Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json)
Hash identifier: tiw/4KZLBVoJ9hm+vTbIQykn0erWqcOMPe3UgRNbcEQ=
Subject key identifier: 4F:9B:58:03:DD:69:89:81:EC:E9:EF:30:30:28:E0:36:63:30:C2:8B
Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Certificate serial: 019D9962AFE9DA0F99C28EDE77FBA94F8667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
Manifest number: 18CF
Signing time: Fri 17 Apr 2026 03:01:14 +0000
Manifest this update: Fri 17 Apr 2026 03:01:14 +0000
Manifest next update: Sat 18 Apr 2026 03:01:14 +0000
Files and hashes: 1: 1WFTVE_laDxR2551YD9-IDIhOK4.roa (hash: 1U7XfEnUkzCJgaorLVPneDn26hSAWBbm2FCXShHT0iY=)
2: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: sNu+o3QqZlcwvJvTIFbaISbx4Uj5yjpRLZ/PDlF7PrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:af:e9:da:0f:99:c2:8e:de:77:fb:a9:4f:86:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Validity
Not Before: Apr 17 03:01:14 2026 GMT
Not After : Apr 18 03:01:14 2026 GMT
Subject: CN=4f9b5803dd698981ece9ef303028e0366330c28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a7:e4:72:38:9f:f1:0e:27:01:91:be:44:34:
f2:02:fe:1a:fe:0d:cd:2f:52:a9:a6:54:27:05:be:
1e:a9:88:8c:40:a0:11:18:e0:87:e6:46:26:0c:83:
1c:2c:17:9a:82:0e:a2:99:aa:d7:a3:f8:e5:84:47:
cb:e1:ec:7c:8c:c6:a1:91:77:4d:21:cd:99:f9:ce:
e6:95:73:3b:42:22:7a:38:f4:0e:2e:33:17:d9:30:
77:6c:85:ca:61:ca:91:d7:5b:39:d2:11:bc:75:5f:
ef:43:98:01:25:33:61:d7:31:8e:13:96:e6:65:33:
d2:40:10:81:1d:6b:ad:c3:d9:a9:10:77:ea:bd:f1:
ba:81:62:3e:68:43:89:02:47:56:27:2f:59:7a:93:
8b:5c:8a:dd:89:df:3b:3d:f6:80:e0:cc:3c:8a:8e:
30:50:a2:e7:eb:88:95:d3:09:87:c9:d2:54:ae:9a:
e8:3c:0c:b0:f3:db:49:8e:34:b8:30:2c:59:45:6a:
58:8c:09:86:b3:21:d2:dc:f7:26:b5:e9:61:21:e5:
59:6b:e1:09:e6:fb:4f:8b:23:bd:86:73:d6:2b:b4:
51:2c:88:6b:01:23:c2:4e:19:ca:9e:eb:bf:88:6f:
1c:d5:ac:8e:34:c0:ee:62:03:60:9e:39:51:59:6d:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9B:58:03:DD:69:89:81:EC:E9:EF:30:30:28:E0:36:63:30:C2:8B
X509v3 Authority Key Identifier:
keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:76:9e:42:a6:b9:0b:54:9b:7b:2f:da:31:75:6c:09:7d:a5:
37:6f:c0:8f:6c:d2:7a:88:c3:00:c1:99:ba:ae:a3:db:92:58:
9c:c2:30:e6:2d:17:06:00:ab:01:40:70:b7:62:ec:bb:f9:9b:
53:c8:ab:f4:13:07:fb:b3:27:83:18:77:95:31:72:9c:7f:48:
2e:67:af:cc:29:05:58:d8:db:d0:41:af:29:2b:6f:57:78:38:
55:81:5b:a8:46:0d:94:ac:71:db:b1:d3:de:8e:ed:40:1d:e2:
36:e4:5c:70:7d:ea:9e:21:92:81:21:ca:0c:4b:be:9c:3b:d9:
49:a6:fd:4c:09:d5:12:8c:6b:1a:00:be:99:45:6f:36:c5:03:
db:ad:03:75:a5:57:9f:96:dc:2b:74:f3:bb:1f:9d:93:ec:6e:
1f:04:15:3f:cb:6b:0e:ee:c0:cf:52:8b:5f:32:11:a1:f6:63:
1f:13:18:1e:2a:28:68:b2:11:f1:4f:61:5f:ad:9b:24:9e:c7:
1d:c3:a4:09:a7:95:6e:f9:1b:45:5e:9c:f8:ac:12:74:92:c4:
af:e1:17:93:56:fc:18:c3:78:7c:ad:44:4d:32:3a:08:a0:ed:
b6:a4:48:11:04:20:41:25:d8:9e:70:24:a4:43:bc:8c:10:80:
35:68:d9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:14 2026 by rpki-client