Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: TjF+vEf63BpevpsD4EdS7sAYGqj/QBnTRwTY8oW68/c=
Subject key identifier: A6:25:C1:7E:AA:60:96:C1:9B:13:FD:76:6A:03:61:CA:3F:39:3F:8D
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 019FAC08DBFBE2FE67964233B45FEF4255E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 19E8
Signing time: Wed 29 Jul 2026 04:01:29 +0000
Manifest this update: Wed 29 Jul 2026 04:01:29 +0000
Manifest next update: Thu 30 Jul 2026 04:01:29 +0000
Files and hashes: 1: Eid3d62YnxHe5Y2-V0Bh36ut8zk.roa (hash: INOU1pQ7jEMWCkd6rFZSFopLqyhhp2Ctyc6t0sEfFdA=)
2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: Rqv4Tneixd7gQ69GmEoGpelBkllopUtZ+e04VLt4tWw=)
3: nnLnTcVXO544vHFcYVwBAQxMeQo.roa (hash: SFOznpvXz/JoSjUg8z9TzNGJVZ8Y7Eg8GWV4zl8aNrY=)
4: v980U-h91dgOwXDSBh4k-i7QAt0.roa (hash: C5VY2sj93F7Cq2/ofd1slgZ2bbIgYdzNTiYM2XjNUXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:db:fb:e2:fe:67:96:42:33:b4:5f:ef:42:55:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Jul 29 04:01:29 2026 GMT
Not After : Jul 30 04:01:29 2026 GMT
Subject: CN=a625c17eaa6096c19b13fd766a0361ca3f393f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:f9:80:0c:c6:75:6e:01:c2:cc:9c:49:56:
28:5a:93:9f:3d:ca:30:b9:71:b1:35:eb:a7:a9:c0:
75:4b:83:9a:6a:39:ea:f9:4c:a1:8f:4c:46:ec:df:
67:59:2b:a7:c4:bb:9a:9c:e3:c7:5a:c9:ed:2f:00:
5a:8b:ab:4c:ea:fb:57:0e:2a:a2:8c:27:32:64:01:
c9:7f:1c:a0:56:eb:d2:8c:6b:61:43:9c:b6:aa:a5:
04:df:72:9b:b3:ba:be:e8:e3:6b:c1:cb:b1:76:4e:
e2:30:ef:46:cc:9b:ec:b3:20:3a:eb:11:98:54:b3:
e3:b6:99:27:e2:67:8e:15:b2:57:57:17:7c:25:8b:
ca:8a:be:52:ac:a9:a0:9e:d4:77:7d:00:c4:c7:f3:
88:d5:6a:76:41:10:40:d2:63:13:f9:36:a2:73:61:
ea:2b:60:3c:a0:e6:8e:85:dd:22:c1:0a:ff:75:04:
6b:02:ea:9e:a6:7a:93:43:82:b8:4d:a6:48:76:aa:
c7:e8:66:58:95:18:ed:45:5e:0d:0a:71:ef:ba:8f:
0c:78:b0:92:53:ea:03:8e:05:5c:2c:3f:a8:aa:30:
64:7a:a4:2f:3a:41:09:29:b6:61:eb:4f:b0:10:b9:
67:44:39:ea:46:15:56:a0:47:81:17:aa:99:8c:a8:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:25:C1:7E:AA:60:96:C1:9B:13:FD:76:6A:03:61:CA:3F:39:3F:8D
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2c:aa:32:c1:6d:1a:e2:b6:0b:f1:32:38:7a:74:24:b4:ef:
1f:fc:e4:b8:d0:47:94:66:e0:da:b9:d0:d2:85:78:31:30:e8:
4c:f0:2a:41:08:c3:08:e9:96:94:a4:c0:e9:4a:8a:a3:84:1a:
1a:38:11:ae:68:2b:3b:49:ac:c0:c1:27:83:7d:c4:2b:5b:0b:
78:4d:aa:9f:00:33:34:38:bb:80:c8:61:f1:f4:a7:74:eb:3b:
05:19:37:c3:70:7a:6a:1e:98:de:96:88:79:c9:7f:d3:e3:70:
e2:06:69:a7:30:ae:18:b7:3b:44:57:e7:eb:d2:40:fc:5a:dd:
20:bb:be:63:a7:6f:97:e5:4d:5b:ce:0d:f9:78:37:7d:1d:b8:
58:ef:1d:4f:d4:7f:93:75:03:1d:6d:9d:47:ea:c8:4f:f1:9b:
61:e8:7e:27:0d:a0:77:47:3f:70:bd:4e:f2:45:25:32:d0:ca:
1b:c7:98:27:a5:60:1c:0f:32:b4:06:bb:b6:ef:8a:e1:08:79:
31:f7:2d:fe:2b:84:bb:2e:e2:e1:45:db:95:46:7e:4e:de:47:
6e:12:44:b4:d4:9b:4d:46:db:c4:79:18:9a:30:ba:de:2b:07:
b9:91:1d:6c:16:16:71:7d:5c:f1:bb:eb:68:db:25:31:07:aa:
79:ab:01:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:43:20 2026 by rpki-client