Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: 0BDWOWzOE/GVxiszN7t3mckz4Gk5Aqy9CHeYmSHE3LY=
Subject key identifier: 68:FF:A8:D3:64:B0:8F:A4:BE:DF:46:F5:67:E0:F8:17:43:94:B4:EC
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 019D9AE2A35784D29C0CB92A537A1E641F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 18D6
Signing time: Fri 17 Apr 2026 10:00:37 +0000
Manifest this update: Fri 17 Apr 2026 10:00:37 +0000
Manifest next update: Sat 18 Apr 2026 10:00:37 +0000
Files and hashes: 1: Eid3d62YnxHe5Y2-V0Bh36ut8zk.roa (hash: INOU1pQ7jEMWCkd6rFZSFopLqyhhp2Ctyc6t0sEfFdA=)
2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: eaZ5Wpda6hpBS4hOVunt/znPB8KvzVmQjRmGvqajGbM=)
3: nnLnTcVXO544vHFcYVwBAQxMeQo.roa (hash: SFOznpvXz/JoSjUg8z9TzNGJVZ8Y7Eg8GWV4zl8aNrY=)
4: v980U-h91dgOwXDSBh4k-i7QAt0.roa (hash: C5VY2sj93F7Cq2/ofd1slgZ2bbIgYdzNTiYM2XjNUXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:a3:57:84:d2:9c:0c:b9:2a:53:7a:1e:64:1f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Apr 17 10:00:37 2026 GMT
Not After : Apr 18 10:00:37 2026 GMT
Subject: CN=68ffa8d364b08fa4bedf46f567e0f8174394b4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:00:fe:5d:ac:88:28:9a:52:fe:be:21:ce:
d7:8f:2e:c6:78:7b:e9:a6:c8:ca:da:78:6c:79:e7:
30:69:9f:85:27:49:67:96:13:d5:21:cd:d6:05:a3:
a9:b5:b7:86:85:6b:fd:7c:68:cf:1f:52:a2:bc:0d:
a0:6e:c6:bc:db:74:a3:26:87:91:76:b7:cb:83:69:
d8:d0:91:59:41:7a:6a:9e:5b:6b:9d:89:f9:ac:b8:
c1:6f:77:9a:68:2b:0c:26:f0:a6:0d:11:1c:3c:f9:
52:e6:d2:9e:ab:b8:d6:3d:6b:a7:89:2c:27:cf:e4:
14:60:8c:84:95:26:35:98:8f:f8:da:84:de:cb:1c:
61:ea:c6:cb:4f:3e:69:fa:78:3d:a6:a1:10:03:bc:
34:cf:a9:d4:04:27:a3:44:f0:bf:f1:2c:a3:ab:08:
32:2f:13:c0:48:84:0c:39:a5:d7:51:f0:ea:71:3c:
77:c2:49:30:79:25:2f:e6:88:81:9b:a3:fa:8f:ce:
a1:01:b9:be:40:8d:1f:83:1a:e2:81:02:45:e1:4a:
83:21:21:7b:d6:e5:0f:7e:70:2a:82:be:96:c4:ff:
f9:8d:39:5d:cf:d8:ec:ec:c0:60:e8:92:93:5c:67:
44:e8:01:9e:94:3d:6d:2f:45:d9:1b:d7:4f:38:92:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FF:A8:D3:64:B0:8F:A4:BE:DF:46:F5:67:E0:F8:17:43:94:B4:EC
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e9:cf:fd:3d:9a:43:86:3a:a5:7f:10:73:24:6a:71:ec:5c:
4e:5a:09:4d:62:d5:f3:ea:93:3b:4c:8a:47:3f:89:1c:3c:7b:
6d:5c:ea:e6:97:46:fc:89:55:10:7a:e4:5b:3e:c5:09:b4:70:
15:06:82:05:f8:a9:35:65:d9:83:d0:fe:b7:09:1a:9d:8c:00:
d4:82:f0:f7:46:16:bf:69:a1:63:95:ec:a8:e5:94:da:a8:70:
9e:36:23:0b:04:7f:c4:6d:a8:10:dc:e7:2e:82:ff:a3:23:62:
c3:ad:42:28:0f:2f:db:6f:dc:7b:82:5f:d7:f3:76:6d:aa:a3:
e7:64:e5:7d:a8:5b:10:40:a8:62:de:e1:2b:7c:ae:5c:a5:4e:
8d:a1:e5:f6:29:22:6d:f7:e9:42:4d:92:c7:77:a0:a5:e5:77:
83:86:f8:a5:cb:c1:42:1a:c9:81:07:d9:23:fc:be:9b:23:01:
43:b1:73:e5:de:b1:64:32:31:3e:1c:64:34:41:ab:20:14:f0:
16:37:e7:ad:56:b6:90:05:c3:a5:87:4e:46:e1:ed:c6:f5:1c:
3d:7a:19:0d:a3:ba:2e:81:34:45:b3:0c:70:f7:04:b2:41:0e:
2e:ba:42:20:24:f2:58:8f:2c:09:5f:d9:41:ab:cc:b4:83:3f:
08:d0:ea:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4qNXhNKcDLkqU3oeZB9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZTA2YTM1MWE1MTg5YmNkYzQ0ODQwOTQ4ZGJmYjQwYWJm
NThiZTUwHhcNMjYwNDE3MTAwMDM3WhcNMjYwNDE4MTAwMDM3WjAzMTEwLwYDVQQD
Eyg2OGZmYThkMzY0YjA4ZmE0YmVkZjQ2ZjU2N2UwZjgxNzQzOTRiNGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya8A/l2siCiaUv6+Ic7Xjy7GeHvp
psjK2nhseecwaZ+FJ0lnlhPVIc3WBaOptbeGhWv9fGjPH1KivA2gbsa823SjJoeR
drfLg2nY0JFZQXpqnltrnYn5rLjBb3eaaCsMJvCmDREcPPlS5tKeq7jWPWuniSwn
z+QUYIyElSY1mI/42oTeyxxh6sbLTz5p+ng9pqEQA7w0z6nUBCejRPC/8Syjqwgy
LxPASIQMOaXXUfDqcTx3wkkweSUv5oiBm6P6j86hAbm+QI0fgxrigQJF4UqDISF7
1uUPfnAqgr6WxP/5jTldz9js7MBg6JKTXGdE6AGelD1tL0XZG9dPOJJS8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGj/qNNksI+kvt9G9Wfg+BdDlLTsMB8GA1UdIwQY
MBaAFEjgajUaUYm83ESECUjb+0Cr9YvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDIt
YWIxYTg3ZWNkZjFiLzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDItYWIxYTg3ZWNkZjFi
LzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOnP/T2a
Q4Y6pX8QcyRqcexcTloJTWLV8+qTO0yKRz+JHDx7bVzq5pdG/IlVEHrkWz7FCbRw
FQaCBfipNWXZg9D+twkanYwA1ILw90YWv2mhY5XsqOWU2qhwnjYjCwR/xG2oENzn
LoL/oyNiw61CKA8v22/ce4Jf1/N2baqj52TlfahbEECoYt7hK3yuXKVOjaHl9iki
bffpQk2Sx3egpeV3g4b4pcvBQhrJgQfZI/y+myMBQ7Fz5d6xZDIxPhxkNEGrIBTw
FjfnrVa2kAXDpYdORuHtxvUcPXoZDaO6LoE0RbMMcPcEskEOLrpCICTyWI8sCV/Z
QavMtIM/CNDqDg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:45 2026 by rpki-client