Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: fuCFIAWhs4RWBCJVfwC4nSyt9ADXhVInDhV4j8+aO4Q=
Subject key identifier: F6:98:C0:30:1E:AA:B0:28:B8:5B:CA:1D:6C:14:F7:16:6F:9E:46:9E
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 019D284D2C4FC8C91023DD4E708242EC64A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 04:00:39 +0000
Manifest this update: Thu 26 Mar 2026 04:00:39 +0000
Manifest next update: Fri 27 Mar 2026 04:00:39 +0000
Files and hashes: 1: IpvtiB3ivhePmqqAbbVhFnX59zM.roa (hash: nW14dlZ+CXYt/syhRcngrlG7SAwArRMiAFD3SIPI6y8=)
2: XHqGlYDi_YYXP4_bxjxB51I_9sQ.roa (hash: JyJR1xe42ML2605S9E5QIfVP6eKECWWSWZ+zCzoVYQE=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: LS+6rFvS13Cxh0gttp/eb5TtemyhiP2nSjJViXYwhmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:2c:4f:c8:c9:10:23:dd:4e:70:82:42:ec:64:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Mar 26 04:00:39 2026 GMT
Not After : Mar 27 04:00:39 2026 GMT
Subject: CN=f698c0301eaab028b85bca1d6c14f7166f9e469e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:3f:68:d3:c4:c6:4d:64:70:ae:c7:6f:01:
c8:d5:f3:c3:6e:5b:6f:2d:52:66:17:91:29:62:01:
82:43:1d:92:4f:33:8f:d1:14:dd:0f:40:69:98:55:
f4:f3:f7:93:be:00:c6:19:30:f0:6f:50:57:6a:d8:
fa:02:25:9d:20:32:df:74:1f:15:8c:47:3d:57:cf:
4d:b1:30:09:e5:78:99:34:44:82:ac:18:17:ff:f9:
ad:88:0a:6d:41:1e:0c:10:4d:4d:cd:c0:78:49:c7:
47:05:42:99:a4:44:56:1e:fe:4d:d6:66:d5:eb:50:
61:90:53:19:b3:0e:13:29:b8:ad:f4:d2:80:43:6b:
14:d6:20:2e:4b:d2:8c:b1:36:59:6d:0a:43:54:19:
5d:c6:a4:cf:90:80:7d:88:d4:65:77:9e:0d:5b:9d:
84:cf:dc:38:f3:d7:31:c1:cf:35:60:08:87:7b:31:
0b:a9:53:4b:82:60:ce:39:2d:1f:7f:71:53:6f:2b:
0a:bd:58:67:f9:a4:c6:d2:86:dc:94:30:27:b9:5d:
23:20:c5:18:65:bc:55:e9:fe:3d:65:e4:ba:73:96:
ea:e9:d8:7d:02:51:75:6f:9e:6c:bf:66:bd:a5:a7:
19:44:d0:14:ff:d1:8f:af:0b:2a:e9:28:35:68:77:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:98:C0:30:1E:AA:B0:28:B8:5B:CA:1D:6C:14:F7:16:6F:9E:46:9E
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0d:e6:1d:f8:e1:46:c4:af:68:e1:3c:0f:f0:a5:dd:25:e7:
19:fe:0c:ac:fc:90:9e:d9:1f:a8:dd:37:ef:dd:81:2c:2e:86:
8c:f2:ff:fc:5a:b7:0a:99:50:a0:75:bd:fa:cf:25:c5:de:12:
33:44:17:39:f0:f2:cf:6d:45:1c:e7:4d:35:7d:dc:58:bb:76:
cc:fd:5d:3e:32:8a:51:ed:71:a1:cf:5a:6e:d6:c0:7f:58:91:
ee:26:13:8b:9c:1c:ad:ee:7b:36:c2:8d:d8:df:2a:75:b3:31:
04:91:3b:db:0c:a8:e1:fd:6a:39:2e:11:f6:bf:50:2b:8d:98:
4b:ae:5d:a0:10:5d:c3:7a:2f:d9:d5:67:94:0d:a4:73:61:2b:
f8:c1:af:77:e7:21:97:2c:1d:10:0b:9a:be:a4:dc:80:01:ea:
05:bc:a5:b6:bb:e4:6a:66:68:e1:51:02:18:54:d4:2b:06:8c:
b9:a2:1b:30:2b:bd:c0:a4:35:f9:9f:1f:99:0c:63:68:f1:7d:
c1:ec:31:1b:55:a0:1a:67:66:9a:73:42:19:0f:14:3e:cf:45:
fb:06:de:f6:8e:79:57:8f:a7:3a:32:1e:56:72:22:4f:06:f0:
7b:fc:81:75:fd:9d:50:fc:00:c4:32:2b:99:72:d7:13:71:2f:
27:73:9f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:21:18 2026 by rpki-client