Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: t3VWcEOMLUIn6kPRSPI9XsxWfyRQsQSnv4JFYmG1Gnk=
Subject key identifier: 2F:AE:61:2B:5A:2C:DE:4A:0A:DA:3B:A2:02:6D:59:1C:68:93:AE:1C
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 019FABD12BDBA57255150032CFBCAA3D3324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 1767
Signing time: Wed 29 Jul 2026 03:00:39 +0000
Manifest this update: Wed 29 Jul 2026 03:00:39 +0000
Manifest next update: Thu 30 Jul 2026 03:00:39 +0000
Files and hashes: 1: CXGVhKl7DsWirjDBB4d9lp0XVYo.roa (hash: vG2ULDUsBgokxLvpRChtUJL0gfvZ1Q8YEhzTpKweXsw=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: eT7/sh97XY4hW9jIu3wfsYk9IMctVVGJIH/V07cZ3Yg=)
3: TXtG8gOe4ICQThOU5GVmNxWR1wY.roa (hash: 1oG8biV7yLA5eMcYQnufX6gNgX4sZUXdc41fFMpt6Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:2b:db:a5:72:55:15:00:32:cf:bc:aa:3d:33:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Jul 29 03:00:39 2026 GMT
Not After : Jul 30 03:00:39 2026 GMT
Subject: CN=2fae612b5a2cde4a0ada3ba2026d591c6893ae1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:56:12:cf:59:42:e0:0a:b5:4a:45:6d:5f:
da:3b:80:02:56:ac:0f:1a:bb:eb:3f:10:d1:94:5c:
a2:19:c7:42:01:6d:a7:f4:fd:9f:ca:bc:3b:4e:6a:
ca:23:cf:65:90:a4:31:00:48:b1:4e:ff:7e:4c:e8:
a4:7e:8e:d6:2c:b2:a3:65:ae:24:07:65:c5:72:58:
18:93:e5:50:af:60:f9:26:1b:da:b3:28:7a:59:4b:
f3:b0:e2:6f:cc:1e:93:b5:26:04:ae:b9:30:83:f4:
bd:cc:ea:2f:41:55:f7:df:4a:45:15:fe:ec:59:d7:
7d:43:58:bb:63:b1:51:73:39:c9:09:8b:85:69:3a:
c5:54:36:f8:f1:3c:52:78:e4:a3:3a:43:44:a5:07:
ea:91:e1:b4:23:52:5d:72:54:22:0c:b4:63:18:90:
26:9c:9b:e8:00:4f:90:5b:ba:f1:a5:50:2b:68:93:
e3:57:95:47:e1:3b:f3:09:f1:f3:86:f4:0d:bd:78:
a6:a6:14:95:73:0e:b1:74:13:e2:0d:79:15:78:4d:
63:1f:06:71:e7:b2:90:0c:1e:0e:c8:54:34:c4:c2:
d2:54:07:45:ca:75:b0:83:78:d5:d4:43:09:e8:66:
56:81:db:90:19:3f:4f:b5:d3:02:23:3e:34:dc:b9:
54:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AE:61:2B:5A:2C:DE:4A:0A:DA:3B:A2:02:6D:59:1C:68:93:AE:1C
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c0:f4:4c:d0:f1:57:cf:73:f1:b6:59:91:99:de:a1:ca:9d:
e5:d8:d6:78:91:43:af:af:bf:fd:49:98:17:0a:a6:5e:6e:e0:
d1:eb:01:28:e5:61:c4:b8:91:cb:eb:5c:93:de:3c:00:ed:56:
3e:8c:93:56:9e:9d:bb:90:23:2e:21:6c:a0:61:12:08:3c:9d:
a9:87:72:18:dc:fc:fa:6a:50:dd:f7:4e:28:b4:b2:51:6d:e2:
91:e4:1f:61:7a:0e:3f:9c:4c:f0:08:7e:57:6e:4a:9a:97:c5:
02:5a:24:c4:6c:00:60:8b:30:f4:bb:96:e2:cb:10:a2:8d:c7:
81:0d:7f:56:55:3b:bb:5f:45:84:11:36:a1:25:b1:b3:0a:3c:
80:45:95:a3:6a:e0:87:ba:3f:ed:b8:6c:1b:02:06:d6:ff:f6:
bf:b3:8e:19:3f:41:5d:20:6d:82:3b:96:99:b0:9a:d9:ff:c3:
01:77:11:64:01:c0:f9:1d:f0:4a:fe:ab:cb:1f:8d:07:44:52:
41:86:ab:a1:00:17:ae:1f:5f:3f:4a:d7:ef:27:f1:c4:15:70:
18:58:1c:65:be:2c:a3:32:cf:d0:fe:61:d7:3a:f1:7f:49:98:
89:83:55:c7:01:62:fa:61:b9:b5:37:90:93:cc:55:ca:d5:c0:
e9:b7:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:10:25 2026 by rpki-client