Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: BuUUcqvVm7A8J/EkSdAb9gojZ8+cW1sGNDK2TJ/sh/Y=
Subject key identifier: 4B:CD:B7:E1:34:3F:29:DB:73:B3:CC:7A:EE:2A:34:65:59:1E:A8:D1
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 019CAD22D0D6ECA76197D21E879DF67E2524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 15DA
Signing time: Mon 02 Mar 2026 06:01:05 +0000
Manifest this update: Mon 02 Mar 2026 06:01:05 +0000
Manifest next update: Tue 03 Mar 2026 06:01:05 +0000
Files and hashes: 1: CXGVhKl7DsWirjDBB4d9lp0XVYo.roa (hash: vG2ULDUsBgokxLvpRChtUJL0gfvZ1Q8YEhzTpKweXsw=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: yNDESYKejlGy8PGxIicX1vakpkkglSxkXCC5SiJEcLM=)
3: TXtG8gOe4ICQThOU5GVmNxWR1wY.roa (hash: 1oG8biV7yLA5eMcYQnufX6gNgX4sZUXdc41fFMpt6Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:d0:d6:ec:a7:61:97:d2:1e:87:9d:f6:7e:25:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Mar 2 06:01:05 2026 GMT
Not After : Mar 3 06:01:05 2026 GMT
Subject: CN=4bcdb7e1343f29db73b3cc7aee2a3465591ea8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:dc:6f:6a:bb:c9:69:17:f7:c2:38:a3:f2:
c5:ba:b3:56:41:0d:d7:78:05:7a:21:19:80:02:29:
1a:36:39:6e:15:33:e9:be:34:f4:66:7a:12:83:73:
15:a4:14:3d:6f:8b:20:2f:40:e1:30:fd:c9:1c:58:
bd:0e:be:14:7b:4d:eb:31:4e:90:64:92:dc:23:39:
81:3a:56:10:c3:9f:4d:7b:a2:21:e7:ae:02:d1:fb:
4e:dc:e3:71:d6:f7:e1:e9:ea:ed:e9:66:4f:bb:2e:
fa:dc:d7:8a:46:ce:fd:07:6c:00:81:b9:6f:1b:61:
b4:83:b3:65:5e:82:9f:24:ef:a2:2a:a1:56:97:4f:
4e:46:13:16:b3:a6:8a:c4:44:80:56:3a:dd:3b:20:
cf:a2:16:35:cb:5f:e2:a1:71:cb:c0:3f:71:a5:8b:
af:8d:bb:99:e2:93:e7:df:9f:6b:c6:1f:0e:f4:78:
8a:57:7c:a1:49:93:6c:b9:8c:df:e8:8e:2d:60:04:
0b:54:6d:f5:af:42:01:d6:fd:19:49:90:c5:8b:c8:
5b:a9:d3:b4:55:05:26:10:6d:ec:a6:b0:33:fe:4f:
50:79:db:8a:32:cd:f3:f4:30:db:62:da:e8:6b:be:
33:fe:6f:d5:52:57:c3:12:c0:a4:60:40:db:09:63:
6d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CD:B7:E1:34:3F:29:DB:73:B3:CC:7A:EE:2A:34:65:59:1E:A8:D1
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fa:19:09:e5:66:ad:ce:3f:f9:b8:e0:c5:5d:29:17:cb:14:
0b:c3:c0:c7:12:21:90:68:14:c6:0c:c6:5b:62:b0:e8:f0:bf:
91:a6:cc:99:02:33:ea:eb:a0:d7:19:ed:67:1e:6c:63:38:c2:
18:a3:32:7f:42:df:6c:14:6e:92:c7:cb:16:36:9a:7f:48:37:
d8:d5:9b:44:da:f2:17:e4:6f:49:e6:19:78:ba:d2:99:61:48:
6e:b8:fd:49:3d:05:d5:76:e7:de:2b:a2:b1:7a:ba:44:1e:77:
35:a3:53:15:83:99:a1:1d:d4:6f:09:29:38:6c:fa:db:4d:a8:
9e:8a:a2:d1:15:16:9e:a6:5e:df:c2:df:68:e4:cf:17:c6:99:
c9:d1:86:1b:82:46:f9:83:08:e0:34:11:d4:7c:f4:e0:b2:f7:
0d:29:05:6e:81:14:38:a1:58:37:96:a2:29:2f:76:b0:33:74:
c4:6d:a7:47:c9:89:c5:5a:ba:4d:98:65:d1:62:1d:19:23:2a:
84:eb:7e:2e:53:b4:a1:75:af:6b:04:04:b6:02:a9:4e:95:d0:
1a:83:22:50:95:2e:e1:93:d4:8e:5c:c1:95:17:26:22:38:95:
98:6e:c1:00:9d:56:88:7a:6c:b6:b2:96:d7:eb:f4:d9:ee:b9:
a4:b0:7f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:39 2026 by rpki-client