Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
File: soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft (raw, json)
Hash identifier: qI2cfTT6VcqvZMMV5uwExXk1/CKpyoXkyWYO3jvMY7Y=
Subject key identifier: C8:C7:83:7A:AF:A6:CA:C6:A5:25:81:88:95:47:14:6E:E8:FB:49:12
Authority key identifier: B2:84:CD:F0:50:74:43:E1:6E:50:9D:57:A2:29:E9:14:F7:35:66:A4
Certificate issuer: /CN=b284cdf0507443e16e509d57a229e914f73566a4
Certificate serial: 019D9A3DF1AC9B4A67E24D67333A6C3C79A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
Manifest number: 1768
Signing time: Fri 17 Apr 2026 07:00:43 +0000
Manifest this update: Fri 17 Apr 2026 07:00:43 +0000
Manifest next update: Sat 18 Apr 2026 07:00:43 +0000
Files and hashes: 1: soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl (hash: Sf7yITtkduQ8j92c1/F+cS7okul9aNmZGLEFMQHnVOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:f1:ac:9b:4a:67:e2:4d:67:33:3a:6c:3c:79:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b284cdf0507443e16e509d57a229e914f73566a4
Validity
Not Before: Apr 17 07:00:43 2026 GMT
Not After : Apr 18 07:00:43 2026 GMT
Subject: CN=c8c7837aafa6cac6a52581889547146ee8fb4912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:a4:6d:66:de:98:0c:ec:ca:4a:2f:56:c8:
1b:2d:f1:3d:df:f5:f2:52:14:1a:e5:9d:58:45:cf:
a1:da:10:af:ec:f2:df:71:a1:1f:4d:40:26:4e:3e:
0f:72:11:cb:f0:eb:f5:8f:fd:fb:f2:f2:9d:2e:bb:
34:e7:e8:6e:c3:5e:fe:69:63:d7:11:96:f5:db:87:
b1:69:04:08:a3:0a:e0:f1:ba:81:f7:9f:1e:2e:26:
3a:cd:e5:37:94:6a:40:37:8a:4f:52:94:ad:18:f4:
01:fa:df:6f:85:b6:39:4c:95:6a:2c:92:43:61:e4:
53:86:52:13:c3:39:41:89:63:83:05:a9:33:e1:03:
c3:1a:89:ac:f9:13:56:03:4d:3e:f5:ae:ba:f5:b4:
4d:43:6c:81:7a:00:78:07:f4:09:90:95:a9:a9:36:
aa:75:f0:fd:25:a0:cb:58:e7:d6:18:3e:e9:7b:a8:
83:b1:7d:ae:6e:a4:51:e5:e5:68:e5:3b:e1:21:a1:
56:f3:a7:01:c9:ce:b6:a4:07:9d:95:89:eb:bd:4a:
46:e4:8e:c4:f8:29:0a:ab:5d:c6:2b:6d:fb:a5:1d:
78:3d:97:12:70:ee:f2:5d:f5:5a:3b:ce:79:19:2d:
cd:0e:a1:1e:54:a8:9c:e1:4f:84:43:68:37:c2:08:
30:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C7:83:7A:AF:A6:CA:C6:A5:25:81:88:95:47:14:6E:E8:FB:49:12
X509v3 Authority Key Identifier:
keyid:B2:84:CD:F0:50:74:43:E1:6E:50:9D:57:A2:29:E9:14:F7:35:66:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b1:5e:6a:37:7e:db:9e:6d:b0:6d:a7:eb:ad:29:de:95:20:
e8:44:81:be:f6:5d:57:5b:74:30:c8:4a:5d:1f:06:1a:43:98:
bc:3c:eb:79:2b:d6:a7:6d:c0:66:d2:51:60:23:5c:d7:17:28:
93:4c:57:ec:46:39:12:72:34:c0:3b:68:c7:cc:e9:63:71:ad:
2e:c2:4d:28:89:b6:6a:e3:43:a1:f4:c3:73:ac:7d:d6:f0:e9:
13:d4:6b:21:af:a8:04:ab:c9:9e:38:c7:2e:b4:2e:da:76:cb:
1b:f6:5a:ac:c0:57:09:34:09:cb:01:7e:8a:40:56:24:c2:47:
ee:c4:d1:91:f9:fa:38:4f:eb:89:97:52:1e:36:ee:c1:4d:28:
ee:29:e5:5a:b6:22:52:3d:bf:cf:45:c3:de:7e:d5:46:84:cd:
b6:46:08:8c:a8:8e:93:ab:8b:99:bb:e4:3a:56:33:cd:9a:6b:
e6:c5:8d:d7:eb:fe:fc:90:17:0c:44:1a:b8:23:01:0e:5a:0f:
12:68:c8:42:29:5f:ee:61:6c:eb:d4:17:06:a0:49:0a:42:4a:
5b:73:aa:38:86:84:b3:aa:21:07:e4:46:dc:cc:f3:bb:6f:09:
68:24:22:eb:e5:da:79:77:0a:32:c8:49:73:23:6c:86:ce:92:
0c:ff:22:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:23 2026 by rpki-client