Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: Fdau5NBc64FNjNY4I9n3SV/zMDWcM2q2SQd4VKmvFX4=
Subject key identifier: 89:0C:5F:AC:70:29:7B:D1:B3:4F:3A:87:87:14:9C:BF:C3:EE:7C:F4
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 01A0E7AF27D7EDE84D1E9129E94639D8C663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 1A80
Signing time: Mon 28 Sep 2026 11:03:30 +0000
Manifest this update: Mon 28 Sep 2026 11:03:30 +0000
Manifest next update: Tue 29 Sep 2026 11:03:30 +0000
Files and hashes: 1: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: j82y6ZfCyOxA9VSOiET/bPOJn9/RamIPVhyjiMF+2ig=)
2: uECQUsjfaqrlYL383G6Bm7t8I4M.roa (hash: fiYRp6eJInd1HBPu5f1buVFXTSVD/xHqEtnjRPebiMg=)
3: zkuzAY2enYrtLGkFM8ERODYZLKA.roa (hash: PvdIqB+Fh9fTeVDgdqOpL7fRPe7DtvHIS5ulz/6oVFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:27:d7:ed:e8:4d:1e:91:29:e9:46:39:d8:c6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Sep 28 11:03:30 2026 GMT
Not After : Sep 29 11:03:30 2026 GMT
Subject: CN=890c5fac70297bd1b34f3a8787149cbfc3ee7cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:d7:90:0e:78:14:63:a6:5e:26:04:5e:63:
69:f3:f6:02:b2:86:df:54:ea:80:94:42:37:cb:d6:
64:a9:1b:26:f0:c4:a1:31:46:e0:2e:0f:f6:65:f7:
fc:b2:ab:02:6d:6e:e8:68:18:8b:39:05:43:69:9c:
c5:07:c8:05:a9:5b:ca:3a:be:c5:36:e8:e3:97:4e:
d8:87:6e:51:f1:28:e2:5a:b6:35:7d:36:90:8a:74:
2f:1c:c7:a1:10:8c:23:50:af:a6:da:80:3e:8a:85:
75:50:0d:02:5e:d2:04:2c:2b:b5:f3:44:41:35:5e:
d9:33:99:5c:4f:bd:f9:e8:ac:93:d6:d8:7c:52:d1:
c8:97:14:96:d1:8e:cd:eb:35:f6:cc:5d:3e:12:8d:
28:08:93:36:6c:6e:11:38:15:cc:93:d7:27:32:e2:
50:c4:60:e3:f3:74:88:96:c9:11:ce:07:58:82:46:
7a:d4:8b:54:e7:d4:28:8e:87:69:98:cb:5a:94:78:
06:49:a2:65:9a:ee:75:3c:10:59:33:a7:69:89:e0:
ac:7b:fb:14:a2:6f:fc:ea:8e:36:4b:7b:0a:92:46:
63:5e:87:2a:e2:da:f0:d3:d8:1c:21:90:04:de:6c:
9f:1a:8a:05:30:b1:20:d9:65:09:f4:e9:ca:fe:26:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0C:5F:AC:70:29:7B:D1:B3:4F:3A:87:87:14:9C:BF:C3:EE:7C:F4
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:90:80:17:22:e8:e9:c5:c6:f5:f7:43:d4:8a:3d:1d:e3:58:
a0:d8:04:bb:36:b3:b4:68:98:2b:c0:6a:2c:bb:63:b7:9f:c4:
fd:18:4f:bf:bd:43:fa:ca:8d:d3:c4:2f:b9:7d:0b:53:56:ad:
a9:41:0a:ad:65:e7:03:16:42:92:1d:64:5e:3a:0a:6f:2a:48:
85:c9:a1:34:b9:b4:af:31:07:1f:9c:95:65:23:69:13:84:82:
8a:d3:c1:06:49:3c:41:3c:99:75:8a:fa:2e:7c:31:1c:5b:da:
6c:1b:44:10:aa:ca:2a:bd:22:38:a7:e6:26:86:42:24:3f:6b:
d5:ee:10:0a:88:90:2f:8a:88:92:42:11:e3:74:9c:b5:bb:a0:
78:5c:88:42:23:4e:40:84:8a:83:3a:7e:c6:a0:1f:45:b7:87:
b0:8d:57:43:e1:92:0f:93:d0:57:fb:b6:91:0c:4f:84:bb:d6:
67:89:d5:d9:ef:8c:08:8c:71:4d:6c:1a:3e:58:eb:11:d9:46:
04:30:1e:23:52:7f:05:16:5d:0d:77:24:5b:4c:5e:7c:08:83:
f3:cb:73:95:42:a0:0d:0e:b5:07:0b:74:51:09:c8:18:a1:8b:
ac:d4:64:28:7c:b0:8c:c7:57:d0:dc:ca:ea:28:e5:43:53:6c:
9a:56:84:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnryfX7ehNHpEp6UY52MZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODUzYWExZWIzMmJmZWUwZmViMTQ4M2MxNDkzNmQxMDFm
MTZlZGYwHhcNMjYwOTI4MTEwMzMwWhcNMjYwOTI5MTEwMzMwWjAzMTEwLwYDVQQD
Eyg4OTBjNWZhYzcwMjk3YmQxYjM0ZjNhODc4NzE0OWNiZmMzZWU3Y2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPLXkA54FGOmXiYEXmNp8/YCsobf
VOqAlEI3y9ZkqRsm8MShMUbgLg/2Zff8sqsCbW7oaBiLOQVDaZzFB8gFqVvKOr7F
Nujjl07Yh25R8SjiWrY1fTaQinQvHMehEIwjUK+m2oA+ioV1UA0CXtIELCu180RB
NV7ZM5lcT7356KyT1th8UtHIlxSW0Y7N6zX2zF0+Eo0oCJM2bG4ROBXMk9cnMuJQ
xGDj83SIlskRzgdYgkZ61ItU59QojodpmMtalHgGSaJlmu51PBBZM6dpieCse/sU
om/86o42S3sKkkZjXocq4trw09gcIZAE3myfGooFMLEg2WUJ9OnK/iZXrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkMX6xwKXvRs086h4cUnL/D7nz0MB8GA1UdIwQY
MBaAFLKFOqHrMr/uD+sUg8FJNtEB8W7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2Yt
ZjJiODEwNzliNzQ2LzEvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2YtZjJiODEwNzliNzQ2
LzEvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpCAFyLo
6cXG9fdD1Io9HeNYoNgEuzaztGiYK8BqLLtjt5/E/RhPv71D+sqN08QvuX0LU1at
qUEKrWXnAxZCkh1kXjoKbypIhcmhNLm0rzEHH5yVZSNpE4SCitPBBkk8QTyZdYr6
LnwxHFvabBtEEKrKKr0iOKfmJoZCJD9r1e4QCoiQL4qIkkIR43SctbugeFyIQiNO
QISKgzp+xqAfRbeHsI1XQ+GSD5PQV/u2kQxPhLvWZ4nV2e+MCIxxTWwaPljrEdlG
BDAeI1J/BRZdDXckW0xefAiD88tzlUKgDQ61Bwt0UQnIGKGLrNRkKHywjMdX0NzK
6ijlQ1NsmlaE3g==
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:17:49 2026 by rpki-client