Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
File: Sojzq5SgdYciDj1xb3txffHZ5tY.mft (raw, json)
Hash identifier: G8DB1VB/Pclq3axO5UJIPb17XaHAynuZS0F8ZxrQB30=
Subject key identifier: 17:B8:96:3F:87:9B:6F:ED:97:34:DF:97:2B:18:BC:60:98:14:54:8C
Authority key identifier: 4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
Certificate issuer: /CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Certificate serial: 019CACEBA347D97DB646AEE19D6F9AE66B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 05:00:49 +0000
Manifest this update: Mon 02 Mar 2026 05:00:49 +0000
Manifest next update: Tue 03 Mar 2026 05:00:49 +0000
Files and hashes: 1: Sojzq5SgdYciDj1xb3txffHZ5tY.crl (hash: ErvsvNcSSRWM3ikbkYl8AgkIv1B9zi6zk/DNK7HVAOg=)
2: _BierKqkbKF0322RypaPacK7rIc.roa (hash: ISjKL5qyY3D+UsNMMYXT9NMFhkS06ZSrlsMwCxHPEqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:a3:47:d9:7d:b6:46:ae:e1:9d:6f:9a:e6:6b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Validity
Not Before: Mar 2 05:00:49 2026 GMT
Not After : Mar 3 05:00:49 2026 GMT
Subject: CN=17b8963f879b6fed9734df972b18bc609814548c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:b2:ce:7d:01:36:05:ef:db:cd:93:00:81:
c0:cb:6c:73:9a:73:3f:24:9a:d9:26:7b:d3:cc:a6:
2c:86:aa:38:d0:94:d8:7b:2b:3b:ef:4b:8d:b1:53:
5c:e1:d4:39:9a:02:a2:7e:33:6f:c2:b6:41:8e:e1:
22:1f:6b:52:10:7f:a7:30:22:4d:5c:33:1e:2d:49:
86:11:28:8c:04:27:25:8a:9e:0f:d4:e0:ac:96:a0:
8a:0e:c4:ee:8e:92:76:51:c0:17:9b:9e:31:e6:14:
f0:fa:f0:a7:93:10:ca:d4:bf:50:84:c7:0e:df:e6:
42:bb:a7:79:e9:0b:9f:69:ab:23:42:0b:7f:82:aa:
6a:be:9a:fc:33:e4:39:fc:2a:4d:c7:ed:2f:bd:67:
90:e5:55:f9:95:94:66:4a:9f:80:08:98:79:3e:c2:
ef:d8:d9:16:fc:04:cf:7e:03:87:58:b8:6f:c0:6a:
a2:c7:66:d2:ee:f5:e3:1e:ab:50:20:21:9d:46:fb:
a5:5a:1d:13:00:78:95:50:0e:57:71:8e:e2:10:c6:
71:a6:aa:95:44:14:48:fc:19:93:c2:98:d1:60:1c:
cf:de:c8:09:74:2b:5d:23:cb:1b:3e:f4:82:5e:25:
e3:3b:86:ff:01:ff:e9:05:d5:ca:6b:fa:05:e6:4a:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B8:96:3F:87:9B:6F:ED:97:34:DF:97:2B:18:BC:60:98:14:54:8C
X509v3 Authority Key Identifier:
keyid:4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:04:a6:b4:75:b7:20:1a:12:54:1f:ca:7a:50:c5:c6:f5:74:
9e:85:20:d7:3e:95:07:39:a4:b6:b2:6b:47:9d:7b:f0:57:be:
b9:6d:46:a2:17:b1:a4:a0:79:c7:f5:83:76:e8:73:a0:64:fa:
fd:52:c8:97:a8:14:46:0a:43:a4:5e:76:4d:6e:c8:82:28:54:
81:f5:ea:11:eb:b3:5d:26:58:2f:67:0c:62:72:c2:13:0b:ce:
f1:69:3d:71:3b:62:31:0a:07:9c:18:1c:b0:bc:0d:1f:35:7b:
db:a0:0d:b1:2f:a7:a9:cb:93:92:ae:9a:6f:78:db:fe:01:6a:
c0:6f:35:3b:d1:c0:f4:a2:f2:c0:f3:25:a6:96:bf:72:e4:ac:
14:64:38:95:8c:08:da:8d:cc:ba:ee:70:2c:bc:dd:63:b6:da:
17:19:55:81:4a:33:da:0d:c6:7e:38:dd:5f:9f:2c:a8:a2:9c:
70:78:c0:8c:6a:ff:46:94:cd:d9:58:22:31:e7:da:62:93:fb:
fa:68:e2:24:c5:e2:6b:d0:35:5e:e7:99:a6:de:82:22:1f:c2:
d6:c2:3b:e3:8f:f5:d7:b7:72:5e:e9:7f:61:82:53:49:39:b6:
7e:4c:0f:00:14:5e:88:6e:98:9d:db:c1:38:19:b8:06:8b:85:
00:a1:ec:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:41:11 2026 by rpki-client