Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier: XZNhdN8otan9E8ch9MD+Iketl6/fgZUALmzAUz3w9dg=
Subject key identifier: 77:ED:90:B6:6C:5B:96:12:FC:1C:A0:F4:34:FC:57:51:D6:BA:0B:9E
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 019CAC102C6FE5B02DFC3E05BA1048F83895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 01:01:06 +0000
Manifest this update: Mon 02 Mar 2026 01:01:06 +0000
Manifest next update: Tue 03 Mar 2026 01:01:06 +0000
Files and hashes: 1: Q_p3RQQ_HXAPjFO1R7wMSzG_ctY.roa (hash: FFF1GXtrqdDjFsaeT8BSbn/j24vTOF2Mi08IWvzfgUY=)
2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: BiLyKmdXocFhTBzziO6zFTVQiRuZho2ipuJAsI0H4ak=)
3: vYJipEt__NYvmPqT8J0-vmljydE.roa (hash: xICOTeDyqcgtBhQlPEYdz0O2VGAqMM4d5syKeJc/PnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:2c:6f:e5:b0:2d:fc:3e:05:ba:10:48:f8:38:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Mar 2 01:01:06 2026 GMT
Not After : Mar 3 01:01:06 2026 GMT
Subject: CN=77ed90b66c5b9612fc1ca0f434fc5751d6ba0b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:21:79:ae:c3:48:f1:12:6f:29:2b:61:0a:
9c:18:39:19:d3:85:77:c8:a5:81:d5:80:04:fb:3f:
dc:7e:62:f8:25:1e:ea:b3:be:a5:b1:0e:d8:91:a9:
10:d5:73:3b:22:1a:39:a7:fa:fc:b2:36:5f:8e:ed:
4a:83:f1:96:34:19:b9:54:db:d4:ce:63:34:e7:60:
e3:f9:55:89:5a:98:52:b3:41:33:82:04:e8:3c:4a:
bc:8f:8d:20:6b:8d:bd:57:64:b0:98:84:38:43:49:
c9:72:7a:d4:ca:84:5b:b9:f8:fe:67:c0:ef:27:3b:
dd:50:bf:8a:1b:94:59:3a:c6:0c:7b:fc:2d:f2:47:
6d:44:4d:dd:8f:97:32:83:51:63:15:2b:61:09:5e:
c8:72:7a:3d:0e:bf:65:82:84:9a:7e:34:bf:62:b4:
8b:4a:bf:25:fd:90:89:f6:34:66:7e:db:72:32:f7:
9e:74:e7:da:c3:a5:6f:c4:c5:d2:96:c3:f8:dc:a9:
05:ab:0a:a1:0f:d5:d3:c7:8a:c9:13:0b:c8:6b:74:
70:06:34:3c:11:17:71:02:c6:9d:65:74:b2:a9:1b:
89:1d:96:ab:da:68:69:22:7a:e6:e4:44:0e:74:bd:
5a:3f:39:64:4c:66:3e:ac:d8:0c:7e:73:e5:5f:8c:
5b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:ED:90:B6:6C:5B:96:12:FC:1C:A0:F4:34:FC:57:51:D6:BA:0B:9E
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e8:eb:37:77:1c:68:f8:ac:75:3f:9b:f5:93:2b:68:d5:cf:
08:8a:9d:4b:88:5f:1e:09:77:df:9b:74:7f:7d:b1:eb:26:94:
bd:3f:74:3c:46:8e:f1:93:07:e5:62:ea:8d:35:41:9c:38:93:
94:aa:90:4a:52:c3:55:73:91:af:de:2c:2d:c2:89:c5:c6:fe:
f4:74:60:74:72:f6:59:67:56:d1:e2:e3:6f:ef:d2:07:3c:eb:
46:4c:c1:cd:4e:8c:74:92:e8:82:34:82:8f:c2:09:d7:14:0b:
7e:63:13:e0:ba:7b:15:fb:57:01:3e:aa:39:88:16:ed:5f:43:
1e:cc:e5:c8:3b:28:f6:01:2b:e6:9b:a4:bb:b5:be:55:20:98:
6e:13:0f:e0:5b:5b:0c:94:aa:9f:6c:d4:0e:85:dd:82:76:05:
fc:4e:89:19:40:68:bc:89:ff:e2:b4:b1:2b:0a:b4:f2:47:24:
06:99:ff:19:8c:d1:39:c9:da:2d:f8:e0:ab:ce:e5:16:b8:1a:
5a:f5:ac:12:ff:87:01:9d:10:0d:a6:21:31:7e:a5:a9:8d:86:
0b:60:8f:54:d7:4b:aa:5e:28:e3:b9:c6:0e:07:2a:fd:df:c5:
b6:a9:a3:fd:e3:f6:1a:bf:2e:c8:3d:d2:00:a0:67:44:4a:1d:
f5:94:18:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:34 2026 by rpki-client