Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: f2Pn087xntPpb+Z7iuNEvmsIw4mue0og2aV/3V4t3QQ=
Subject key identifier: 42:5C:D5:A5:61:9C:0C:F3:89:E4:D2:7D:A7:C7:BB:FD:41:B1:E5:B2
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 019EBFC8AFC6B2031DDD7B52D997C0B9F2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 07:01:00 +0000
Manifest this update: Sat 13 Jun 2026 07:01:00 +0000
Manifest next update: Sun 14 Jun 2026 07:01:00 +0000
Files and hashes: 1: IpvtiB3ivhePmqqAbbVhFnX59zM.roa (hash: nW14dlZ+CXYt/syhRcngrlG7SAwArRMiAFD3SIPI6y8=)
2: XHqGlYDi_YYXP4_bxjxB51I_9sQ.roa (hash: JyJR1xe42ML2605S9E5QIfVP6eKECWWSWZ+zCzoVYQE=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: ydavF9Fg2XUfAn4HXMhkqSRZqkVGduW//uehwf9/RlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:af:c6:b2:03:1d:dd:7b:52:d9:97:c0:b9:f2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Jun 13 07:01:00 2026 GMT
Not After : Jun 14 07:01:00 2026 GMT
Subject: CN=425cd5a5619c0cf389e4d27da7c7bbfd41b1e5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:c2:0f:51:02:4f:65:63:ea:82:8c:f1:8b:
d7:14:17:10:84:12:46:89:e6:54:87:c2:ff:d3:c2:
f1:e7:fb:ad:ca:53:21:93:b3:89:a2:d6:90:30:a0:
c6:8b:19:42:03:cd:6e:a6:86:e4:7a:00:76:0b:d6:
e0:cb:b8:f7:49:9d:00:cb:d0:6e:73:3c:7b:7c:16:
fd:3b:be:dd:58:4b:9a:fd:7d:bd:39:2b:2f:a1:f2:
a8:82:5c:3b:a4:4c:2b:68:d6:e6:bc:30:8f:95:96:
c1:f7:b9:92:93:d7:5e:4d:90:18:79:d7:56:19:a2:
d0:43:a0:a4:f7:26:41:e2:43:e3:87:cf:35:f2:5b:
7b:7f:ab:ba:9e:94:d4:42:b6:27:3a:36:2e:a6:4c:
94:6d:05:40:28:96:70:44:a7:74:5f:fc:e5:47:8d:
6c:52:95:bb:b7:19:f9:fa:80:8c:8e:5b:bf:10:73:
86:03:3b:76:46:36:73:0c:9d:3f:ab:bc:77:e6:91:
bd:33:00:31:9c:4d:e5:b4:cd:29:33:4a:c7:46:29:
94:ff:d1:9e:87:bb:1a:08:dd:12:8d:d1:d0:41:a8:
e7:c7:5a:27:e2:fd:8d:62:09:61:77:d1:d7:dc:68:
2e:9c:5c:90:72:ed:29:45:ea:10:c9:db:f8:2f:9b:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5C:D5:A5:61:9C:0C:F3:89:E4:D2:7D:A7:C7:BB:FD:41:B1:E5:B2
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:88:40:88:68:81:cd:15:c7:ab:c3:1c:45:d9:b6:0e:c9:8d:
52:c7:93:8c:84:f7:bc:a9:89:21:fb:8a:f3:13:34:3e:14:5c:
50:95:28:84:4b:89:55:7f:da:4a:15:13:76:87:0f:ef:ea:15:
39:92:2c:ae:d3:ae:c1:b2:b5:ab:af:8d:c6:7a:ed:f6:16:75:
57:2e:1b:74:45:90:dd:59:13:46:73:d6:af:99:bc:cc:01:01:
c2:43:16:ad:c3:71:8c:36:f6:bc:48:78:7b:27:44:09:d0:07:
7d:2d:ba:c4:3d:00:97:e5:03:48:5d:07:be:19:f6:81:01:25:
ac:25:78:61:4d:70:da:bb:bf:b6:da:2e:ae:e8:f8:14:48:83:
d4:2b:8d:92:71:e5:e9:08:08:73:f9:40:f4:c8:06:d7:df:24:
07:bf:fe:f6:82:c0:93:2e:bd:67:b0:01:92:20:8e:3f:be:01:
62:d0:aa:94:24:b3:0d:de:e1:ad:bd:54:e6:46:47:2e:7a:87:
e1:76:13:ce:32:26:d3:bd:4f:93:95:59:aa:a4:73:b1:08:27:
70:0d:39:45:63:a9:ea:39:8d:54:4c:f8:bd:80:28:89:1c:68:
c5:0e:11:6a:5c:ae:54:9d:cc:ad:78:21:36:19:95:f9:9a:aa:
e6:cd:62:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:14:38 2026 by rpki-client