Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: 3gg4swJZSGSJNHntLxJ3l3YHxYR9yZm5fOIH6u0yZ3s=
Subject key identifier: 90:66:D6:E9:E9:2C:57:0D:B8:3C:72:E1:79:1F:AB:72:ED:3A:32:6D
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 01A1DF4BE6927037144148943C0D8C2A02E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 1AFD
Signing time: Sun 15 Nov 2026 13:00:55 +0000
Manifest this update: Sun 15 Nov 2026 13:00:55 +0000
Manifest next update: Mon 16 Nov 2026 13:00:55 +0000
Files and hashes: 1: IpvtiB3ivhePmqqAbbVhFnX59zM.roa (hash: nW14dlZ+CXYt/syhRcngrlG7SAwArRMiAFD3SIPI6y8=)
2: XHqGlYDi_YYXP4_bxjxB51I_9sQ.roa (hash: JyJR1xe42ML2605S9E5QIfVP6eKECWWSWZ+zCzoVYQE=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: zRN1FTs0RhVHkFnS4lzq2WAgLbmrRQOduDf+kIOUf1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4b:e6:92:70:37:14:41:48:94:3c:0d:8c:2a:02:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Nov 15 13:00:55 2026 GMT
Not After : Nov 16 13:00:55 2026 GMT
Subject: CN=9066d6e9e92c570db83c72e1791fab72ed3a326d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:49:f5:37:54:08:a5:d8:eb:bc:8c:cc:36:
bb:5a:3f:6c:5c:83:3d:bb:5a:e1:71:07:28:02:3c:
c6:32:d2:90:10:59:76:bd:56:ee:69:f0:1e:bf:9e:
a1:b9:76:1f:1d:e4:46:af:68:d8:f9:a4:51:98:12:
19:3b:0d:94:26:2f:e4:be:42:48:9c:7d:0f:db:d5:
80:59:52:70:ef:35:bf:79:94:f2:53:e4:50:e7:12:
71:24:ef:ae:7b:98:38:ea:c1:e8:b4:1b:7f:9b:2a:
ba:26:bc:57:5d:64:82:50:f6:2e:5d:70:b6:a4:ec:
4b:57:75:13:c7:41:db:5c:aa:7c:9b:35:5b:e1:ff:
d5:93:35:aa:f0:64:08:24:fe:dd:87:16:79:84:6e:
6b:5f:84:83:da:3a:eb:c5:4a:b3:26:1a:2e:1f:45:
0f:74:b9:98:45:c3:3c:92:69:8b:6c:7f:23:8e:b8:
98:c8:45:18:6a:85:ba:e8:88:e4:92:87:cd:47:b5:
0a:b0:61:91:da:8e:a1:b1:fb:ba:69:11:cf:7a:de:
ac:c0:18:01:41:23:9c:ec:9b:7e:8a:94:ae:e4:25:
6c:e7:15:94:1d:28:39:0e:6d:30:a6:1f:0d:d9:f5:
4c:e6:f9:30:95:6e:ac:bd:27:17:5a:07:44:99:98:
5f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:66:D6:E9:E9:2C:57:0D:B8:3C:72:E1:79:1F:AB:72:ED:3A:32:6D
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2a:85:71:55:dc:cc:ff:ec:fa:72:9a:3a:e7:13:da:f0:c6:
f7:43:b4:82:75:12:45:a0:e4:fa:a1:c8:03:82:a0:6c:63:f1:
5c:c6:9c:fd:c4:21:a5:2a:7b:99:40:ff:99:52:54:a2:6b:30:
7e:38:aa:05:27:14:4b:79:ee:92:44:de:bb:9b:fa:fc:16:81:
e8:95:90:58:64:22:41:39:96:27:53:74:95:8b:3b:19:f8:db:
cd:cf:a6:c5:20:66:73:4a:49:86:5c:1b:5c:af:ab:5a:18:93:
9c:cf:0c:63:99:d6:27:92:8b:64:e8:a3:46:51:16:04:bd:bf:
70:f3:fb:82:24:0f:2b:21:29:6d:bf:7d:28:da:e8:c1:2e:34:
0e:61:7f:f7:7a:74:a4:23:8a:66:68:e3:2a:7a:ba:a6:4f:f5:
57:10:cf:e3:de:6d:31:6e:ef:0a:d7:2c:01:6f:6e:fe:bc:01:
0c:9b:2e:ea:e1:c3:c6:34:9d:11:c1:9d:10:e7:87:48:d7:5a:
a6:f4:31:9f:0a:2e:98:61:3d:e9:0d:e8:3f:34:2f:8c:2c:b8:
73:c5:f1:26:d2:d7:3f:63:ec:6f:99:4e:98:28:2e:2d:b2:1d:
56:20:d3:23:a0:54:48:9b:9a:9c:64:59:68:ef:0e:a1:38:13:
01:a2:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:51:33 2026 by rpki-client