Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: dFTL0d0XWnH6YxYiRfBTks0di5D2KbsYOHBlG8iQ/9M=
Subject key identifier: 84:C0:7E:13:60:0D:4A:59:F0:B9:DA:82:D0:47:FB:C8:20:C5:B5:C4
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 019CAD22EAFD365916E4CC46F2875FC13EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 06:01:12 +0000
Manifest this update: Mon 02 Mar 2026 06:01:12 +0000
Manifest next update: Tue 03 Mar 2026 06:01:12 +0000
Files and hashes: 1: _oMe5r1pVk1eWmBM0xQjlQQMYoA.roa (hash: vP6cRMyhx+tL5mecHizDEMHQb47lEApjkAoW42mWOaI=)
2: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: 1GFjveP0r31fTDh7WXPpOYmn5Nvck+H9YoudQ8Mi57M=)
3: uECQUsjfaqrlYL383G6Bm7t8I4M.roa (hash: fiYRp6eJInd1HBPu5f1buVFXTSVD/xHqEtnjRPebiMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:ea:fd:36:59:16:e4:cc:46:f2:87:5f:c1:3e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Mar 2 06:01:12 2026 GMT
Not After : Mar 3 06:01:12 2026 GMT
Subject: CN=84c07e13600d4a59f0b9da82d047fbc820c5b5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:80:7a:8b:9f:6a:50:10:12:85:2b:25:64:
e7:56:a4:9c:ed:5d:9c:5c:a3:9a:1d:c6:3e:0f:ec:
cb:1c:9c:a3:a2:f6:c1:34:ca:5f:17:a3:d6:2c:b2:
7b:cd:45:81:b8:39:f0:b1:26:96:9e:75:d1:15:5f:
db:e4:9e:38:2e:94:98:0f:75:a9:47:a8:d6:fb:3e:
22:6c:1c:5d:4e:9b:6c:de:47:49:14:92:54:77:6b:
e2:58:1e:a6:6f:0c:a5:e2:c5:55:05:35:4c:f7:d5:
c9:6c:e4:4c:ef:59:dc:4b:f8:da:b7:59:e4:e9:f3:
06:5e:8a:61:97:4b:2a:83:4c:29:88:8d:de:3b:76:
6a:64:3e:a0:f3:e9:bc:e6:d7:24:09:90:ab:b9:ee:
91:81:81:ca:af:e7:bd:07:a9:43:48:c1:f2:d7:9d:
f4:94:d0:29:b3:b2:3d:63:42:38:f8:93:94:0d:a8:
27:11:51:b0:c5:99:90:e1:b3:e3:26:ec:d5:0e:cd:
90:18:aa:1e:b9:bd:47:a7:c9:98:a0:b4:a6:07:2c:
79:57:36:9c:6a:f4:5c:f0:eb:da:a6:82:9a:65:ff:
9b:39:85:2e:e8:4f:0d:9e:8b:97:ba:21:f7:d6:37:
95:9a:ff:b5:07:2f:26:f8:9d:47:3c:31:94:d3:2a:
88:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C0:7E:13:60:0D:4A:59:F0:B9:DA:82:D0:47:FB:C8:20:C5:B5:C4
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:4c:68:5d:79:b8:89:53:90:a4:0b:b7:62:1e:92:d2:7a:1c:
c9:76:08:75:2a:37:5f:6a:a4:fe:83:d6:0a:79:a8:d5:7c:88:
55:9e:35:06:e7:8f:cc:e8:7a:e5:15:34:35:a2:a8:85:26:e3:
90:62:5c:96:e6:e9:ae:2b:d0:21:66:fd:08:c2:04:5d:26:36:
3f:96:8a:eb:4a:46:e1:74:6a:75:25:13:31:c8:7d:5e:88:03:
d9:5a:61:42:cc:00:8f:3d:67:f3:2f:ed:62:1d:75:dd:0b:18:
35:ae:b2:dd:17:97:5c:bf:7b:21:68:5d:c9:b4:78:24:e1:64:
4e:e9:02:6f:8d:d0:af:8f:c5:06:aa:a6:b5:ec:fe:ab:7d:6e:
69:80:b6:28:86:6e:be:e7:3f:0a:62:c9:ed:6c:10:2a:5b:72:
ec:d1:bb:26:c3:ab:44:ec:c0:ca:aa:88:00:f4:97:d2:88:80:
d0:3e:95:4b:7c:59:3b:13:4f:69:d8:87:e9:8d:48:45:d5:eb:
7d:14:ad:71:d9:b0:41:b3:3a:a6:84:63:a3:27:fd:cb:24:78:
7b:14:b0:4f:e6:cc:a2:d8:9d:02:68:09:52:ca:e2:07:3b:a5:
6a:8d:09:95:cf:c4:9e:d8:8b:f9:7a:c9:3d:56:ce:2a:d3:f0:
b8:ca:5e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:48 2026 by rpki-client