
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
File: SoPufcwyg3sLpbiR2PFFQ1qztgo.mft (raw, json)
Hash identifier: CgNAvTWTMy/5170y9jkYq5Nrt5m1JbJYH2RoI33LulA=
Subject key identifier: AC:90:85:CC:21:AC:F8:1D:4B:92:DF:2B:92:55:6C:A1:49:84:23:AD
Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
Certificate issuer: /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Certificate serial: 019D9850B103FFE420DEBAAAEA4EE36A449F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
Manifest number: 12CB
Signing time: Thu 16 Apr 2026 22:01:58 +0000
Manifest this update: Thu 16 Apr 2026 22:01:58 +0000
Manifest next update: Fri 17 Apr 2026 22:01:58 +0000
Files and hashes: 1: SoPufcwyg3sLpbiR2PFFQ1qztgo.crl (hash: 00sycWD/pd2aqEoaUiNReQyUe5A/4GIo3IlxwirMV8Y=)
2: leys0pjSHL9YEW5sO6ANqpFFx5c.roa (hash: 9zF4zBfFF8tKINoW83chdjLm5f+mKJMMW9YkTlJDR08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:b1:03:ff:e4:20:de:ba:aa:ea:4e:e3:6a:44:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Validity
Not Before: Apr 16 22:01:58 2026 GMT
Not After : Apr 17 22:01:58 2026 GMT
Subject: CN=ac9085cc21acf81d4b92df2b92556ca1498423ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:f8:86:f1:5c:dd:7d:b4:3b:58:83:1c:d8:
de:bd:f8:42:b5:56:f4:05:e6:52:c5:10:59:73:cb:
e6:71:d9:22:87:d4:ce:04:df:74:11:d3:93:d9:c4:
5d:6b:d4:02:6f:57:38:87:f7:ad:a4:1b:a1:b1:33:
4d:cf:59:16:ba:74:9f:0f:3e:8c:42:75:64:60:fd:
37:88:0f:8e:bf:1c:ec:b1:15:b5:86:d9:49:03:13:
4a:95:15:32:e8:0d:1c:ad:4f:a0:c2:00:5c:a1:88:
87:df:d1:0d:98:8d:9d:91:d3:cc:9b:8a:b3:19:02:
f5:4f:27:c2:fa:55:81:3d:79:3f:f7:d1:28:9a:db:
a0:34:b5:30:7e:f9:54:74:e6:72:da:e1:16:3e:cf:
b3:d1:73:40:8f:7b:49:2b:cb:a9:4e:3f:ce:ba:3f:
ea:26:30:72:4c:a3:be:de:b5:8a:a6:5a:7d:44:c9:
68:c8:a6:4c:d8:0c:d2:b6:cb:eb:a6:c8:be:1b:0f:
30:89:2e:aa:4a:7d:00:a9:7a:66:7f:32:15:2f:66:
18:7a:ea:67:d3:40:0e:65:5e:77:3d:88:18:d3:99:
10:c0:35:13:2d:3d:0f:ea:1f:72:1d:a9:3f:e8:10:
16:35:c6:a1:f2:40:45:23:a8:ea:5a:c3:f2:b0:d9:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:90:85:CC:21:AC:F8:1D:4B:92:DF:2B:92:55:6C:A1:49:84:23:AD
X509v3 Authority Key Identifier:
keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:74:29:93:75:66:e3:a2:af:34:05:51:1b:21:88:d9:30:ff:
c4:15:e9:40:2c:ac:3a:0a:eb:b2:a8:ec:c6:e4:af:0a:cd:c9:
e2:11:45:96:eb:f8:0f:db:fc:54:0b:9b:d3:18:55:16:51:8f:
0f:e6:bd:83:c8:f7:12:0e:88:9c:04:bf:74:42:ec:9b:21:ab:
e2:41:18:e4:81:09:0c:5d:ca:c8:7d:1e:20:c6:ca:f4:56:04:
3b:56:89:41:d1:dc:33:26:cb:5c:7b:24:00:93:74:75:83:6e:
7e:6e:a9:59:9c:aa:60:4c:76:10:60:34:3b:8e:3d:fc:74:a2:
40:99:e8:64:32:3e:eb:d7:ea:df:46:ba:6f:ef:4b:10:41:ba:
95:5d:da:0a:53:ce:a4:36:1c:fb:35:be:e1:6d:ae:0c:9f:75:
2f:06:46:df:0d:6c:12:b3:69:90:e1:69:f8:06:c0:97:b8:a7:
a9:e0:ac:5e:01:d1:df:a3:df:9c:f2:31:cf:53:4c:91:a4:ae:
4b:5d:39:a5:11:31:a6:d8:31:d2:52:5e:82:14:12:e6:92:94:
05:b0:81:53:25:f4:3f:c0:61:11:45:c6:5b:10:e9:b9:91:58:
28:7c:29:d9:df:2f:bb:2a:9e:3f:75:64:60:12:d9:c8:d0:71:
0f:9e:f3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:08 2026 by rpki-client