Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
File: SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft (raw, json)
Hash identifier: Doa8JOuSnYFBlIRm7YZL5casVW8yvCWmylYgwxMvGOk=
Subject key identifier: DA:F9:59:D0:86:DA:DC:98:12:6A:94:04:7F:A1:4D:7A:29:40:BD:33
Authority key identifier: 48:E6:B2:5B:F9:89:FC:37:04:BD:8E:84:E0:D5:D9:D6:8D:02:B4:EB
Certificate issuer: /CN=48e6b25bf989fc3704bd8e84e0d5d9d68d02b4eb
Certificate serial: 01A0CC34EE14405A7AD6D776428298A96C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:00:15 +0000
Manifest this update: Wed 23 Sep 2026 03:00:15 +0000
Manifest next update: Thu 24 Sep 2026 03:00:15 +0000
Files and hashes: 1: NA4KUnaZ-7quWuidYkuLJ9qLJL8.roa (hash: WMFv5tO73TosL+xYHmLzwInHMA669D5/mO5dF7Lq1sg=)
2: SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl (hash: 5pCd5vD4YmEDvVCM7/J8cq0tHuK05moORGVD6RNwZio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:34:ee:14:40:5a:7a:d6:d7:76:42:82:98:a9:6c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e6b25bf989fc3704bd8e84e0d5d9d68d02b4eb
Validity
Not Before: Sep 23 03:00:15 2026 GMT
Not After : Sep 24 03:00:15 2026 GMT
Subject: CN=daf959d086dadc98126a94047fa14d7a2940bd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:65:8d:88:40:6b:da:38:98:6f:e3:62:8e:
45:58:f0:5f:57:a9:54:ed:9a:40:42:95:e0:a0:fa:
b3:a0:30:cd:62:ce:88:a9:d3:42:7b:81:fe:61:e3:
f9:7d:8a:5e:7c:66:25:de:ed:59:e8:95:ee:0a:42:
90:cc:bb:1c:fe:74:4f:34:32:cc:ba:cc:8d:55:19:
3f:17:00:34:17:90:19:3d:ab:6c:f1:0a:c7:a3:88:
19:30:19:f5:6e:6a:51:2d:48:e1:eb:73:1d:26:a7:
24:1e:1f:6b:bb:98:b6:da:fc:ec:f1:dc:f6:7b:2d:
49:d2:ae:43:21:b4:74:f1:45:ed:c3:65:1d:09:6a:
74:c2:3f:9a:3e:8d:a7:7e:08:77:2c:ea:07:8f:c6:
7a:76:f7:55:bb:aa:2f:76:fe:8a:c7:a7:6d:b9:be:
13:80:2a:fe:fc:2e:1b:11:10:1f:96:1a:73:06:06:
3b:59:d3:b0:3b:83:6b:fd:f0:ac:ce:54:f7:b8:f3:
f9:ff:1d:18:5f:2e:ea:94:a3:0b:f2:b4:1a:53:ba:
ff:4f:37:40:12:f0:2d:28:56:45:3b:ef:c3:b2:9c:
9b:c4:52:ef:1b:92:70:ac:2d:19:b8:1d:b1:f9:df:
4f:6f:3f:b2:25:b9:86:dc:3d:91:67:b2:67:69:b2:
0f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F9:59:D0:86:DA:DC:98:12:6A:94:04:7F:A1:4D:7A:29:40:BD:33
X509v3 Authority Key Identifier:
keyid:48:E6:B2:5B:F9:89:FC:37:04:BD:8E:84:E0:D5:D9:D6:8D:02:B4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c0:56:95:dc:42:1a:84:90:57:b0:2b:27:c6:44:a9:54:00:
82:50:c8:92:0e:74:bf:90:2c:49:75:72:62:72:5b:2a:b4:8e:
33:c9:68:2a:d2:99:ea:dd:ce:29:a3:37:88:de:fa:67:b5:88:
f6:8c:fc:da:74:60:d8:a1:b5:08:15:46:90:ca:0b:57:f0:30:
5c:60:45:c1:d8:d8:02:88:ce:ea:c5:ac:52:d2:5b:e8:5f:49:
ec:45:a4:43:ca:11:98:17:97:ba:fa:86:ca:8b:aa:34:12:a3:
c5:d1:5f:3a:4b:98:ce:cf:71:ce:92:d0:49:d6:b8:41:1c:e9:
ac:aa:ef:2d:a8:51:86:71:ec:46:ee:b6:eb:bc:4c:29:e2:10:
65:65:ba:18:6f:f5:b6:1f:bb:59:c3:a3:c5:8f:ad:70:e1:85:
8d:13:9c:0a:8a:22:fe:22:03:2b:a5:4c:a4:f0:36:e1:2c:a5:
a3:dc:02:df:ed:7c:bc:ce:76:63:83:6f:7d:b6:22:49:89:52:
8a:d0:1d:9c:41:f7:32:d1:03:73:62:c8:ed:de:24:ca:56:0e:
70:3c:22:cf:46:20:5b:e8:89:66:12:9f:f3:26:32:54:68:28:
fa:12:a1:2b:0f:c9:7f:4f:9a:dc:d3:8d:ad:06:93:19:9c:46:
2f:36:39:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:48:46 2026 by rpki-client