Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: L8vwEc11aH8kCt09rSDKt0FSUf7eu8UNC+S0F38FMYw=
Subject key identifier: 80:3F:D1:27:87:C2:BC:0D:C2:04:73:CB:17:49:4F:22:9F:0F:FC:9C
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 019D9AABE021A2BC40A14CC6F9286F4C1B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 09:00:48 +0000
Manifest this update: Fri 17 Apr 2026 09:00:48 +0000
Manifest next update: Sat 18 Apr 2026 09:00:48 +0000
Files and hashes: 1: _oMe5r1pVk1eWmBM0xQjlQQMYoA.roa (hash: vP6cRMyhx+tL5mecHizDEMHQb47lEApjkAoW42mWOaI=)
2: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: rXXbS56c/Fw5ZpDxQvi6jcU9Wp6ALejyID8vuuedqzg=)
3: uECQUsjfaqrlYL383G6Bm7t8I4M.roa (hash: fiYRp6eJInd1HBPu5f1buVFXTSVD/xHqEtnjRPebiMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:e0:21:a2:bc:40:a1:4c:c6:f9:28:6f:4c:1b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Apr 17 09:00:48 2026 GMT
Not After : Apr 18 09:00:48 2026 GMT
Subject: CN=803fd12787c2bc0dc20473cb17494f229f0ffc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:ff:a2:3f:48:75:57:1e:7b:d2:5b:dd:9c:
11:30:72:99:eb:c1:0b:64:86:03:7f:90:6d:74:38:
59:68:03:cd:f0:4a:40:46:99:e7:bb:ab:8d:5d:cf:
c9:af:bf:3e:8c:c1:ac:c4:3c:f2:e5:6f:ba:03:ef:
b8:82:59:b2:75:63:7a:b9:b1:48:95:91:76:c4:7e:
70:50:ce:d9:3a:aa:c3:78:06:bc:4e:0f:e4:1a:32:
47:2c:55:57:df:bf:58:b2:74:7c:9c:f5:f8:a3:e9:
29:04:24:ae:6d:5b:4d:8f:b0:39:e5:c4:b4:86:88:
35:db:42:d5:b1:7f:a8:64:27:a8:32:d9:a5:10:a4:
94:60:08:23:6d:c0:6b:b1:48:48:10:c5:f6:c2:8e:
51:19:4e:55:66:13:21:d1:c0:46:d9:3d:6a:2b:09:
77:27:17:2c:e1:fd:70:52:2a:9c:80:4a:a5:c4:78:
e1:20:31:bb:8a:e8:d6:3c:b2:72:56:a7:0f:7d:d1:
ef:04:5e:bd:fe:9f:7d:39:86:2d:8a:41:f3:3b:c1:
d1:ba:60:5f:6d:63:55:9f:5f:c9:a4:3c:0a:d1:f1:
ee:3d:99:16:ca:74:fa:5a:00:a4:77:59:c7:61:52:
17:74:8e:0b:b4:b3:e8:b3:01:75:5a:b5:78:1f:52:
01:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3F:D1:27:87:C2:BC:0D:C2:04:73:CB:17:49:4F:22:9F:0F:FC:9C
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fd:d2:80:e7:a2:07:dd:3c:33:7c:14:9d:b3:f2:84:f1:8c:
76:a4:60:bd:b1:0f:91:f3:84:ee:e1:f6:16:c5:b8:71:2c:88:
37:8e:2a:ca:3a:ce:7a:f8:9d:34:91:92:a6:41:ed:71:ad:78:
b6:32:93:9c:07:47:a6:47:e9:8a:5c:1a:c7:4d:1e:cc:f6:bc:
98:76:c5:8d:b1:12:a5:45:f5:67:cf:30:11:30:2f:68:7d:c8:
77:c1:4b:3b:68:cf:71:57:b0:62:b5:b3:8b:2e:1a:b5:fa:bd:
ab:13:d8:b5:7c:f3:45:ff:55:c2:15:57:a2:9f:be:82:5b:d9:
1d:8d:84:4c:36:77:58:2b:e7:1e:83:0f:58:5e:04:38:36:2b:
9c:66:12:8c:3f:f0:62:6d:9b:57:1c:d9:7f:e2:79:60:1d:9d:
0d:c8:f7:a9:e9:d5:a4:0c:86:d5:e5:91:c0:cb:48:ae:96:c0:
87:f5:60:7e:cf:6c:5a:db:32:9d:02:f7:5e:3a:56:ae:d2:d5:
39:4b:3b:a0:8b:0e:48:52:5d:b3:7f:73:e4:4c:3c:78:25:d4:
0a:dd:63:3c:56:d1:74:7a:a1:ec:b2:c7:88:88:02:44:9e:d2:
92:98:8a:58:61:26:9e:44:1b:5d:ac:41:74:f0:76:d3:69:97:
43:99:c6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:08:29 2026 by rpki-client