Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
File: soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft (raw, json)
Hash identifier: MYS9eUPVjNrLkPKGWuuJ93AHIFFhXA8Ei4wFig871tE=
Subject key identifier: 24:3E:83:29:DC:1B:88:DB:99:03:14:EE:C2:60:F7:E5:53:A0:5B:5C
Authority key identifier: B2:84:CD:F0:50:74:43:E1:6E:50:9D:57:A2:29:E9:14:F7:35:66:A4
Certificate issuer: /CN=b284cdf0507443e16e509d57a229e914f73566a4
Certificate serial: 019CAAC658A2FE29A472D678FCE7936A1905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
Manifest number: 16EC
Signing time: Sun 01 Mar 2026 19:00:51 +0000
Manifest this update: Sun 01 Mar 2026 19:00:51 +0000
Manifest next update: Mon 02 Mar 2026 19:00:51 +0000
Files and hashes: 1: soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl (hash: DFf96xwvM1LEF6msNKLh8OhEQtPrNVj9klatBbx/eQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:58:a2:fe:29:a4:72:d6:78:fc:e7:93:6a:19:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b284cdf0507443e16e509d57a229e914f73566a4
Validity
Not Before: Mar 1 19:00:51 2026 GMT
Not After : Mar 2 19:00:51 2026 GMT
Subject: CN=243e8329dc1b88db990314eec260f7e553a05b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:b8:45:74:bc:1e:8c:80:59:61:c6:ef:3d:
10:23:43:83:0e:18:af:12:d1:89:22:e6:8e:01:32:
3e:ef:3b:45:62:ab:91:f0:62:c9:25:26:b3:ac:15:
f7:4f:6b:c8:04:8d:11:d0:91:a3:88:13:c7:0b:5f:
c5:63:ee:51:e2:6b:46:41:26:07:f2:11:0e:2f:5c:
d7:43:11:48:92:ff:7b:0d:1d:de:2d:40:33:38:1b:
09:f4:d2:d5:6b:10:75:e5:e4:db:5b:fa:30:db:66:
30:88:c6:6b:df:6e:4f:79:24:14:78:7c:ad:a1:33:
c1:a0:d3:c0:6a:3e:8c:21:07:7e:74:f4:f8:84:d9:
f2:8c:46:88:fc:ed:f8:da:52:e1:e5:ee:2c:d9:e6:
80:1f:c2:c7:2c:93:c1:b7:0c:4c:6a:6b:29:1c:aa:
7c:5b:fa:f9:e9:60:37:7e:89:f0:38:7e:f6:74:2d:
9f:43:5b:18:af:f1:45:9e:6f:4e:ac:e9:bd:47:c9:
ee:02:d8:08:00:32:6c:68:c3:20:51:94:e8:c8:f3:
af:b1:16:eb:6a:c3:fe:13:a3:d9:8d:7d:8e:e5:6b:
b2:dc:3f:a4:ca:6a:98:6d:18:f6:04:92:21:4f:32:
7d:fe:94:8e:d4:87:10:95:44:e6:37:3b:0f:cb:e8:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3E:83:29:DC:1B:88:DB:99:03:14:EE:C2:60:F7:E5:53:A0:5B:5C
X509v3 Authority Key Identifier:
keyid:B2:84:CD:F0:50:74:43:E1:6E:50:9D:57:A2:29:E9:14:F7:35:66:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:43:0d:6a:e9:81:4c:a6:23:ea:86:e7:d1:c7:30:40:2d:74:
5b:7c:f2:47:cb:4d:5d:3a:c5:a5:3b:aa:90:1b:8c:0e:48:f3:
03:27:e3:29:a1:4e:f9:59:2c:44:9c:fc:64:36:53:fc:75:34:
32:da:4c:ed:5a:85:0d:33:85:c2:8e:27:70:b3:1e:ce:2a:59:
f4:00:2d:21:bb:88:31:6c:e3:85:3b:0f:d8:6e:3f:52:e1:e5:
ca:29:de:04:87:b0:1f:35:97:d0:fe:1f:d5:fa:41:cc:53:e7:
57:c1:b3:9e:fd:09:9e:59:78:01:97:5d:34:6e:d6:39:b4:37:
60:e0:55:c9:5f:49:6c:12:be:57:c6:c6:4f:8d:ff:dc:97:bf:
26:87:86:cd:7a:70:9a:1b:8b:09:75:78:75:98:9d:51:6d:88:
90:38:9c:8d:f0:35:cc:a6:27:fe:a5:ed:e7:c3:71:7f:0a:2a:
03:6d:6e:65:2e:a8:34:80:65:80:7c:0a:c9:25:35:ea:f9:d3:
9a:14:6a:a8:0b:c2:9e:60:54:ff:8d:aa:7b:ce:c7:b1:25:63:
46:9f:74:1a:20:bb:50:81:9e:38:14:06:b5:23:75:dc:b9:7c:
aa:31:02:09:34:83:4c:47:69:90:1d:55:f9:cc:7e:40:37:38:
f1:f8:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:59 2026 by rpki-client