Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
File: SOmaP-7GTWutCY0bLfC1NqA4jqM.mft (raw, json)
Hash identifier: 8He8p9Xy6lk388OWZAp+SHKNQO+MnVblPcfGVYS0u7E=
Subject key identifier: 84:AF:21:BD:CD:D6:7E:22:36:69:AA:B2:9E:98:50:FB:10:6C:FC:57
Authority key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
Certificate issuer: /CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Certificate serial: 019CAF48702EE043D0FE065A53E09F0E2DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 16:01:25 +0000
Manifest this update: Mon 02 Mar 2026 16:01:25 +0000
Manifest next update: Tue 03 Mar 2026 16:01:25 +0000
Files and hashes: 1: SOmaP-7GTWutCY0bLfC1NqA4jqM.crl (hash: ycf0gXXlq0AetN1pqUBbe4H9zn647MBPUZngDgR7YRA=)
2: ZKJ7OMsZ-2L7gwZt-ahGl36GQCk.roa (hash: dn5pl0tJHil7i7MEL6Urv0uyJj/BFkAQ/mpD5JtEACA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:70:2e:e0:43:d0:fe:06:5a:53:e0:9f:0e:2d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Validity
Not Before: Mar 2 16:01:25 2026 GMT
Not After : Mar 3 16:01:25 2026 GMT
Subject: CN=84af21bdcdd67e223669aab29e9850fb106cfc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:51:35:6c:7c:6f:02:78:a2:ea:46:1b:f8:
5b:34:ff:a0:0f:81:e2:fc:1b:30:19:08:26:da:2a:
5b:ba:ad:41:7a:a3:68:68:5c:ad:be:dc:a1:69:23:
5d:1c:e0:f5:32:fd:46:6b:93:3a:39:63:28:65:26:
2c:7d:76:a7:ff:28:20:10:c3:e0:b0:e2:5c:11:4d:
3a:c7:81:b5:e9:a9:25:39:43:37:a8:c7:45:ae:3b:
16:57:fc:11:3b:44:bc:8c:19:3f:fd:93:a0:32:e2:
76:e4:01:08:fa:79:0f:8a:8c:78:df:14:57:2e:d5:
99:b1:f8:58:97:f2:e7:f9:73:6c:53:b4:81:14:5a:
30:11:07:1e:98:5c:6b:55:77:df:3e:c0:55:96:f6:
c2:8d:8d:52:17:e8:7c:e1:81:2c:0b:46:0d:8a:c0:
54:69:43:e0:c3:51:e3:c0:2a:0f:70:14:ce:4a:c4:
f9:7a:1f:4e:c8:0e:19:bf:7e:ac:e6:70:ca:cd:2c:
2b:77:83:f7:4f:aa:59:0c:41:db:f9:97:16:99:14:
01:b3:e1:21:19:e1:80:8c:f0:2b:1c:c0:36:04:62:
57:e6:b9:c9:24:cd:29:ac:28:6a:44:75:d9:83:29:
ea:92:da:64:d9:b3:9b:90:98:62:84:f2:71:3d:04:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AF:21:BD:CD:D6:7E:22:36:69:AA:B2:9E:98:50:FB:10:6C:FC:57
X509v3 Authority Key Identifier:
keyid:48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4e:26:eb:44:51:61:37:6a:12:35:ee:bb:58:73:3a:d1:ff:
fd:7b:7d:9a:29:1f:69:e5:e3:53:90:88:28:0f:89:04:23:bc:
3b:0d:0e:18:e1:2b:22:66:26:8b:9c:59:e4:fd:45:1d:93:20:
9a:73:da:30:25:39:65:7f:1d:03:c5:84:40:ee:0b:a2:96:8d:
6d:fe:f8:e6:74:4d:de:f4:bc:1a:ab:6f:e1:b2:b1:7e:31:c3:
20:7c:98:a5:1c:a8:db:c4:f5:be:69:2a:88:5a:74:fe:fa:12:
9f:e8:ae:1f:93:9d:e3:e5:06:eb:02:cb:fa:91:fc:4f:01:72:
7b:8e:57:2c:87:02:46:66:21:7b:59:ed:a5:1f:ba:6d:b7:60:
4e:f0:90:07:b6:53:9f:9b:ef:c2:a1:48:38:c8:80:30:18:0a:
18:5e:f4:e9:ed:e9:f3:05:b4:18:f4:bf:1b:95:b1:d2:6d:40:
5f:af:f3:b8:c9:5f:ba:64:ce:82:27:b0:7f:23:81:7f:cc:64:
57:c4:fc:96:dd:b4:69:78:92:69:eb:fb:6c:80:ec:eb:51:ba:
a7:cc:0a:52:05:66:c5:8d:6d:ac:7d:36:62:24:a9:24:2c:3e:
c7:99:6d:ea:0e:68:3d:84:29:35:91:b4:b2:df:a5:1a:8d:0e:
78:c8:45:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:30 2026 by rpki-client