
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: P7Tj7teTv5tg3+yo/QYssJEEpRTz+NfjyVibjiTim04=
Subject key identifier: 70:9A:1E:91:CE:31:16:78:D2:74:94:79:28:B7:9C:42:A5:F7:0E:23
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 01A0D570237548DAEDED1566052AB7D0000F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 1A82
Signing time: Thu 24 Sep 2026 22:01:31 +0000
Manifest this update: Thu 24 Sep 2026 22:01:31 +0000
Manifest next update: Fri 25 Sep 2026 22:01:31 +0000
Files and hashes: 1: Eid3d62YnxHe5Y2-V0Bh36ut8zk.roa (hash: INOU1pQ7jEMWCkd6rFZSFopLqyhhp2Ctyc6t0sEfFdA=)
2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: Gvej+vdUG3ClU81a4o+X3lLmhZk9Je/pvtUE17fkRKY=)
3: nnLnTcVXO544vHFcYVwBAQxMeQo.roa (hash: SFOznpvXz/JoSjUg8z9TzNGJVZ8Y7Eg8GWV4zl8aNrY=)
4: v980U-h91dgOwXDSBh4k-i7QAt0.roa (hash: C5VY2sj93F7Cq2/ofd1slgZ2bbIgYdzNTiYM2XjNUXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:23:75:48:da:ed:ed:15:66:05:2a:b7:d0:00:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Sep 24 22:01:31 2026 GMT
Not After : Sep 25 22:01:31 2026 GMT
Subject: CN=709a1e91ce311678d274947928b79c42a5f70e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:e8:9f:53:21:e7:9e:2e:3e:9c:60:55:7a:
be:c6:0f:16:0f:5f:f6:6f:fe:7e:7a:46:5b:32:be:
27:91:64:87:dc:9a:6b:e8:fd:55:54:2f:33:20:a1:
6d:14:51:50:93:d5:5d:d4:74:be:3e:c6:ab:8e:36:
a4:c0:17:df:ab:41:2e:2d:34:bb:7f:f2:82:a5:ba:
05:35:67:8d:3c:66:91:20:aa:ee:72:91:92:7b:99:
4b:96:00:b5:82:a2:63:64:a0:0b:02:76:0f:2c:c6:
0a:32:7d:e9:cc:b1:b9:e6:13:6a:94:5f:bf:39:af:
fc:37:de:3a:d4:24:f0:8b:58:8a:f9:53:47:83:9a:
61:f9:c8:7d:a1:60:49:f4:97:ca:d9:09:d0:65:c8:
c1:f3:05:3a:b7:08:bc:bd:29:28:fc:85:0d:8f:65:
10:17:fd:c5:d6:17:a8:b4:a1:06:9c:44:b6:2c:1d:
8c:46:54:c0:06:19:c6:d3:24:2b:98:10:7d:8e:46:
76:a2:9c:0b:9d:c5:89:18:1a:e9:b3:b7:58:71:70:
f9:3d:73:c9:52:cb:54:d8:62:7c:22:23:d9:96:4e:
85:3f:8a:b6:0e:75:87:0f:35:51:a3:ec:87:76:df:
59:e1:c6:ae:9e:1b:40:e0:a3:35:d1:8e:98:e8:56:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9A:1E:91:CE:31:16:78:D2:74:94:79:28:B7:9C:42:A5:F7:0E:23
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d0:db:03:b2:e0:c4:26:2d:54:b1:1b:e4:90:58:e8:27:a5:
3c:96:43:70:46:5c:47:f1:96:d1:be:cf:9e:ed:ad:ae:9b:ee:
0d:c7:49:16:92:17:0f:74:d0:33:87:62:65:7a:9f:5d:5c:36:
5c:bf:06:4f:3d:98:91:25:21:5a:32:66:a6:15:1c:90:2e:90:
ac:62:e6:ed:ea:28:3a:e9:3b:4c:20:60:8e:a8:78:12:b6:bd:
20:50:7c:4b:70:c1:80:22:17:ee:fc:76:8a:75:51:fc:0c:96:
c2:55:07:16:86:08:a3:12:5a:19:04:83:54:49:c9:a1:d8:90:
7e:bf:1e:b3:43:1d:dd:50:a6:b7:ec:45:eb:a4:fe:a8:12:43:
51:b6:7f:23:dc:ab:69:ad:fd:14:9a:f8:9e:0f:a5:56:3d:52:
b6:4d:67:26:07:24:e4:44:45:94:02:90:24:4d:bb:83:fe:d4:
71:1e:9f:06:71:29:e9:9a:37:e0:99:bf:c7:3e:b3:da:f8:a4:
1a:c9:9b:8b:78:09:6e:c5:67:f0:80:79:70:0f:49:f0:bf:d9:
b5:81:31:37:43:7f:9e:b6:0d:27:2f:7d:30:5d:9e:df:c8:d9:
ab:5c:02:d1:65:b5:bd:e2:f7:99:24:7d:86:f4:03:85:90:f8:
e5:06:bd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:17:11 2026 by rpki-client