Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: HznuKjDV5f0pvjb/jE9bvGFYhoEaBSBu3eV2dd4dJ/0=
Subject key identifier: 9E:E4:92:AC:D7:09:AC:1B:C8:6A:D5:81:0A:4F:8F:89:CA:4C:A3:59
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 019CAEA34BAC1C3F487357B77B0757FF8D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 13:01:03 +0000
Manifest this update: Mon 02 Mar 2026 13:01:03 +0000
Manifest next update: Tue 03 Mar 2026 13:01:03 +0000
Files and hashes: 1: IpvtiB3ivhePmqqAbbVhFnX59zM.roa (hash: nW14dlZ+CXYt/syhRcngrlG7SAwArRMiAFD3SIPI6y8=)
2: XHqGlYDi_YYXP4_bxjxB51I_9sQ.roa (hash: JyJR1xe42ML2605S9E5QIfVP6eKECWWSWZ+zCzoVYQE=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: Ft2uaH+GDsxOIVfisySYwcTEUyQ94qIRVJ9s1U7hOnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:4b:ac:1c:3f:48:73:57:b7:7b:07:57:ff:8d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Mar 2 13:01:03 2026 GMT
Not After : Mar 3 13:01:03 2026 GMT
Subject: CN=9ee492acd709ac1bc86ad5810a4f8f89ca4ca359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:60:0c:2f:81:94:40:79:ba:0b:40:d2:ba:
b7:3c:9c:31:87:82:5b:91:33:79:25:05:c5:20:b3:
8c:a2:ee:d4:96:11:17:32:8c:e1:4c:ee:e0:8c:fd:
3a:50:80:72:74:6a:20:99:28:74:ee:a5:18:35:95:
a9:c4:bb:5c:0f:26:a6:dc:ba:58:5f:71:ac:34:0d:
b4:22:c7:03:26:43:fe:6d:d0:86:b9:f8:4b:a2:b0:
b6:3f:6d:4e:cc:ec:a3:8e:9c:22:0f:07:d1:f6:3a:
82:a2:01:47:c7:db:bd:1c:09:ee:49:2e:ec:f6:e5:
e3:32:15:6a:e1:6f:d7:7e:b5:4a:1e:09:7e:e3:ba:
5b:e3:f1:60:c1:a5:09:74:7e:58:e4:3c:9f:6b:aa:
6e:79:9a:95:ef:e3:23:4f:1e:87:78:9a:36:7c:c9:
07:4b:99:25:0f:0d:10:f4:5b:83:14:70:8f:a0:ea:
4d:e4:1b:0a:d1:06:54:e6:74:9f:ff:56:e5:3f:e5:
ab:ff:2c:67:53:04:4c:a3:17:7d:51:10:25:b6:ae:
c1:53:5b:4c:c4:7e:01:6c:4a:76:c9:02:05:2c:73:
31:d7:90:03:45:1a:85:9d:3d:7b:62:1a:3a:ac:a2:
07:5d:26:fa:6f:43:04:43:0a:65:62:00:ce:ea:06:
07:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E4:92:AC:D7:09:AC:1B:C8:6A:D5:81:0A:4F:8F:89:CA:4C:A3:59
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:eb:c1:81:37:f4:62:7c:4e:09:e2:91:58:2e:51:38:b6:15:
6b:14:1c:c0:8e:b2:74:2e:c0:86:e7:4a:1d:16:8c:dd:18:6e:
ea:03:c1:87:dd:e7:22:b4:89:6f:04:4b:5d:0a:79:5e:70:61:
bf:fa:bb:fb:99:86:ca:ad:51:91:e4:12:32:df:3b:c2:c8:43:
92:f8:11:82:6a:26:45:3c:5f:64:35:9e:71:25:bc:68:74:d0:
b1:b7:4e:2e:d3:64:08:1d:d3:89:50:6e:83:f1:8e:ac:05:58:
c6:df:6e:9e:ae:87:42:3e:b7:e3:cd:ab:a3:1d:1b:82:b9:95:
a0:84:f0:e4:42:db:c2:e2:66:e5:e2:3c:8b:07:90:c1:d3:56:
06:66:66:30:ab:7a:1b:fd:7d:2a:af:ba:6a:5d:c8:b8:80:95:
58:b0:10:c1:d3:19:d7:76:6c:b4:e9:1d:b9:e6:45:f7:6c:e6:
ff:b6:0f:5d:3d:17:ef:3f:0a:8d:d9:cf:dc:99:7f:de:84:83:
62:0c:f3:d8:77:c3:fd:47:53:b9:f2:8b:6b:f8:05:bb:f2:28:
0a:f7:b8:6a:52:37:81:a0:35:cc:8c:a7:34:20:1b:51:96:3d:
a9:18:d6:02:18:f9:36:41:b4:eb:ba:76:88:82:4c:8c:c7:82:
9f:23:af:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:25 2026 by rpki-client