Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
File: Sojzq5SgdYciDj1xb3txffHZ5tY.mft (raw, json)
Hash identifier: 6nwlDa0mUIpahWSwyIqU1ZLeqySmNA4DvMNJKHBfaP0=
Subject key identifier: 37:D6:E9:27:D1:A0:41:DD:65:EE:84:67:0B:47:22:BD:00:0D:56:8D
Authority key identifier: 4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
Certificate issuer: /CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Certificate serial: 019D9A750D6F250434E82550E7425B1B24DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 08:00:55 +0000
Manifest this update: Fri 17 Apr 2026 08:00:55 +0000
Manifest next update: Sat 18 Apr 2026 08:00:55 +0000
Files and hashes: 1: Sojzq5SgdYciDj1xb3txffHZ5tY.crl (hash: I9cnHF2RRJFtau7O5JFErvb+XbGkvKXWdgm561exQpA=)
2: _BierKqkbKF0322RypaPacK7rIc.roa (hash: ISjKL5qyY3D+UsNMMYXT9NMFhkS06ZSrlsMwCxHPEqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:0d:6f:25:04:34:e8:25:50:e7:42:5b:1b:24:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Validity
Not Before: Apr 17 08:00:55 2026 GMT
Not After : Apr 18 08:00:55 2026 GMT
Subject: CN=37d6e927d1a041dd65ee84670b4722bd000d568d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:56:f6:a7:35:9f:d9:91:89:b3:e0:d9:4e:3c:
ab:bf:d8:93:09:63:cc:2f:1f:cc:e1:5f:ec:3a:38:
29:73:97:f9:df:2d:29:45:0e:df:ab:c0:f4:c8:79:
7c:7b:a3:14:62:48:e0:88:b8:ec:27:76:73:14:cd:
0f:5d:dd:36:27:7a:fd:c4:46:c6:28:e6:b3:ff:8b:
8f:d1:b8:12:eb:25:3e:9f:6a:19:35:12:26:90:73:
30:d2:bc:48:e5:e3:ce:87:cb:13:97:dc:76:96:57:
61:27:cd:36:e7:30:a5:fc:dd:29:d0:d9:58:3d:ff:
f3:48:ad:b6:5a:d0:3c:cf:a9:1d:ed:5a:b0:90:87:
43:fa:51:df:19:c3:7b:5b:6d:04:62:5d:45:25:3b:
c3:97:ad:8d:c8:ea:a5:29:0a:5d:2c:e4:88:6c:3d:
01:3c:f0:ff:3d:1d:87:1a:8f:e3:04:3c:3f:e7:de:
24:f4:8f:60:9d:93:98:8f:80:99:26:fb:a4:ae:39:
b0:6d:b0:d3:b1:91:f5:ad:29:ac:54:4a:46:a9:70:
c3:7d:5b:2d:e3:eb:29:bc:78:65:dc:6d:a0:b7:54:
a8:61:1d:72:d1:d6:97:1f:c2:72:e3:f6:45:f2:d0:
0e:37:ae:c8:c0:77:2c:b2:ce:0b:99:14:74:41:8d:
3b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D6:E9:27:D1:A0:41:DD:65:EE:84:67:0B:47:22:BD:00:0D:56:8D
X509v3 Authority Key Identifier:
keyid:4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:47:0b:4e:e4:53:81:c8:3c:c0:78:46:3d:83:83:f5:24:e2:
22:d6:33:ff:e0:07:29:f1:ac:e9:4e:78:b7:d8:b2:cd:33:82:
3d:62:ec:17:71:f0:71:25:08:6c:bf:87:76:ff:a9:96:1c:a2:
76:0c:04:1e:00:7f:70:b4:8f:46:65:03:37:7e:8c:cc:58:32:
16:0f:a7:21:3e:ef:e4:30:39:6e:2a:47:86:c9:09:f5:0e:bc:
8c:2a:db:12:ba:9f:a6:b3:16:a6:71:c6:d3:aa:ff:9a:58:ed:
44:c7:52:2a:78:3b:68:a8:7b:cd:f1:fc:4d:e1:4b:7a:ce:58:
39:69:f2:47:5d:c4:fa:0d:3c:c6:e9:b6:ce:b1:5e:39:a6:a3:
fc:58:17:a3:f6:22:49:5a:db:ac:9a:79:75:3a:be:57:c0:02:
e1:93:6e:0b:3f:84:b4:5e:b7:ea:4b:17:45:dd:6b:ce:f5:04:
1c:38:0a:f1:46:ba:2c:73:6e:30:a2:88:80:17:34:df:85:48:
b9:22:a1:75:20:17:ae:98:85:26:4c:13:48:aa:65:a5:e2:f6:
08:a9:89:75:ab:f9:35:f6:3e:b4:22:07:70:bb:89:8a:89:c7:
0d:56:81:be:bd:d2:66:2f:51:d2:76:d8:23:01:e8:b9:62:52:
43:46:6f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:22:05 2026 by rpki-client