Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: dDHVNIz71D0ms8k9Kk/c7Y/pXVZgQ/JW0eR5Bzh0+1M=
Subject key identifier: AE:84:97:77:B8:88:68:92:12:25:AF:F1:25:38:61:5C:ED:F3:77:FE
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 019D985083C82A206A58F710BE9916892BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 18C6
Signing time: Thu 16 Apr 2026 22:01:46 +0000
Manifest this update: Thu 16 Apr 2026 22:01:46 +0000
Manifest next update: Fri 17 Apr 2026 22:01:46 +0000
Files and hashes: 1: IpvtiB3ivhePmqqAbbVhFnX59zM.roa (hash: nW14dlZ+CXYt/syhRcngrlG7SAwArRMiAFD3SIPI6y8=)
2: XHqGlYDi_YYXP4_bxjxB51I_9sQ.roa (hash: JyJR1xe42ML2605S9E5QIfVP6eKECWWSWZ+zCzoVYQE=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: ZvQ0cbLgtbtllpLBY2gk6Ay7vbfjyaKZApsh7sFGlMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:83:c8:2a:20:6a:58:f7:10:be:99:16:89:2b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Apr 16 22:01:46 2026 GMT
Not After : Apr 17 22:01:46 2026 GMT
Subject: CN=ae849777b88868921225aff12538615cedf377fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ad:f7:4a:c7:85:2d:32:ed:c9:b5:83:22:bb:
00:94:3a:34:00:58:e3:46:4e:94:b4:92:2e:12:d1:
b7:a0:cb:1f:ba:ba:b4:da:60:a6:45:d2:21:df:e7:
dc:e9:62:b0:5e:d9:d4:b8:0b:55:4e:4a:71:f5:c0:
f0:cd:76:51:e2:4c:d7:39:ff:22:f8:b1:d1:9c:7e:
0f:9f:3e:37:b7:dc:10:1c:6f:b2:0a:7e:07:86:7e:
32:09:f4:79:d8:bc:6e:1a:83:0a:97:7c:c1:42:64:
ec:0b:c7:39:63:d6:92:d5:0e:fe:56:b6:45:1d:02:
11:14:4a:55:22:a8:7d:dc:34:35:74:d5:2a:fa:ed:
28:14:8e:f9:6e:e6:f3:bf:62:f8:f9:7a:24:1f:21:
7b:dc:01:ef:77:8c:9e:c1:55:30:68:ad:16:19:e5:
c3:7a:69:bb:23:a5:5f:4a:89:1b:4e:a2:f0:16:df:
17:b7:2f:5f:1c:a9:f9:83:94:91:2b:3d:3b:e3:b1:
63:63:b3:34:95:d7:7f:a7:41:fb:b3:11:45:e8:3a:
03:40:33:f4:6d:04:9d:98:a6:43:a7:32:16:e5:2d:
42:fc:85:3f:08:aa:e2:97:c5:26:a3:0e:9f:dc:63:
cd:ee:49:57:fa:6a:22:50:b0:71:46:04:65:2c:a8:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:84:97:77:B8:88:68:92:12:25:AF:F1:25:38:61:5C:ED:F3:77:FE
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ff:7e:d1:97:ba:7f:a7:f6:9a:4c:a0:20:52:7f:b8:7d:81:
d0:c7:b8:89:c0:c0:d5:f0:a7:46:b0:c8:ec:25:69:be:25:a8:
a1:f4:1c:8e:79:f7:ab:ca:c9:b6:55:fd:5e:d8:ef:4a:96:d8:
da:ee:d8:c3:d7:be:fa:54:3a:fa:1a:76:27:40:49:83:c0:9c:
d6:73:8c:16:87:6a:4c:4e:73:45:e2:71:d5:38:ba:9b:10:19:
e7:ea:35:f7:0a:49:80:22:bd:7b:ae:b2:1a:dc:86:04:51:ee:
e2:83:01:72:f2:fe:ea:40:2c:b0:19:16:95:88:50:1e:51:2a:
74:c2:72:0a:3b:8d:b8:7b:d8:ef:ae:95:ec:ac:5f:99:f1:9d:
f2:1b:0a:4c:dd:42:6e:53:42:c1:51:56:59:56:bb:54:39:05:
73:38:bc:f7:59:98:50:ef:9a:89:fc:2d:91:44:2d:2f:f1:55:
ad:9e:f5:6d:09:3b:f7:96:bd:43:b0:88:2c:a9:d0:71:58:f0:
e0:60:d9:c0:3b:84:c1:e9:0e:39:ad:2d:e6:a1:42:c2:15:a1:
03:81:46:4e:d4:2e:5d:8d:6b:82:d1:2a:60:66:ab:5c:e8:c4:
a1:bd:59:1f:28:3d:6e:77:de:7a:10:ba:5f:66:9a:65:c1:99:
6b:25:03:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:16 2026 by rpki-client