Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier: 2AFNLj5/9+2dQdL3gOkMd/udc53c08TwNtkeN/qVKtk=
Subject key identifier: 36:5E:FF:39:05:F1:97:FC:D5:A6:2E:FF:67:75:8C:BC:2B:3F:B8:20
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 019D99990012FD4BEE5715A00A9835014519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 04:00:34 +0000
Manifest this update: Fri 17 Apr 2026 04:00:34 +0000
Manifest next update: Sat 18 Apr 2026 04:00:34 +0000
Files and hashes: 1: Q_p3RQQ_HXAPjFO1R7wMSzG_ctY.roa (hash: FFF1GXtrqdDjFsaeT8BSbn/j24vTOF2Mi08IWvzfgUY=)
2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: wGvcn04D2e0uZL55TImJ/pUZXzNnpAK1E4+zuswzpt4=)
3: vYJipEt__NYvmPqT8J0-vmljydE.roa (hash: xICOTeDyqcgtBhQlPEYdz0O2VGAqMM4d5syKeJc/PnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:00:12:fd:4b:ee:57:15:a0:0a:98:35:01:45:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Apr 17 04:00:34 2026 GMT
Not After : Apr 18 04:00:34 2026 GMT
Subject: CN=365eff3905f197fcd5a62eff67758cbc2b3fb820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:b1:49:db:81:93:1f:aa:52:df:08:f8:4d:
df:63:cc:32:3b:ca:31:39:9e:30:75:66:56:e3:22:
1b:3e:d6:66:14:2a:0b:54:19:dd:9e:dd:a3:4d:32:
02:12:7d:0d:ba:86:85:25:1d:a6:1a:c2:55:fc:7c:
ad:9d:97:ea:03:e8:43:3b:81:be:ea:a3:73:13:c9:
e3:8a:14:72:44:f6:05:f7:78:cc:25:ac:98:95:f1:
96:07:63:11:a9:44:dc:d7:6c:01:d8:99:9d:4d:c2:
6b:80:cf:28:78:3a:a0:7f:a7:eb:0d:62:42:15:9e:
3b:a1:50:d8:3e:bd:d8:6f:84:68:f1:88:be:f9:1a:
bc:e5:f1:61:a4:4a:f6:30:22:32:0f:3a:6b:66:85:
bb:08:f5:43:a2:57:6d:7e:60:69:c7:94:71:cf:bd:
db:75:91:05:9d:ed:c9:03:1d:bb:f4:2f:c4:cf:98:
82:0e:44:cb:96:6b:72:89:58:88:bc:3e:2f:87:2a:
91:0f:34:ec:3c:c7:d0:46:46:4e:41:63:66:16:66:
67:3c:d7:07:50:df:a4:9a:e8:e7:08:85:96:76:64:
c2:d7:44:80:f2:bc:49:78:58:22:29:f7:23:db:00:
1a:fb:9a:12:9b:fa:80:ad:e5:aa:33:1d:b3:53:14:
7f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5E:FF:39:05:F1:97:FC:D5:A6:2E:FF:67:75:8C:BC:2B:3F:B8:20
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:26:47:1b:7a:68:38:6b:11:98:23:cf:5b:f5:51:a1:53:8a:
2f:a0:55:26:cd:8f:c5:9b:da:a8:65:e8:82:6c:10:7f:a1:93:
3f:41:12:96:1d:ab:e3:8d:68:37:48:46:43:65:53:26:4a:a6:
c8:da:cb:67:61:46:74:25:8a:7b:aa:a3:52:74:59:4b:f2:0a:
ad:1f:98:5d:18:c4:2b:17:2d:11:e1:50:95:ee:79:03:22:17:
8b:64:75:0e:c2:4c:51:4d:a6:0a:b7:a3:14:a1:ff:63:a9:8b:
a4:af:f3:81:b6:0c:9e:05:e9:73:c2:66:66:ca:fa:52:01:a4:
e9:81:7d:9e:e8:aa:c8:3f:2f:6c:ec:f3:1f:43:72:bb:3e:0f:
4c:6d:ed:9b:18:53:e7:45:71:5f:f0:df:2b:4f:33:1d:1a:a8:
cc:2b:7a:0c:75:08:3d:7d:19:00:ba:d8:c6:83:45:c8:b1:5b:
27:fc:d8:0d:ec:e8:d8:14:a7:d5:54:13:68:7a:af:3e:ba:e9:
9a:a9:29:66:e1:17:d9:aa:11:c1:88:63:44:13:ee:15:04:da:
16:9a:45:bd:cd:54:de:10:40:fd:a3:44:50:52:7f:8a:d9:e3:
a3:cf:de:d2:aa:82:57:04:ce:55:dd:09:0c:0d:4f:a1:39:fa:
74:ef:da:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:51 2026 by rpki-client