Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json)
Hash identifier: VVPVOrBtSBl18uBZOAuqOHV2X9TI9fUE7FkaYuRkPSk=
Subject key identifier: A5:6F:C9:64:B8:97:8F:14:FC:D1:22:8A:DF:A9:2E:56:12:08:E2:BC
Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Certificate serial: 019CABD9FC05435DF6EA7B7ED7AFB1F5A7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
Manifest number: 1854
Signing time: Mon 02 Mar 2026 00:01:55 +0000
Manifest this update: Mon 02 Mar 2026 00:01:55 +0000
Manifest next update: Tue 03 Mar 2026 00:01:55 +0000
Files and hashes: 1: 1WFTVE_laDxR2551YD9-IDIhOK4.roa (hash: 1U7XfEnUkzCJgaorLVPneDn26hSAWBbm2FCXShHT0iY=)
2: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: +5YmElJBwJ/yr8IBf08zd63TRjdwqIlBBBqTgPXSTbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:fc:05:43:5d:f6:ea:7b:7e:d7:af:b1:f5:a7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Validity
Not Before: Mar 2 00:01:55 2026 GMT
Not After : Mar 3 00:01:55 2026 GMT
Subject: CN=a56fc964b8978f14fcd1228adfa92e561208e2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9b:fb:35:46:dd:bf:d4:37:04:34:d8:25:db:
89:19:d5:49:c7:ca:aa:54:28:ee:b2:4d:fe:de:59:
2f:89:a7:c6:3f:3e:02:1b:01:0c:d6:38:29:1e:e4:
1c:7b:54:1f:31:29:ea:04:12:c9:32:78:7a:a8:4b:
78:6c:99:cd:9b:c9:01:b8:9f:71:0a:26:7a:74:fa:
cf:61:e4:9d:32:39:ee:ac:35:08:f5:88:ec:2c:4a:
c9:f7:e2:4b:ee:a1:f1:ae:58:05:fd:cf:ab:ce:8e:
83:7c:20:2a:9e:53:27:7e:ec:ba:ea:b3:5e:22:be:
0c:9f:13:d3:35:5a:c1:28:96:35:13:e1:9c:41:14:
f6:e4:56:fc:22:f2:e6:d3:17:78:11:80:5e:d1:94:
bd:90:1a:f0:d1:cb:8a:46:48:24:c1:8d:02:d9:a5:
d1:dc:49:bc:63:3e:75:85:18:c3:c6:18:20:32:ef:
dd:57:43:36:f3:95:7b:27:78:33:c9:f8:bd:93:09:
e9:fb:ec:a0:5f:b0:92:3e:3e:fe:1a:f3:4c:78:af:
e1:31:db:c4:e9:df:77:ed:45:f1:98:02:05:e1:69:
4e:4a:bd:2c:18:98:c7:fb:4f:53:5d:16:1d:ed:67:
42:ed:3d:46:f3:5d:68:e4:32:de:fe:a2:43:46:e5:
c6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6F:C9:64:B8:97:8F:14:FC:D1:22:8A:DF:A9:2E:56:12:08:E2:BC
X509v3 Authority Key Identifier:
keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1d:f5:89:78:05:98:29:9f:94:69:4f:6c:f6:61:9d:6a:1c:
28:32:74:8c:ca:c2:7a:bc:0a:9e:a1:7f:83:f7:22:62:b2:bc:
ed:db:41:9e:2f:80:4f:37:f9:75:c3:ef:95:1d:f1:35:ed:10:
45:79:14:89:ab:14:14:26:47:fc:f7:6f:7a:40:31:be:b4:9a:
13:44:a3:a2:42:97:ec:73:77:9c:c7:cf:0f:98:c8:c3:ee:5a:
f8:31:13:eb:3e:e4:9f:91:11:99:da:f2:38:19:8c:6a:c9:1c:
cd:ac:85:75:96:45:22:4d:17:4d:ae:59:40:3b:08:56:46:5f:
6c:e4:b1:2e:b6:8d:d3:a5:bf:c2:30:14:61:9c:d1:4b:99:27:
bb:e4:52:05:10:d0:4d:aa:16:27:39:0c:79:1d:15:84:6a:1c:
ea:50:d5:23:88:7d:20:31:a3:3a:d9:94:a7:fc:5c:a1:4a:77:
f5:cb:b2:8a:c3:1f:28:7f:a5:87:8c:c2:5e:95:22:73:34:6b:
00:cd:8e:b9:6e:2c:3a:55:4f:a8:1f:3b:74:1c:98:59:2a:76:
9d:e4:4d:f0:aa:fb:74:77:06:da:e9:6a:93:ad:ee:d7:b6:c6:
14:8e:7b:20:67:84:eb:f9:84:33:96:83:04:35:ec:fa:0a:be:
56:03:46:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:52 2026 by rpki-client