Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: VHUZhyuDgtEqtkw5R48VcP9ZD3cjdhN+cQJ3cj0hCqU=
Subject key identifier: 7B:35:40:F9:9A:C8:2B:87:28:6D:3E:EF:CC:A1:04:0B:00:38:B3:15
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 019CAD59FDD575D08E9EF684B772337A9B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 185B
Signing time: Mon 02 Mar 2026 07:01:21 +0000
Manifest this update: Mon 02 Mar 2026 07:01:21 +0000
Manifest next update: Tue 03 Mar 2026 07:01:21 +0000
Files and hashes: 1: Eid3d62YnxHe5Y2-V0Bh36ut8zk.roa (hash: INOU1pQ7jEMWCkd6rFZSFopLqyhhp2Ctyc6t0sEfFdA=)
2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: t70RowAPJ24shRkBqfoJIDHm7WwdvPtkMvXstaE7tU4=)
3: nnLnTcVXO544vHFcYVwBAQxMeQo.roa (hash: SFOznpvXz/JoSjUg8z9TzNGJVZ8Y7Eg8GWV4zl8aNrY=)
4: v980U-h91dgOwXDSBh4k-i7QAt0.roa (hash: C5VY2sj93F7Cq2/ofd1slgZ2bbIgYdzNTiYM2XjNUXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:fd:d5:75:d0:8e:9e:f6:84:b7:72:33:7a:9b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Mar 2 07:01:21 2026 GMT
Not After : Mar 3 07:01:21 2026 GMT
Subject: CN=7b3540f99ac82b87286d3eefcca1040b0038b315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:21:5e:8c:ae:17:85:0a:e5:27:6e:1a:e9:c0:
87:56:5e:70:99:21:66:19:06:6f:6b:97:61:8f:96:
2b:80:08:ff:c2:3e:1a:ec:34:e1:d7:c4:87:0c:20:
3b:25:9a:09:27:e6:dd:7f:e9:82:bc:c0:6e:59:6e:
76:b0:13:bf:78:76:45:b2:ff:c3:d5:c4:cb:55:08:
ca:21:09:78:89:99:54:32:22:af:6c:00:84:93:04:
b3:8d:a1:f4:fd:6e:68:18:9c:62:dd:5f:75:67:dd:
cb:be:bc:b8:aa:c8:2e:d9:18:51:2b:fc:48:39:e2:
37:95:93:cc:e7:2e:03:1f:e6:d3:31:63:d3:68:f0:
79:b6:88:47:d1:3c:2f:49:f7:88:7b:ce:5e:83:06:
41:16:c2:44:f4:89:d7:57:c7:c0:04:16:58:74:55:
04:05:ee:23:4e:93:8f:3c:50:34:e8:35:9f:57:a8:
a7:1e:8c:95:38:db:6e:80:7e:cc:53:8a:b6:da:21:
7c:7b:ae:2f:ef:37:a6:28:1c:88:50:24:21:af:81:
59:c3:f7:96:fa:fa:46:91:0e:44:00:66:f4:9d:7f:
84:f6:a7:f4:c8:27:c0:45:0e:a1:2e:42:a0:a7:88:
26:17:2f:10:6e:67:fb:a6:52:a9:87:71:71:fd:e4:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:35:40:F9:9A:C8:2B:87:28:6D:3E:EF:CC:A1:04:0B:00:38:B3:15
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:31:0e:4a:1d:a9:bd:5c:49:c9:a6:61:09:df:d8:7d:75:c6:
72:15:d7:df:3e:42:4b:1a:21:fb:ec:57:34:0f:f8:f3:da:83:
00:f9:79:c2:d3:63:41:ad:c9:4a:2f:93:7a:9e:39:79:ba:6f:
ff:20:38:d9:d9:8c:31:50:a1:79:08:9f:d2:b7:3e:ce:ab:9f:
f4:d8:92:aa:43:2d:90:a4:1d:e3:be:f2:4d:18:df:f0:59:35:
e2:9d:e3:b9:4d:62:36:84:05:3d:40:ed:91:56:3d:a4:8a:2f:
96:13:7d:af:06:fb:6f:c8:41:60:f2:2e:dd:81:3e:51:12:10:
93:89:21:13:16:59:7e:0a:ff:64:30:2d:ea:b2:f7:d4:bf:93:
0e:62:f1:59:e7:dc:a5:45:41:ba:2a:79:84:fb:fe:ba:6e:82:
cd:50:1f:22:fb:bb:52:c3:5e:42:55:31:ae:05:37:e2:2c:f5:
36:7e:9b:8e:4f:3f:8e:ea:09:97:eb:68:79:78:f0:a6:f7:58:
03:56:24:97:40:bb:1b:7c:b3:f6:b9:10:c8:90:6e:fd:54:28:
42:bb:3c:ba:64:34:94:0d:d1:a8:5f:20:ef:84:3a:c3:32:20:
d8:a2:9b:e4:20:97:94:ea:f0:43:2b:31:e5:17:6b:74:0f:a5:
0e:cd:27:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWf3VddCOnvaEt3IzepsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZTA2YTM1MWE1MTg5YmNkYzQ0ODQwOTQ4ZGJmYjQwYWJm
NThiZTUwHhcNMjYwMzAyMDcwMTIxWhcNMjYwMzAzMDcwMTIxWjAzMTEwLwYDVQQD
Eyg3YjM1NDBmOTlhYzgyYjg3Mjg2ZDNlZWZjY2ExMDQwYjAwMzhiMzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yFejK4XhQrlJ24a6cCHVl5wmSFm
GQZva5dhj5YrgAj/wj4a7DTh18SHDCA7JZoJJ+bdf+mCvMBuWW52sBO/eHZFsv/D
1cTLVQjKIQl4iZlUMiKvbACEkwSzjaH0/W5oGJxi3V91Z93Lvry4qsgu2RhRK/xI
OeI3lZPM5y4DH+bTMWPTaPB5tohH0TwvSfeIe85egwZBFsJE9InXV8fABBZYdFUE
Be4jTpOPPFA06DWfV6inHoyVONtugH7MU4q22iF8e64v7zemKByIUCQhr4FZw/eW
+vpGkQ5EAGb0nX+E9qf0yCfARQ6hLkKgp4gmFy8Qbmf7plKph3Fx/eSmJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHs1QPmayCuHKG0+78yhBAsAOLMVMB8GA1UdIwQY
MBaAFEjgajUaUYm83ESECUjb+0Cr9YvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDIt
YWIxYTg3ZWNkZjFiLzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDItYWIxYTg3ZWNkZjFi
LzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDEOSh2p
vVxJyaZhCd/YfXXGchXX3z5CSxoh++xXNA/489qDAPl5wtNjQa3JSi+Tep45ebpv
/yA42dmMMVCheQif0rc+zquf9NiSqkMtkKQd477yTRjf8Fk14p3juU1iNoQFPUDt
kVY9pIovlhN9rwb7b8hBYPIu3YE+URIQk4khExZZfgr/ZDAt6rL31L+TDmLxWefc
pUVBuip5hPv+um6CzVAfIvu7UsNeQlUxrgU34iz1Nn6bjk8/juoJl+toeXjwpvdY
A1Ykl0C7G3yz9rkQyJBu/VQoQrs8umQ0lA3RqF8g74Q6wzIg2KKb5CCXlOrwQysx
5RdrdA+lDs0nlQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:49 2026 by rpki-client