Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
File: SoPufcwyg3sLpbiR2PFFQ1qztgo.mft (raw, json)
Hash identifier: zgreln7VQ3BePfI/rSbHbx+f6ViZLzXo/I+ZYrNcJYA=
Subject key identifier: 53:3E:B3:ED:95:66:75:E2:D5:B5:C4:36:B3:A2:88:FF:B9:E0:D6:F0
Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
Certificate issuer: /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Certificate serial: 01A0DA964279E0941A5402AF15871389228C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
Manifest number: 147B
Signing time: Fri 25 Sep 2026 22:01:15 +0000
Manifest this update: Fri 25 Sep 2026 22:01:15 +0000
Manifest next update: Sat 26 Sep 2026 22:01:15 +0000
Files and hashes: 1: SoPufcwyg3sLpbiR2PFFQ1qztgo.crl (hash: JRvW1FohZlt9Y0ev07p1iDB/wBBy4ySd+SdIt/2OIZg=)
2: leys0pjSHL9YEW5sO6ANqpFFx5c.roa (hash: 9zF4zBfFF8tKINoW83chdjLm5f+mKJMMW9YkTlJDR08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:42:79:e0:94:1a:54:02:af:15:87:13:89:22:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Validity
Not Before: Sep 25 22:01:15 2026 GMT
Not After : Sep 26 22:01:15 2026 GMT
Subject: CN=533eb3ed956675e2d5b5c436b3a288ffb9e0d6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:4c:57:9e:a5:13:df:61:16:48:04:11:97:
a2:5e:40:8f:22:82:63:69:d0:44:86:7e:35:d3:a1:
0c:e7:a1:48:58:ab:dd:c2:6a:f7:22:5b:7b:b1:0e:
98:34:80:8b:ae:59:01:4d:0d:11:0b:90:ea:5d:ca:
3c:2b:ff:db:0e:7c:d8:1f:56:bd:fd:4a:02:81:8d:
de:40:c7:5f:f7:3f:52:e1:4f:c3:e5:a2:89:92:32:
fc:57:4e:06:4b:fa:a1:93:5b:d2:52:d4:17:71:05:
78:6e:bd:74:62:4f:70:7a:3b:70:31:0c:38:9f:61:
4a:09:a3:e6:42:33:45:c4:3f:7f:07:40:86:5b:9a:
19:db:f6:0c:ce:c7:07:17:c5:67:59:1f:7b:2e:84:
48:0f:d6:c4:58:8d:8e:a7:7d:e2:61:7c:04:6d:b8:
ee:7d:c5:73:44:73:c3:97:9a:b3:4a:9f:68:d4:ea:
d0:1d:8e:ab:b1:93:c6:95:d0:7c:b9:4b:f7:07:ba:
78:b3:74:d1:a2:ec:4a:10:b4:c6:8b:87:f8:57:52:
f8:59:71:45:2a:b9:78:e7:21:35:29:be:75:06:19:
41:43:d2:a9:8e:7a:27:ce:2d:38:60:ec:4d:02:40:
4e:46:15:80:7d:b9:ad:3f:d4:f9:55:f7:43:eb:2b:
b3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3E:B3:ED:95:66:75:E2:D5:B5:C4:36:B3:A2:88:FF:B9:E0:D6:F0
X509v3 Authority Key Identifier:
keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b6:4d:f1:fe:24:be:5f:6a:bf:da:5c:68:54:76:aa:1a:a6:
f1:86:7b:f0:c7:20:25:9a:e3:df:46:32:47:fe:fa:b0:90:06:
02:60:41:7b:94:ab:ca:3b:ec:b9:b2:45:92:c8:b4:fd:fe:31:
64:69:7f:83:44:9f:ab:f7:c9:6d:9e:8a:1c:fe:36:82:db:0d:
e6:67:04:21:c1:4d:92:a2:3b:63:bb:86:d1:fa:86:d6:56:83:
9c:c7:54:29:5d:38:63:aa:1d:4a:d8:e8:8b:b0:5e:4d:d8:fa:
6d:9c:a4:cb:bb:13:74:f5:cd:d3:c5:c6:71:c1:21:4c:39:35:
5c:33:31:50:b3:d6:32:8b:03:9b:d9:e5:f0:7c:f1:0a:c9:2e:
b9:69:b2:2c:08:59:9e:32:e2:a5:92:82:28:d2:31:54:c0:77:
84:66:ba:4b:80:7e:c5:bf:1e:6c:8d:47:8d:6e:e5:5d:97:48:
c8:01:bc:1b:f3:60:de:09:d1:ac:09:b8:c4:86:6f:31:a3:2a:
84:58:97:5a:4e:c4:7b:56:75:d3:a2:fa:a2:6e:03:f7:a2:2d:
09:58:49:6e:5c:1d:f1:42:b2:1a:1d:13:0d:66:08:ba:2c:8f:
7c:78:8a:c3:67:91:01:2f:4e:75:f3:51:e4:d4:84:d1:a3:d8:
ff:90:ad:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:29:18 2026 by rpki-client