Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
File: SOowwPKOAiacV2W_SgRWd8onlKU.mft (raw, json)
Hash identifier: RdE7AJS560BNNFeLHYSAv9cS6AgKkHyUCuGbJnvAShM=
Subject key identifier: 0C:F2:E8:BC:FD:02:E8:A9:86:8D:CA:2A:F5:86:0D:A7:A0:F4:00:D1
Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
Certificate issuer: /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Certificate serial: 019FAA87785345BBE7AC83A02A668849DC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
Manifest number: 15DB
Signing time: Tue 28 Jul 2026 21:00:32 +0000
Manifest this update: Tue 28 Jul 2026 21:00:32 +0000
Manifest next update: Wed 29 Jul 2026 21:00:32 +0000
Files and hashes: 1: QUGDzQXyufF4cTbxCFKpDXDDu0Y.roa (hash: 8BFiaRg39psluNeIpVd2PWr39z5J747/91yNbr4CXuY=)
2: SOowwPKOAiacV2W_SgRWd8onlKU.crl (hash: C2IYNl27lx1+97R1sayfqL/7fEbQsucFuvyImz3mG2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:78:53:45:bb:e7:ac:83:a0:2a:66:88:49:dc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Validity
Not Before: Jul 28 21:00:32 2026 GMT
Not After : Jul 29 21:00:32 2026 GMT
Subject: CN=0cf2e8bcfd02e8a9868dca2af5860da7a0f400d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:98:49:b8:6d:15:3d:7f:3b:fc:d4:62:3a:
58:de:7e:08:ae:4b:5e:e5:51:11:07:6e:1f:20:93:
48:4c:59:0e:19:e2:de:10:cd:38:4d:53:3c:f7:b5:
97:05:4a:92:6f:7f:4a:8b:d9:ff:6c:4c:2a:ed:aa:
88:4e:c4:05:64:e3:d7:77:ea:0c:ae:24:51:af:b7:
69:41:ed:df:f1:99:5d:49:4b:e9:8a:f1:f0:b6:c3:
52:4b:5c:c9:1e:e2:0d:79:e2:82:dc:77:2e:92:6e:
f8:cd:88:ca:f6:60:28:d2:ff:ba:de:68:c7:50:87:
1d:60:e3:35:d4:7b:f1:cd:d9:14:4a:2c:9a:6b:2a:
17:6a:cb:c0:e2:82:dc:e4:30:75:5f:f4:06:e0:39:
48:70:dd:a9:d2:46:f1:e1:e6:7d:66:92:2f:8f:df:
48:d9:04:9a:5d:be:41:93:fa:64:07:59:4c:4c:77:
e0:37:42:fa:bd:c1:c4:6b:56:05:18:ed:18:32:b0:
a3:53:9f:63:5a:74:46:ef:21:e3:20:c9:48:d5:a5:
c6:04:d8:ca:00:da:1d:1f:64:b7:a4:6a:46:b7:ab:
2b:25:1c:86:5d:dd:bf:47:51:7a:ad:b5:94:8a:ca:
65:ca:22:a1:f2:a2:cd:dd:42:36:7b:5e:82:98:62:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F2:E8:BC:FD:02:E8:A9:86:8D:CA:2A:F5:86:0D:A7:A0:F4:00:D1
X509v3 Authority Key Identifier:
keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c4:2b:18:6d:d4:8c:99:62:17:e1:bf:ba:6c:62:7d:4e:bb:
38:87:e0:f0:3d:e6:1a:91:49:f5:92:90:1a:26:ae:9b:4b:8e:
c6:79:dc:b0:2b:2c:cf:e1:15:3d:39:7f:9c:57:a4:1c:42:d1:
44:f2:8f:48:86:eb:4f:15:c5:45:55:52:2d:58:f6:3f:3f:d4:
26:eb:ce:bf:45:ad:a7:06:9c:c7:cc:05:6c:c4:28:25:98:c1:
e1:da:c8:c9:b1:82:1a:40:a2:89:b2:f6:94:d2:de:22:03:e2:
49:97:12:0e:5b:49:da:27:ad:77:df:8c:99:a9:6a:96:c1:5c:
34:45:3e:c5:25:18:55:5a:b7:4d:81:93:fc:7d:ac:47:09:35:
0f:27:e5:8f:a2:d9:15:ce:08:2f:36:c5:72:97:c8:ee:18:c5:
7d:5a:47:a8:fa:97:c1:28:18:b8:92:0f:5d:de:94:12:cd:c8:
37:f5:0f:27:d5:33:9f:71:6f:1c:f8:56:9f:15:69:7c:3b:82:
dd:83:b5:b0:d3:62:94:3b:a4:e0:64:14:ac:59:a7:d6:66:25:
e4:ab:81:2f:a3:30:df:7f:36:0d:04:b6:98:d5:64:0f:e5:84:
77:c7:98:bb:12:a9:9a:b1:89:be:d7:42:f8:d3:9b:12:d1:0c:
b2:68:69:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:09:17 2026 by rpki-client