Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
File: sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json)
Hash identifier: NbrJzTmoxbHjPbRTLGvyLKuZiR2hliqanASE6n52kHo=
Subject key identifier: 0F:01:AA:D9:C0:D0:23:14:3F:8D:0F:3C:C3:5A:73:EF:7C:76:A2:BB
Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Certificate serial: 019D273AEF1A8EB774FAD79670E13A0707E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
Manifest number: 0C18
Signing time: Wed 25 Mar 2026 23:01:06 +0000
Manifest this update: Wed 25 Mar 2026 23:01:06 +0000
Manifest next update: Thu 26 Mar 2026 23:01:06 +0000
Files and hashes: 1: _by7AscKsdigQ-BwL976HgZ5JQ8.roa (hash: wziiFvH1qv+pWQ/UztPiXiVxbkfYgEe33kjW55/pvyo=)
2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: qf0HlRi8xfgUgKkLj2QhqtRG0Tm7vwwYbOUZ1FQ3JsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ef:1a:8e:b7:74:fa:d7:96:70:e1:3a:07:07:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Validity
Not Before: Mar 25 23:01:06 2026 GMT
Not After : Mar 26 23:01:06 2026 GMT
Subject: CN=0f01aad9c0d023143f8d0f3cc35a73ef7c76a2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:45:a3:c5:3d:48:ee:1d:5d:89:c2:5f:37:
0d:8c:7f:7f:76:1e:b7:52:56:1b:37:68:2c:b6:f4:
9c:ea:2a:8d:d2:5b:f8:d7:08:7f:7e:05:1f:f0:62:
3b:18:fa:e7:b6:71:ca:5f:94:94:3b:f2:30:0f:38:
a5:d9:6a:09:e7:86:08:29:c4:3b:53:d4:e8:8e:94:
9a:ed:fb:21:bf:bc:78:e3:b5:e9:2c:f1:56:04:3b:
a8:e5:93:9e:35:e0:9b:56:e2:cd:da:d6:75:8e:65:
18:74:57:b0:58:c4:fe:d7:45:bb:9b:ee:85:c0:7e:
34:71:ff:40:c1:81:d5:a6:76:ba:37:50:6b:be:e6:
71:6e:3a:5f:66:99:8c:ba:73:ef:2c:8a:4b:de:6e:
4c:65:17:81:0d:92:77:ca:95:27:53:4c:d8:81:55:
60:6f:94:d1:3a:9d:c1:83:87:20:db:57:e9:d6:b6:
2a:d3:22:44:75:68:ad:a2:53:ce:a1:75:d3:33:c7:
7a:a0:f4:57:ee:14:54:e7:e7:97:f9:6e:12:45:30:
3a:fd:39:de:42:a2:82:3b:f0:2c:98:3b:fb:23:c6:
a9:8e:a0:a5:63:d4:44:8e:c3:b0:9b:eb:e3:36:ea:
f3:7d:0a:40:d4:1d:a3:bd:99:bf:58:54:4d:cb:8d:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:01:AA:D9:C0:D0:23:14:3F:8D:0F:3C:C3:5A:73:EF:7C:76:A2:BB
X509v3 Authority Key Identifier:
keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:45:4e:57:0c:c7:4b:3f:8d:47:70:6f:1b:3f:58:b2:88:bb:
b2:5c:24:32:3c:a2:40:6b:15:f1:c2:dd:1e:c3:a8:77:9c:d3:
62:05:a2:58:03:fb:0b:ef:5d:25:87:ed:59:21:6a:1a:c3:15:
36:eb:02:34:d0:b8:75:29:b6:47:a0:d8:ea:40:74:63:a1:a4:
f3:e7:43:91:a7:d0:52:b4:6d:c6:98:e2:2c:fb:eb:76:11:5a:
50:fd:cf:e1:28:c0:5f:36:83:cf:3c:d4:95:80:ef:84:a6:93:
7b:ef:47:f6:c8:f3:eb:ae:8b:64:fa:29:ca:3b:95:9a:a8:ec:
14:60:4a:48:8c:21:45:b0:18:a6:cc:29:e5:52:51:23:ae:66:
19:fa:85:30:69:2c:1f:b1:ed:6f:f8:3c:8e:16:1d:4e:e6:27:
04:2f:4d:ee:96:0c:f1:67:04:72:06:15:a7:0e:b6:9a:e9:b9:
8f:5c:fc:f9:da:ce:4c:e4:48:cb:db:9c:1a:25:91:ea:7e:ca:
99:97:16:ac:b1:7d:45:51:52:e2:a1:67:12:87:37:34:6c:6e:
0d:95:32:51:b7:44:28:79:4f:b4:6d:6c:46:85:db:63:4c:84:
ac:10:67:f9:51:ff:94:4c:7b:09:95:12:77:ef:31:f9:c0:0e:
db:81:1a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:25 2026 by rpki-client