Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File: sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier: FwWeF9/CMzSekPAjqrhdTagRIrL3yMu/W5mK9NTW4hE=
Subject key identifier: 1D:74:1F:CD:CC:AE:58:5D:9B:87:E8:39:04:38:A6:EC:52:CD:11:E5
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 019EC292BD1405F8094E97C4D59BB847F37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number: 0683
Signing time: Sat 13 Jun 2026 20:00:57 +0000
Manifest this update: Sat 13 Jun 2026 20:00:57 +0000
Manifest next update: Sun 14 Jun 2026 20:00:57 +0000
Files and hashes: 1: NDmhXzZ8uEuR9tjCtcKsEKDgyyw.roa (hash: 5IZVF4mjF20orEhDUu/WVZB3xhzdmh0JCOjJNcS3hA4=)
2: P1pi-fzHu11nz54MgyJAbBSwILI.roa (hash: UTJfTUyPTVBn82h248K6mdRAAGmP9nekxHQ3ON0RaUA=)
3: oiH1aC3hd-YG_5l_iFQf6YzX1ZI.roa (hash: /ZDMc+U53FKEQ3a7RMNSx6X/as7T1UTJjmNtNBktR18=)
4: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: wkJIWdxThI9wHKbgYe5FfA2B4TBfpYxRDvjU+Vt2I+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:bd:14:05:f8:09:4e:97:c4:d5:9b:b8:47:f3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Jun 13 20:00:57 2026 GMT
Not After : Jun 14 20:00:57 2026 GMT
Subject: CN=1d741fcdccae585d9b87e8390438a6ec52cd11e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:16:ef:5f:51:6c:10:d4:6a:80:a4:f4:55:ba:
b6:00:a9:69:28:a6:7b:5c:4c:9a:6f:25:d4:ca:83:
d2:cd:85:9f:c0:37:4a:df:40:8a:8f:94:bd:57:e4:
8d:94:18:2d:0c:e7:62:d0:e4:79:3b:ab:30:92:c3:
a7:bc:a5:f7:2b:ae:d0:8e:7c:35:8e:99:70:f4:8c:
6c:a5:83:7f:5f:e9:79:a5:7a:7a:2c:e5:5e:32:a0:
87:e2:11:71:00:71:db:aa:55:68:9a:62:ef:9e:49:
b0:f9:b0:fb:e5:d9:e4:81:00:04:2e:20:50:9e:df:
53:04:1d:3d:e8:0b:65:3e:fa:29:f6:5d:18:b4:39:
0a:54:a5:fa:b0:a3:f4:a0:55:54:95:b2:7b:89:97:
53:02:6d:c2:d1:7e:70:e3:b9:92:0e:18:a3:04:fb:
78:98:4a:67:12:92:0a:54:59:96:7b:75:03:b7:66:
72:9e:c4:86:31:4c:d4:d9:86:75:b9:3d:2a:86:d8:
e1:37:84:9c:5b:14:6c:3d:74:b2:f2:ae:e4:70:1c:
f9:ee:e0:16:7d:12:7b:02:c2:04:b0:0e:2a:06:d8:
0a:4a:5b:98:18:9a:bc:a8:e7:1c:de:be:05:88:bd:
f8:0d:78:a7:df:d9:76:e8:89:87:f2:c4:2e:c3:4d:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:74:1F:CD:CC:AE:58:5D:9B:87:E8:39:04:38:A6:EC:52:CD:11:E5
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:52:1c:e7:fc:03:37:d8:28:ae:02:86:49:88:de:f6:05:ff:
0b:98:ec:da:e1:c0:00:e2:2e:2f:02:37:ef:a2:cb:70:1b:2c:
e5:23:43:4e:08:11:ac:39:6e:13:42:9f:77:dc:b2:9f:fe:49:
51:92:99:4d:74:31:6f:d5:c8:2c:7b:f8:d2:db:c4:1a:76:a9:
2f:fb:6a:90:48:1c:e5:23:e9:33:b9:1e:7a:39:84:30:9f:fe:
6c:3c:14:97:e8:01:04:89:7f:c2:f3:26:2d:81:9a:62:17:ef:
50:15:35:0c:e7:86:e4:48:66:90:93:45:52:0b:ea:b0:dc:85:
60:fd:c1:ef:6d:78:40:5c:92:74:d9:f5:00:c3:7c:df:e6:f1:
df:0a:65:f7:66:72:97:74:e5:ab:cb:bd:d4:8b:bb:eb:d2:c7:
42:51:d8:44:3a:de:9e:8c:77:68:6b:6d:c0:67:b9:b4:bf:81:
99:1e:45:8a:6e:c7:82:30:a4:ed:fa:f8:af:23:ec:25:bf:4b:
dc:27:56:9e:03:b9:81:2c:91:36:ef:f9:3f:f0:03:01:4e:38:
32:94:2b:45:03:b3:89:ad:74:64:7e:e4:30:7a:a2:1d:db:ae:
01:62:f5:07:cf:c3:74:0a:ce:de:31:ba:96:bd:1d:84:6e:68:
08:eb:d6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:27 2026 by rpki-client