Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: aTYulPYKeP4x3EwiFk/WxUC1mItVfRxqtoBJjeB0INo=
Subject key identifier: 7F:50:BC:87:B1:97:B9:F5:5F:B6:97:84:21:3D:D5:54:BB:25:F1:D6
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 019CAF116C42AAEAAAC39B228B6B6F05E912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 184F
Signing time: Mon 02 Mar 2026 15:01:20 +0000
Manifest this update: Mon 02 Mar 2026 15:01:20 +0000
Manifest next update: Tue 03 Mar 2026 15:01:20 +0000
Files and hashes: 1: _oMe5r1pVk1eWmBM0xQjlQQMYoA.roa (hash: vP6cRMyhx+tL5mecHizDEMHQb47lEApjkAoW42mWOaI=)
2: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: ISZL3NxceRUs8DkIz1xx5r/MTqBUA1+GQM412URiTVM=)
3: uECQUsjfaqrlYL383G6Bm7t8I4M.roa (hash: fiYRp6eJInd1HBPu5f1buVFXTSVD/xHqEtnjRPebiMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:6c:42:aa:ea:aa:c3:9b:22:8b:6b:6f:05:e9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Mar 2 15:01:20 2026 GMT
Not After : Mar 3 15:01:20 2026 GMT
Subject: CN=7f50bc87b197b9f55fb69784213dd554bb25f1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:f3:de:70:2b:a5:70:ae:56:b8:58:b7:c0:
72:e0:ef:44:a1:67:a2:0e:97:40:e1:b7:83:b5:b6:
5d:9d:17:ef:39:ac:3e:3d:e2:8c:99:de:2e:73:58:
39:8e:4c:18:30:75:58:85:f2:38:1b:5f:a1:36:0a:
7b:4b:4e:36:81:46:38:38:68:7f:45:d9:ff:12:3a:
a4:48:b1:eb:44:4f:ef:cb:d4:6f:dc:29:4f:e1:b0:
0d:b7:31:78:d6:b8:88:2e:1a:bd:bd:db:ff:6f:5c:
17:61:8f:0a:ac:62:ef:f4:b8:74:35:18:6c:1a:b0:
4e:c0:56:c5:a9:87:a7:70:c6:5e:e2:53:fc:ce:32:
e4:5f:66:1a:33:79:49:e9:15:75:20:5a:3b:9f:b6:
fa:3f:92:bb:54:19:4b:7c:37:d9:b2:07:3a:b2:0a:
f6:f0:27:1a:ef:ec:35:95:ac:cf:df:9d:2b:58:03:
e5:36:49:21:c1:eb:c1:2e:c9:f6:58:fc:fb:8a:44:
ad:7c:e6:1c:ad:a0:09:ac:92:1f:63:24:a3:9e:11:
37:21:ae:08:9e:91:2a:48:4f:93:44:5e:e2:57:13:
aa:56:89:1a:81:f8:e9:ce:fb:f3:ac:4b:c5:cc:45:
62:29:85:82:47:f0:e9:06:ee:54:b3:10:34:8b:74:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:50:BC:87:B1:97:B9:F5:5F:B6:97:84:21:3D:D5:54:BB:25:F1:D6
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6a:ac:c2:67:17:6f:fd:b9:c0:cf:72:37:2a:5a:e1:f1:05:
9e:7b:73:54:d3:6f:e0:54:92:5f:7d:bf:e2:f1:4b:c7:ed:52:
5a:02:5d:d5:c6:5e:ea:15:d5:a3:9a:17:73:35:15:37:b2:6a:
91:d4:be:ff:6d:97:e9:f4:55:63:45:cb:94:29:55:60:88:47:
d1:03:92:be:c3:f2:40:37:19:8c:0f:89:37:3a:76:a8:3b:34:
68:2d:5e:30:1c:ce:4d:43:cd:09:6a:40:bb:ac:be:58:46:e3:
0b:25:59:34:83:b7:57:2b:71:c0:0e:a0:b1:14:04:f3:2a:4e:
2e:29:cb:91:3d:98:3f:f0:7d:45:01:68:ec:62:e7:71:11:07:
ad:2c:e6:59:74:fe:dc:3a:c5:74:eb:fa:de:af:3a:82:04:d5:
d9:e7:d3:7a:01:bd:24:a3:4d:5e:ed:3f:39:80:a7:4b:7b:c8:
b0:e9:4f:7d:04:0b:fc:a8:83:93:c8:d2:54:9e:10:55:42:9d:
a9:ac:ec:27:f1:d2:96:5b:38:f0:0c:28:5d:48:d3:13:93:61:
fb:59:90:b9:09:68:ca:35:83:a4:e8:ab:df:e9:a2:e1:44:38:
c7:76:d8:60:cb:e4:a4:11:d6:11:66:82:95:d8:97:d2:4f:e9:
45:75:2c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:45:04 2026 by rpki-client