Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.mft
File: hSOM5-r2mlui8JR7K6BTOUtFts0.mft (raw, json)
Hash identifier: WB9g51C5uMEFBfIW9suV0GyvP24NLbXnC2kU5UInjyw=
Subject key identifier: 6C:C6:BB:D4:62:B0:FF:09:82:06:AB:F0:CF:0C:C6:FC:1C:EE:56:97
Authority key identifier: 85:23:8C:E7:EA:F6:9A:5B:A2:F0:94:7B:2B:A0:53:39:4B:45:B6:CD
Certificate issuer: /CN=85238ce7eaf69a5ba2f0947b2ba053394b45b6cd
Certificate serial: 01A12FC67297C02852761A250D2189084155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSOM5-r2mlui8JR7K6BTOUtFts0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.mft
Manifest number: 1A2E
Signing time: Mon 12 Oct 2026 11:01:36 +0000
Manifest this update: Mon 12 Oct 2026 11:01:36 +0000
Manifest next update: Tue 13 Oct 2026 11:01:36 +0000
Files and hashes: 1: 9WDzni9fLgS4Y1Z4NykfP7TpMa0.roa (hash: tKJRFaY2YcR7s8GJcJFATvbLWJiSSXElLCi1btrAeAw=)
2: hSOM5-r2mlui8JR7K6BTOUtFts0.crl (hash: aq7vXeqa7w+j1kPhBUQ4G9RaWz/OJopXFdHgzXecUSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSOM5-r2mlui8JR7K6BTOUtFts0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c6:72:97:c0:28:52:76:1a:25:0d:21:89:08:41:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85238ce7eaf69a5ba2f0947b2ba053394b45b6cd
Validity
Not Before: Oct 12 11:01:36 2026 GMT
Not After : Oct 13 11:01:36 2026 GMT
Subject: CN=6cc6bbd462b0ff098206abf0cf0cc6fc1cee5697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:71:8c:ea:a4:57:fe:40:14:4e:51:96:c5:
91:c7:ac:1a:b2:e9:52:a4:08:f8:fb:e7:4d:00:22:
2e:54:aa:01:2c:cb:51:be:5e:dd:fc:93:4b:72:6e:
39:95:fc:0f:45:2a:2f:5e:22:69:c7:3e:93:9d:d3:
2b:7d:4f:f6:a3:70:95:36:8f:30:d3:b2:bc:89:6a:
55:98:7f:91:d2:e7:01:cb:fb:6e:35:52:44:1c:b7:
61:44:09:06:10:88:ce:7f:79:db:ec:2f:c6:fb:b0:
69:26:20:6c:e6:8a:51:ef:f9:5c:36:57:17:a4:a6:
03:74:b4:47:e8:06:06:2f:65:15:c6:e3:0c:a9:8f:
f3:55:86:09:a4:68:f2:20:a2:28:94:96:53:39:90:
dd:2e:dd:ae:ab:2f:1d:96:7f:85:3e:da:8f:0a:5a:
d5:22:e0:4a:1f:11:04:4e:30:54:d8:4e:d7:b8:c7:
5b:06:56:b1:c1:fa:28:84:ad:3d:dd:0b:b1:ff:71:
aa:ca:21:5f:5a:16:dc:c0:37:ff:2a:43:bf:f2:fe:
90:d5:99:be:d7:5f:e6:d5:04:ff:48:0d:5b:a4:59:
9c:a1:27:7c:ce:17:3b:05:19:f6:71:8e:22:78:17:
91:c6:db:65:71:ce:39:f8:73:57:1a:fb:ba:e2:35:
fa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C6:BB:D4:62:B0:FF:09:82:06:AB:F0:CF:0C:C6:FC:1C:EE:56:97
X509v3 Authority Key Identifier:
keyid:85:23:8C:E7:EA:F6:9A:5B:A2:F0:94:7B:2B:A0:53:39:4B:45:B6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSOM5-r2mlui8JR7K6BTOUtFts0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:02:b6:49:b5:e4:f3:48:e3:a3:e1:77:64:ed:2d:7c:47:1e:
45:a0:d1:21:3f:7e:f6:bb:cb:4d:58:ed:7e:0b:f8:c8:54:5c:
02:fa:73:0f:9c:21:d8:07:4a:48:2e:fc:05:42:4a:d9:d7:ec:
b3:5a:a3:d8:7f:f2:6e:84:02:61:40:11:1d:8e:7b:94:b2:05:
2f:b4:59:8b:75:42:2c:fc:21:92:f2:75:8e:d6:34:90:1c:77:
59:86:63:57:83:25:f5:ff:2f:ca:ae:5f:36:56:5b:8d:68:d9:
79:83:24:fb:14:26:92:73:82:7a:1c:7f:25:4b:6c:ca:fb:e2:
9b:68:28:d1:e8:8e:e6:ae:2a:64:e6:78:7d:39:c9:12:6b:85:
db:a1:57:c4:a9:e4:55:79:79:8c:44:24:87:97:ac:a1:fe:57:
10:e8:f1:8a:e5:2b:74:6f:fd:48:53:1f:bd:f2:6a:e8:c3:42:
2f:f6:58:90:5e:f5:da:de:bb:1e:a5:dd:b4:64:ac:0e:6d:a4:
1f:8f:66:2f:1e:5f:3c:9e:1d:65:c6:f7:d5:2c:9c:52:87:64:
e5:fb:b2:f3:da:dc:0f:86:42:f3:72:8d:82:39:d4:2d:99:15:
1d:08:3b:b0:de:ae:e5:28:4c:76:ed:d7:9a:bf:4c:4e:de:93:
1a:3b:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:35:17 2026 by rpki-client