29:c8:
f1:e0:22:35:3c:36:96:5e:46:85:45:52:ee:f4:98:77:93:2b:
34:a7:a8:19:04:7f:a2:7f:bc:e0:87:0b:dc:66:c6:ab:37:d4:
c0:00:18:4e:18:88:e3:38:3a:cf:6c:5c:4c:4f:1b:0f:0e:4d:
e8:90:24:07:06:8b:81:62:e7:80:c8:05:29:a3:31:7f:9e:45:
33:f5:22:a0:ba:16:cb:18:d5:84:29:de:e2:54:82:23:7b:3f:
1e:9c:8e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:25 2026 by rpki-client