Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
File: SOmaP-7GTWutCY0bLfC1NqA4jqM.mft (raw, json)
Hash identifier: cvLBGhoBhgxJc/B3MzoVTQuZgVDrqN5sP3jWh6o4xo4=
Subject key identifier: 39:AA:69:5C:FA:EB:A8:23:41:12:19:EF:B6:B0:8E:84:54:6B:CB:C8
Authority key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
Certificate issuer: /CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Certificate serial: 019D9AE364C4A849273171A528F3DBE4F65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 10:01:26 +0000
Manifest this update: Fri 17 Apr 2026 10:01:26 +0000
Manifest next update: Sat 18 Apr 2026 10:01:26 +0000
Files and hashes: 1: SOmaP-7GTWutCY0bLfC1NqA4jqM.crl (hash: z5lvxnFXNkY1PLOILsg8EQh1ZR7GD7RMM77wBaxstTo=)
2: ZKJ7OMsZ-2L7gwZt-ahGl36GQCk.roa (hash: dn5pl0tJHil7i7MEL6Urv0uyJj/BFkAQ/mpD5JtEACA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:64:c4:a8:49:27:31:71:a5:28:f3:db:e4:f6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Validity
Not Before: Apr 17 10:01:26 2026 GMT
Not After : Apr 18 10:01:26 2026 GMT
Subject: CN=39aa695cfaeba823411219efb6b08e84546bcbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:cf:2d:13:c0:f9:e2:ef:83:a5:1a:aa:7c:
e4:5f:aa:83:18:47:2e:3f:5b:36:32:d5:f3:34:62:
66:a9:28:dd:6f:f9:ac:ad:ed:42:b2:33:fd:71:cd:
48:57:12:98:80:e1:d4:ff:65:81:f5:73:c2:1d:70:
2b:eb:7c:7d:83:90:b6:d0:fb:4e:24:99:33:27:77:
b4:17:3c:24:2a:af:a3:39:37:7a:b9:a0:8c:d7:0d:
6e:f8:03:80:e5:db:57:2d:34:bb:7a:bb:6f:b6:81:
33:56:f9:d1:d8:ba:24:fb:c4:83:42:92:6d:d6:58:
2d:5b:9d:84:92:42:4d:bd:c4:f6:f7:d8:88:fe:bd:
ce:ac:89:36:4f:83:bc:91:16:d3:0b:30:5a:4b:4d:
e1:73:2a:2e:76:50:b4:e4:4f:34:98:fe:71:43:16:
f4:2b:a2:54:e1:aa:a6:33:9c:c6:7a:00:c4:ab:62:
f7:11:ee:77:87:38:2a:1a:d1:ae:5f:34:1b:cd:e5:
ef:19:bf:2e:57:e2:c7:ae:62:05:fa:f8:99:2b:f3:
78:75:c6:e6:cd:14:87:25:a4:9f:a3:27:2f:60:c8:
e4:b9:26:25:dd:a0:cd:7e:1b:01:32:89:b5:d2:04:
6c:4d:7e:a3:88:60:9f:86:f9:67:fc:a5:8a:a5:92:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AA:69:5C:FA:EB:A8:23:41:12:19:EF:B6:B0:8E:84:54:6B:CB:C8
X509v3 Authority Key Identifier:
keyid:48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3c:bd:d7:31:19:25:2f:c9:1c:1e:73:c5:b9:54:41:c9:7c:
bf:64:bd:18:0c:48:5c:e9:44:36:f6:f5:de:fe:98:54:20:99:
26:03:9c:55:e8:94:9a:22:3f:15:8b:9a:09:9b:a2:e3:4d:de:
9b:89:5b:0c:d7:1c:4e:11:8b:32:83:3d:65:71:95:99:2f:d3:
7d:c5:63:5a:23:b6:62:f9:e0:3c:1f:61:81:b4:41:34:d9:88:
af:24:3c:9e:04:29:e0:15:39:dc:d5:db:b3:30:44:00:45:c5:
06:d0:4b:39:b0:d1:78:41:3a:3b:14:63:b9:d5:0b:69:90:74:
5d:1b:04:2a:bb:8c:1a:28:5d:31:c6:3c:14:a7:88:70:18:86:
ee:9f:dd:dd:30:fc:22:75:32:12:69:84:19:dc:65:4c:c1:e0:
44:16:bc:0b:be:df:fb:28:cd:69:1b:17:03:4a:e8:3e:50:1d:
9c:79:08:dc:0c:bb:a9:7e:60:7a:1f:8c:2d:1c:07:da:16:b3:
e1:8b:b5:ed:65:9d:97:29:a4:6c:8e:83:08:a6:6e:cd:39:42:
8d:00:41:f8:e2:c6:9a:35:6a:b3:84:b3:88:4a:52:16:30:9a:
56:5f:88:82:36:7e:bb:06:2a:98:33:65:98:06:a4:ea:c9:e1:
34:4d:73:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:33 2026 by rpki-client