Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/7b073f-55d1-4f39-9b4d-99ca067e9c73/1/SOKm6Z0EHuHi33zv7wVaav84-ws.mft
File: SOKm6Z0EHuHi33zv7wVaav84-ws.mft (raw, json)
Hash identifier: JFnxfxOEUKvXe8wlpweWGg1GDEYuHdbLTlMpfJOWCx4=
Subject key identifier: 36:59:CC:1F:EE:6C:BD:9C:B0:FF:B8:73:25:34:F1:4A:C0:2F:BE:C6
Authority key identifier: 48:E2:A6:E9:9D:04:1E:E1:E2:DF:7C:EF:EF:05:5A:6A:FF:38:FB:0B
Certificate issuer: /CN=48e2a6e99d041ee1e2df7cefef055a6aff38fb0b
Certificate serial: 01A0C40E8B7BAF2E17D4152AFD9018787017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOKm6Z0EHuHi33zv7wVaav84-ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b073f-55d1-4f39-9b4d-99ca067e9c73/1/SOKm6Z0EHuHi33zv7wVaav84-ws.mft
Manifest number: 8D
Signing time: Mon 21 Sep 2026 13:01:22 +0000
Manifest this update: Mon 21 Sep 2026 13:01:22 +0000
Manifest next update: Tue 22 Sep 2026 13:01:22 +0000
Files and hashes: 1: 77tOqSkccCqsgT7iwIh2WZxvYEU.asa (hash: 6cF0YRlZJ/irgaMjCJ/XGKH92QA9xLcwVuVDTHgofKs=)
2: SOKm6Z0EHuHi33zv7wVaav84-ws.crl (hash: xtQ5e2i0c6ix2+3I1aZSA8tINygljHXV/8hvRSR42bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b073f-55d1-4f39-9b4d-99ca067e9c73/1/SOKm6Z0EHuHi33zv7wVaav84-ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7b073f-55d1-4f39-9b4d-99ca067e9c73/1/SOKm6Z0EHuHi33zv7wVaav84-ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOKm6Z0EHuHi33zv7wVaav84-ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:8b:7b:af:2e:17:d4:15:2a:fd:90:18:78:70:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e2a6e99d041ee1e2df7cefef055a6aff38fb0b
Validity
Not Before: Sep 21 13:01:22 2026 GMT
Not After : Sep 22 13:01:22 2026 GMT
Subject: CN=3659cc1fee6cbd9cb0ffb8732534f14ac02fbec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a6:40:bb:58:a3:a0:fe:3c:2d:ed:54:bd:f9:
90:46:10:9f:ec:75:64:a9:a6:fe:9d:7c:81:a7:61:
51:45:a9:16:ff:f2:05:2c:59:ce:ad:8c:4f:5a:43:
71:19:80:c0:b0:46:1d:49:06:ce:83:4d:6d:3c:aa:
5d:30:6f:89:ef:17:a5:27:b6:0e:4d:8c:e5:f4:2b:
32:d0:70:d3:b4:13:06:8e:b7:a9:c6:3b:43:ed:d4:
b8:63:1e:40:4f:b3:65:db:f2:e6:3a:68:d2:e2:f8:
be:39:f8:94:2b:ab:2a:c8:fb:df:b9:80:fb:02:c3:
a0:78:c9:49:a4:72:5b:27:0f:0f:f1:8a:35:a3:70:
77:e9:12:57:35:30:32:90:f4:da:c2:6f:70:ba:7b:
00:43:63:ac:17:86:2e:9c:f4:36:38:9f:f9:3b:49:
99:6c:dd:35:78:19:e4:81:45:56:13:00:90:e2:97:
68:cb:3e:57:08:fa:b0:10:21:3f:58:1a:93:d0:2f:
cb:b9:87:8e:7a:9c:c7:bd:5a:6f:02:8b:fe:4f:ab:
b6:57:ec:a5:61:64:95:d5:5b:86:8f:90:8f:b7:4e:
0f:c1:cc:6a:bd:14:b6:8d:08:69:03:40:04:41:0c:
02:c3:75:93:96:d5:ba:06:f8:ce:16:48:cf:f1:77:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:59:CC:1F:EE:6C:BD:9C:B0:FF:B8:73:25:34:F1:4A:C0:2F:BE:C6
X509v3 Authority Key Identifier:
keyid:48:E2:A6:E9:9D:04:1E:E1:E2:DF:7C:EF:EF:05:5A:6A:FF:38:FB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOKm6Z0EHuHi33zv7wVaav84-ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b073f-55d1-4f39-9b4d-99ca067e9c73/1/SOKm6Z0EHuHi33zv7wVaav84-ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b073f-55d1-4f39-9b4d-99ca067e9c73/1/SOKm6Z0EHuHi33zv7wVaav84-ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c4:ab:42:42:7c:88:3b:00:3e:dc:10:13:d8:2d:94:23:d1:
e6:10:66:72:9f:e7:6b:b8:70:01:54:e8:37:c2:c8:4c:01:ae:
a2:9a:24:f0:88:ab:88:16:ae:97:59:f5:d5:1b:cd:13:34:85:
85:38:5c:8f:6a:af:fb:d9:5b:3f:c1:db:a5:5f:06:9b:34:2e:
2c:b1:a4:b7:01:c5:d2:bc:80:f6:22:0e:3c:ef:0e:74:91:8d:
ae:bd:10:a3:38:a5:0f:ab:f6:af:96:64:b3:3b:d1:6b:1c:e8:
3a:64:04:75:c3:af:45:2c:83:68:2a:2b:35:ed:bc:7b:47:e5:
7d:a7:73:b3:6f:68:6b:07:5e:33:f2:53:9a:37:51:a3:45:fd:
1b:67:55:97:4a:dc:1d:1e:9d:4d:f7:b7:45:55:9f:af:5a:71:
92:9e:7c:ef:30:bf:a7:dd:6d:0a:96:f0:31:e2:c8:b4:84:f7:
a7:15:30:92:2e:d6:4e:8b:2c:c6:44:32:9d:8a:dd:9e:b8:82:
7e:79:29:d6:a6:aa:80:50:fb:52:58:e2:ab:56:ab:80:af:3a:
76:d1:80:e4:91:7e:ad:69:32:0d:08:c5:89:f4:a4:1a:b2:a2:
b9:a2:53:0a:28:c3:5b:37:db:de:db:e9:0a:12:ed:91:03:bc:
1d:88:5d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:12:01 2026 by rpki-client