
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
File: SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft (raw, json)
Hash identifier: k2vQNDVqUppT+ncCGrLaoFjeU6NLml1oRZs8tfFhGSo=
Subject key identifier: C1:1C:C9:3D:DA:2E:26:7C:2A:2F:CD:E9:E1:EC:10:11:10:1E:11:92
Authority key identifier: 48:E6:B2:5B:F9:89:FC:37:04:BD:8E:84:E0:D5:D9:D6:8D:02:B4:EB
Certificate issuer: /CN=48e6b25bf989fc3704bd8e84e0d5d9d68d02b4eb
Certificate serial: 019FAC763768B9E382AD087AEEDDC7EB8B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:56 +0000
Manifest this update: Wed 29 Jul 2026 06:00:56 +0000
Manifest next update: Thu 30 Jul 2026 06:00:56 +0000
Files and hashes: 1: NA4KUnaZ-7quWuidYkuLJ9qLJL8.roa (hash: WMFv5tO73TosL+xYHmLzwInHMA669D5/mO5dF7Lq1sg=)
2: SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl (hash: KpY+lJ2MsZwMwtsGE5JqV4gbKGJQ0VEq4UFREWMU3a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:37:68:b9:e3:82:ad:08:7a:ee:dd:c7:eb:8b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e6b25bf989fc3704bd8e84e0d5d9d68d02b4eb
Validity
Not Before: Jul 29 06:00:56 2026 GMT
Not After : Jul 30 06:00:56 2026 GMT
Subject: CN=c11cc93dda2e267c2a2fcde9e1ec1011101e1192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:2a:c9:94:f2:15:87:63:e9:0a:51:b9:d6:
5f:4e:38:b8:39:df:95:54:d1:5f:07:6e:c8:82:3d:
ee:05:2f:32:27:1d:79:be:27:92:ec:fa:9b:fb:27:
5c:f8:ff:e9:b6:0f:d8:c1:49:62:f0:a0:be:b9:ef:
dd:27:01:a7:a3:61:66:93:14:36:07:d0:d3:e8:26:
bc:de:c5:24:16:c3:83:14:cb:d8:14:7f:96:87:15:
28:e0:13:90:c2:2d:47:ad:af:02:16:d7:6d:a1:f2:
f2:1c:c7:6d:11:c7:d8:e0:e4:ae:61:e3:e0:35:ea:
2f:5a:a3:10:86:8c:73:03:53:41:66:6e:3a:52:09:
51:9a:3b:74:c1:df:55:45:4b:ea:da:95:67:8f:ee:
60:71:7e:25:cc:64:cb:0d:48:d2:a5:68:df:3b:cd:
02:a3:9f:b7:49:e8:28:8d:c6:ab:66:37:76:75:08:
a2:0f:57:9c:1e:b9:22:c7:a6:f4:71:84:b7:3a:9a:
aa:6a:dc:cf:1a:59:8a:43:05:60:a4:f2:8a:3b:c8:
a6:12:cb:4a:46:44:4b:43:26:db:a2:70:46:29:81:
e4:74:1b:d7:67:fb:16:c4:b1:9e:3a:d0:fb:9c:a2:
c9:14:1f:c5:92:12:ab:b2:2e:25:c0:d3:9a:26:c2:
c5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1C:C9:3D:DA:2E:26:7C:2A:2F:CD:E9:E1:EC:10:11:10:1E:11:92
X509v3 Authority Key Identifier:
keyid:48:E6:B2:5B:F9:89:FC:37:04:BD:8E:84:E0:D5:D9:D6:8D:02:B4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:20:97:f8:8c:2d:41:12:5c:3d:f7:48:b7:ae:a1:1e:9a:92:
00:75:23:77:6a:f4:7b:f1:d4:1b:89:df:e5:57:dd:5f:ed:d1:
ff:23:f1:37:c8:cf:d2:af:06:16:89:d2:a5:46:59:c8:06:aa:
f8:e1:e8:63:d5:79:05:76:fc:a4:36:f9:82:bc:72:47:6e:0c:
7e:e8:64:3a:0a:66:aa:e3:7b:df:82:0b:d8:f5:4e:a8:93:48:
a8:2a:28:a8:32:d3:cd:f4:f6:22:39:4f:a4:ff:60:6f:81:6e:
a3:e0:40:71:bc:64:fb:43:90:ab:f5:f3:17:e1:ca:51:e5:71:
78:8f:4a:f9:f7:a6:64:e1:7f:54:8a:76:c0:de:c0:8d:c5:0f:
2c:ac:8b:5e:c3:ff:c6:66:a9:46:ca:81:8a:d0:3e:c5:72:21:
96:32:4e:c0:9f:cb:96:d5:6d:23:17:0d:f5:87:39:f3:13:68:
97:c8:b7:3e:6d:10:86:21:43:0f:5e:ea:e8:3f:7c:50:83:cd:
8c:ec:35:2a:b2:e7:d2:0b:f0:ec:8f:f6:0a:78:90:c4:38:38:
b0:55:a5:a0:98:5c:ae:93:be:25:dc:b4:e9:97:04:5b:e9:15:
4a:2d:89:9a:e4:64:59:30:ea:e7:c3:e1:32:c1:db:74:bf:de:
10:60:80:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:03:57 2026 by rpki-client