Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: ArSUsdRlAWiRjE5k9GyjPoZjh1BOQKh8yiACCvapcm0=
Subject key identifier: 1E:3D:A6:83:55:B5:20:95:EF:64:5A:AD:60:FA:7F:D1:2B:74:D6:E4
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 01A0DC84BE4C89D2A2A15246AFCE3E9D2C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 1A77
Signing time: Sat 26 Sep 2026 07:01:21 +0000
Manifest this update: Sat 26 Sep 2026 07:01:21 +0000
Manifest next update: Sun 27 Sep 2026 07:01:21 +0000
Files and hashes: 1: IpvtiB3ivhePmqqAbbVhFnX59zM.roa (hash: nW14dlZ+CXYt/syhRcngrlG7SAwArRMiAFD3SIPI6y8=)
2: XHqGlYDi_YYXP4_bxjxB51I_9sQ.roa (hash: JyJR1xe42ML2605S9E5QIfVP6eKECWWSWZ+zCzoVYQE=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: y/sW2ahdkTAjF0nHkd+ns8q5aSQihLjZAV7Od7sjLFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:be:4c:89:d2:a2:a1:52:46:af:ce:3e:9d:2c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Sep 26 07:01:21 2026 GMT
Not After : Sep 27 07:01:21 2026 GMT
Subject: CN=1e3da68355b52095ef645aad60fa7fd12b74d6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:f3:0b:85:8c:d6:ce:95:b5:3f:f8:90:02:
6a:7a:c7:4c:f3:79:95:65:ad:24:6c:c3:4f:8a:37:
81:4c:30:30:91:fb:35:27:50:8b:22:36:3e:0f:b9:
82:40:86:7b:33:83:f7:6a:c6:33:57:39:97:a7:ed:
e1:36:d4:e1:f1:b9:ab:a2:39:c2:f2:aa:5d:08:b3:
42:ec:0c:5c:d3:46:e0:e1:c2:af:4f:f6:89:16:ce:
09:8d:52:28:02:00:b0:ee:ed:66:4a:01:24:b5:f5:
d2:5b:c1:a6:75:ad:f9:89:3b:48:1d:3d:16:f9:93:
48:77:06:f6:9c:08:dd:0d:df:aa:56:c6:f6:9c:cc:
a3:ed:b7:e5:3f:43:d9:be:02:2b:1f:a7:0a:85:70:
48:4e:15:96:bc:59:2e:4c:a2:4e:82:73:94:05:c8:
1a:fa:ae:1b:5c:94:e6:a0:31:e3:b3:50:f2:2c:95:
63:76:3c:bd:1d:59:03:e0:44:55:19:c9:d6:d8:af:
3c:62:ac:09:35:32:1c:89:dc:8a:6d:1f:9f:34:97:
e5:0c:62:23:46:f3:c6:5f:5d:57:bb:c6:a6:3b:b1:
47:2f:89:f8:4e:23:1b:38:e7:a7:3a:aa:1f:ba:62:
23:9e:31:25:e2:c9:e7:e4:29:cc:1e:69:19:d6:bc:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3D:A6:83:55:B5:20:95:EF:64:5A:AD:60:FA:7F:D1:2B:74:D6:E4
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:14:cb:76:41:80:cc:8d:f5:5b:e7:50:ba:b5:74:3a:1a:6b:
a3:66:0c:0e:81:ad:3c:54:ea:8c:21:9c:b0:b1:8f:ce:f9:04:
a9:0d:5d:99:e8:21:f7:f1:13:a2:d6:d8:ad:d9:0f:3b:3f:42:
2f:fd:56:59:d3:0f:46:d2:21:36:72:62:94:9f:34:33:13:20:
f4:1e:7a:b8:2b:19:21:10:25:66:7c:92:02:45:4f:54:6f:0f:
a2:5c:1c:08:a9:a2:1f:61:7b:81:fc:a1:73:15:1f:fd:44:e6:
71:be:c0:09:37:c8:4c:f9:05:be:50:b6:18:74:f7:9d:8e:ae:
16:ce:b6:2a:cb:96:a3:b7:fa:f8:17:27:84:a0:3e:a7:95:5d:
24:da:d9:11:5d:9e:11:a6:3e:eb:ed:45:b6:8e:c1:dd:d5:4c:
c7:76:15:4f:e4:fa:f2:bf:43:47:9e:dd:01:22:e2:86:ef:65:
34:ed:7c:ae:9a:85:8d:84:88:12:6f:d8:e6:e1:0c:fd:75:c0:
e3:4d:a3:18:0c:65:fb:6b:7f:2b:e8:a8:64:6a:03:68:98:3e:
34:9a:be:8e:4c:01:49:a5:4d:af:8c:e9:86:22:8f:95:77:10:
67:89:40:23:72:35:7f:8c:5b:19:d6:4d:a5:b4:f6:a2:f1:37:
af:8e:58:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:58:24 2026 by rpki-client