Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: lkjBDJvymmSnfZkxpABVKM5z/v/ONdJ/slXHUTM4iMM=
Subject key identifier: 3F:A2:B4:0E:36:19:2C:43:B3:2E:70:59:F8:E5:E6:71:D4:9B:67:CA
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 019D9AABB8BC0C855999789DBE29FCE280D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 1655
Signing time: Fri 17 Apr 2026 09:00:38 +0000
Manifest this update: Fri 17 Apr 2026 09:00:38 +0000
Manifest next update: Sat 18 Apr 2026 09:00:38 +0000
Files and hashes: 1: CXGVhKl7DsWirjDBB4d9lp0XVYo.roa (hash: vG2ULDUsBgokxLvpRChtUJL0gfvZ1Q8YEhzTpKweXsw=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: 5f7gT4i9FJCR2pTxfpajJOZrwUlV55jW8wT4xpyh3gw=)
3: TXtG8gOe4ICQThOU5GVmNxWR1wY.roa (hash: 1oG8biV7yLA5eMcYQnufX6gNgX4sZUXdc41fFMpt6Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b8:bc:0c:85:59:99:78:9d:be:29:fc:e2:80:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Apr 17 09:00:38 2026 GMT
Not After : Apr 18 09:00:38 2026 GMT
Subject: CN=3fa2b40e36192c43b32e7059f8e5e671d49b67ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:b5:03:ee:38:bc:d9:ce:b0:7c:a2:f9:4c:
e7:b3:40:52:5e:e4:a4:0d:5a:db:24:65:56:40:94:
76:a5:e4:5f:d0:63:48:00:28:39:08:2a:37:72:6f:
5e:ba:f0:72:b0:ab:83:ea:94:54:75:c3:df:6e:ea:
d3:97:c4:5b:db:e1:f5:f1:3f:16:62:fb:7a:0b:c2:
09:cd:00:3f:bb:a6:37:70:9c:67:52:2e:d6:13:57:
bd:69:1e:4d:5d:9c:0c:5d:29:f9:ba:f9:6a:36:4a:
dd:f1:0e:2d:07:89:b9:7e:0d:7d:02:66:38:35:8f:
98:e6:9e:1f:4e:f3:aa:7f:ff:97:49:6e:29:96:8d:
71:5a:cf:dc:3e:8e:5f:7d:66:61:9d:62:58:d3:a2:
54:46:76:80:d8:ce:c5:65:ac:e0:ee:1b:26:4c:cc:
45:b9:e0:94:eb:8f:59:07:67:5c:34:a5:1a:67:ef:
72:f7:4e:99:0b:74:01:34:7c:42:5d:e9:21:7c:ee:
ee:45:41:17:92:3d:30:11:1e:0a:95:1c:c0:48:46:
d4:24:60:ce:35:f2:26:37:56:96:f7:60:50:3d:f7:
63:ab:15:11:53:ef:86:d5:36:62:08:1a:f1:77:9c:
06:27:c6:cf:d1:47:47:9b:b0:c4:d6:78:2e:f5:88:
65:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A2:B4:0E:36:19:2C:43:B3:2E:70:59:F8:E5:E6:71:D4:9B:67:CA
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e0:0d:b0:4a:5f:51:4b:4e:ae:2f:8d:84:33:22:42:ac:6f:
9a:90:94:f2:f2:a9:11:7a:76:38:87:d1:3c:23:c7:a4:d8:6f:
ae:9c:39:97:f3:5c:28:52:57:16:e7:ed:a3:2e:61:6a:85:bb:
20:e2:e3:e5:9e:e8:b7:7f:81:4f:00:05:d0:8c:e1:c9:05:9f:
eb:f6:ed:9d:da:7f:9f:a2:5c:9d:2f:b3:30:59:c4:fe:3b:86:
00:06:4a:05:85:b3:0b:29:19:b9:2f:a4:d4:3d:c2:b2:dc:2f:
84:08:a8:e9:94:ad:12:d4:37:bd:18:ee:00:8b:54:94:26:70:
ff:7a:e2:4d:94:24:39:83:66:ce:fe:1e:01:37:75:d3:c1:a4:
d0:df:87:6a:38:12:86:23:aa:84:6e:d5:32:ad:85:72:9f:46:
83:1e:e1:6d:95:6e:e0:ba:4d:2e:95:09:e5:b4:98:65:d9:52:
f2:b0:a3:b6:88:19:6a:be:99:92:57:2c:3d:ed:4f:58:cb:70:
30:41:f8:99:f2:ea:ff:9e:78:ab:b7:09:70:c5:54:7a:12:73:
5d:04:39:9a:56:30:fb:05:71:a7:98:18:6f:03:38:64:49:d3:
39:fc:82:9d:e6:b7:66:72:08:0c:31:ff:aa:a7:bb:2e:95:52:
9e:fb:ed:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:56:41 2026 by rpki-client