Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
File: SOowwPKOAiacV2W_SgRWd8onlKU.mft (raw, json)
Hash identifier: +hZDZ1OdWxpelIyWmrf1H0bK4k4B6CHZg7iZHy42SII=
Subject key identifier: 40:1E:47:EE:BE:23:F0:66:7C:93:45:E3:54:8F:CD:32:54:83:6A:D3
Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
Certificate issuer: /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Certificate serial: 019CA9EB0CF1FC3DE833040BA9BE4FBD2697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
Manifest number: 144D
Signing time: Sun 01 Mar 2026 15:01:19 +0000
Manifest this update: Sun 01 Mar 2026 15:01:19 +0000
Manifest next update: Mon 02 Mar 2026 15:01:19 +0000
Files and hashes: 1: QUGDzQXyufF4cTbxCFKpDXDDu0Y.roa (hash: 8BFiaRg39psluNeIpVd2PWr39z5J747/91yNbr4CXuY=)
2: SOowwPKOAiacV2W_SgRWd8onlKU.crl (hash: cHB5dUX0PZyV5WHi6MMoAopqa/GLEv4sIf5FM7dJOZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:0c:f1:fc:3d:e8:33:04:0b:a9:be:4f:bd:26:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Validity
Not Before: Mar 1 15:01:19 2026 GMT
Not After : Mar 2 15:01:19 2026 GMT
Subject: CN=401e47eebe23f0667c9345e3548fcd3254836ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:bd:ba:c6:fe:a6:f2:4f:e1:c4:bb:4b:33:
80:26:2f:2a:52:90:10:43:a5:6e:47:8e:60:a7:ed:
13:bc:11:b5:69:cf:d4:0e:49:b4:3d:35:de:ef:bf:
a8:44:d5:8e:50:c4:7f:70:3d:d9:41:06:2a:63:03:
91:90:78:83:c1:4e:67:fe:a8:14:4a:19:24:84:60:
fd:d5:a0:b5:15:f6:91:34:a5:86:9a:54:94:55:b9:
44:90:90:fe:8a:58:23:28:fc:86:6d:9a:f2:f2:f2:
3b:e9:73:28:0b:9d:eb:00:6d:7d:94:b8:77:64:ca:
1e:37:77:2b:20:54:6c:27:09:61:1c:c2:71:29:1f:
6b:aa:f7:3b:5a:73:86:94:26:e1:aa:d4:fe:42:f2:
9d:88:3f:ac:15:ac:86:23:c1:03:d5:1b:95:aa:7b:
f0:8e:87:04:35:fb:e8:75:58:30:22:5f:52:60:38:
3f:c8:39:95:fc:b9:14:12:e7:d8:a0:52:40:bc:f6:
59:a8:5e:f4:d2:ca:60:b1:15:df:0a:4a:d8:9e:f8:
8d:25:6f:41:e6:32:1f:e8:b1:a0:50:d8:87:b7:3b:
f7:7c:63:de:3c:90:fd:6e:46:fa:07:ed:cf:c3:9d:
f5:ff:db:a9:55:ba:1b:6a:1e:a8:b7:62:db:26:88:
8d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1E:47:EE:BE:23:F0:66:7C:93:45:E3:54:8F:CD:32:54:83:6A:D3
X509v3 Authority Key Identifier:
keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bf:36:c5:19:1f:c6:6b:55:03:a2:86:25:8d:72:ce:38:fe:
4b:cf:d6:ad:b2:87:a6:d8:32:41:b6:be:94:4e:90:44:2a:ac:
51:72:2e:86:fe:07:2d:2f:f3:a5:53:82:17:43:8e:05:1e:c3:
de:ed:22:a0:fd:dc:c6:90:ae:2c:e9:89:0d:1b:ee:e2:5f:6d:
4e:c2:26:3d:23:48:1c:5f:09:71:60:a6:18:9a:c7:7f:c5:cb:
15:1a:27:87:31:fa:cc:32:25:7e:c6:53:e3:b4:39:a4:4f:2a:
7f:27:1b:bd:92:c8:2b:5a:e5:ab:9f:1b:d8:61:8a:39:ea:52:
a2:dd:a7:40:c0:61:59:59:13:02:a6:37:24:28:31:cf:de:c7:
8c:b1:76:87:6c:53:38:77:21:8f:6d:43:ec:ae:a0:9a:13:4c:
49:38:30:52:15:9d:29:32:c0:88:27:bd:50:c1:c7:ee:d9:b2:
22:44:fc:75:b2:2a:02:80:d6:87:0a:98:50:7f:23:77:82:60:
f8:93:9e:f8:68:b8:13:b1:c5:45:02:b5:27:8a:99:f5:4b:58:
c4:30:c6:0f:33:89:3a:58:ea:2c:b6:3d:73:14:39:48:83:50:
75:9f:5d:79:bb:67:f3:e9:4a:be:32:2f:8b:62:b2:a5:73:ce:
b5:45:ea:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:31 2026 by rpki-client