Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: FUT0+7kfR/FYOO1RmwllhtLUoXU9mF0wxA73Y8Kibw8=
Subject key identifier: 97:3C:34:65:A0:39:10:1E:89:10:B6:7F:62:84:23:E7:D1:EA:5A:6E
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 019EC224C3C3257A54C64413A17C25432F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 16EE
Signing time: Sat 13 Jun 2026 18:00:49 +0000
Manifest this update: Sat 13 Jun 2026 18:00:49 +0000
Manifest next update: Sun 14 Jun 2026 18:00:49 +0000
Files and hashes: 1: CXGVhKl7DsWirjDBB4d9lp0XVYo.roa (hash: vG2ULDUsBgokxLvpRChtUJL0gfvZ1Q8YEhzTpKweXsw=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: /TPmkMouoQI8v3H4KdP5O6MRElB3MflXulVwF3YBllk=)
3: TXtG8gOe4ICQThOU5GVmNxWR1wY.roa (hash: 1oG8biV7yLA5eMcYQnufX6gNgX4sZUXdc41fFMpt6Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:c3:c3:25:7a:54:c6:44:13:a1:7c:25:43:2f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Jun 13 18:00:49 2026 GMT
Not After : Jun 14 18:00:49 2026 GMT
Subject: CN=973c3465a039101e8910b67f628423e7d1ea5a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b3:c1:e7:87:cd:0d:e5:37:1a:88:7c:3c:6d:
09:b4:45:fb:b6:fb:a3:10:dd:23:40:46:61:d8:85:
20:4f:e8:a7:53:1f:68:11:18:d9:bc:f2:02:aa:a4:
87:ad:8f:de:7a:ac:7c:6c:b0:c2:d6:12:c9:79:84:
e6:cd:78:84:e6:7b:6b:70:1b:d1:51:d1:e4:38:59:
00:64:29:62:a9:53:3e:f7:bb:b4:7a:1e:e5:6b:e8:
b6:d4:04:ad:2d:93:ec:d2:15:72:cc:e1:ba:06:bf:
7b:06:7b:87:10:6c:73:31:e6:33:c6:06:09:a9:da:
79:21:f1:77:49:a5:0c:a1:02:0c:b4:cf:d3:e2:98:
7a:04:fa:f2:68:5b:c4:b3:27:f5:6b:71:6f:6e:44:
64:ac:c2:53:9a:7c:69:3b:ab:f0:1d:8e:3d:bc:2c:
3e:11:83:8b:c9:d0:d6:5e:00:82:b8:4f:a3:70:03:
1f:69:e7:e5:85:c9:6f:ba:93:29:1b:29:9b:93:ae:
24:58:9f:e3:cc:72:7b:34:12:41:9b:91:17:38:34:
62:2e:f3:bb:7c:43:13:66:94:7f:9c:e1:35:33:28:
9d:14:3c:ef:f6:d0:28:13:e2:62:19:a4:f8:3a:07:
cb:d0:64:8b:d6:0c:ac:bb:ad:0d:7a:6e:5b:1d:d1:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3C:34:65:A0:39:10:1E:89:10:B6:7F:62:84:23:E7:D1:EA:5A:6E
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bc:36:e1:c9:7e:47:a8:2a:4f:db:df:c2:6c:dd:31:9f:77:
25:c8:26:8d:3e:e0:3a:a9:67:6f:01:17:4c:3c:38:15:c2:fe:
50:87:ef:b9:81:58:dc:10:6a:b9:3e:8c:4d:11:76:b0:0a:e9:
00:39:b6:ac:ab:23:e7:e3:bb:20:6c:07:93:be:c8:f5:c4:38:
a8:28:68:af:67:5c:46:84:e4:37:6a:b5:19:4c:ce:9c:af:9d:
6e:2c:ad:a7:66:dd:43:54:01:f8:73:12:f3:7d:14:69:bc:ba:
27:72:7f:80:20:2b:9c:dc:4b:8a:b7:30:76:f6:03:59:50:04:
07:0d:9d:eb:f6:3c:b9:31:fd:2a:5e:1b:7f:8f:dc:a9:8d:aa:
b9:7d:78:98:7f:7d:79:ec:38:67:81:e9:13:d6:cf:8b:71:8c:
3e:91:58:ed:7d:3a:87:17:6f:be:16:14:89:01:9b:b3:3f:eb:
97:7e:47:37:b3:b2:bf:5c:66:19:d7:b7:21:63:4f:4b:68:58:
d5:c2:be:bb:2d:65:20:93:b4:29:d0:cd:a7:1a:21:9b:33:96:
6c:a8:78:56:6f:a1:56:47:fb:35:80:3b:99:32:c6:d4:d7:b4:
34:a4:11:27:c8:93:7b:f9:5b:0a:34:94:7f:f2:46:00:08:17:
fc:c4:ac:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:06:19 2026 by rpki-client