Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
File: SOowwPKOAiacV2W_SgRWd8onlKU.mft (raw, json)
Hash identifier: kqko6bIgnZ0uj3WD46Xz7Emx4PKm9i2eKL65+ZaMNbI=
Subject key identifier: DD:81:85:F4:44:7F:23:3F:B4:6C:6D:F2:2B:BB:DB:3E:33:68:4E:B9
Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
Certificate issuer: /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Certificate serial: 01A10248D8D228DEA8B8F329E0224CCAE2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
Manifest number: 168D
Signing time: Sat 03 Oct 2026 15:01:30 +0000
Manifest this update: Sat 03 Oct 2026 15:01:30 +0000
Manifest next update: Sun 04 Oct 2026 15:01:30 +0000
Files and hashes: 1: QUGDzQXyufF4cTbxCFKpDXDDu0Y.roa (hash: 8BFiaRg39psluNeIpVd2PWr39z5J747/91yNbr4CXuY=)
2: SOowwPKOAiacV2W_SgRWd8onlKU.crl (hash: akQw1Fsyt0H1rnhPxj1ky8HhP4MvK9bKCfNMSOC3bxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:48:d8:d2:28:de:a8:b8:f3:29:e0:22:4c:ca:e2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Validity
Not Before: Oct 3 15:01:30 2026 GMT
Not After : Oct 4 15:01:30 2026 GMT
Subject: CN=dd8185f4447f233fb46c6df22bbbdb3e33684eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:16:88:3e:e2:a5:64:1e:22:7d:5c:dd:9a:
89:be:42:c3:78:b5:4a:0c:96:f8:82:99:8b:d7:51:
17:4b:2a:15:62:da:58:1c:ab:55:fc:f4:3d:5e:2b:
d1:77:cf:f2:18:b2:69:40:3a:b7:ae:bc:b1:a8:23:
74:d5:9a:43:be:8d:69:43:34:62:f3:c7:ac:b6:b8:
01:96:be:09:1f:fc:bc:94:36:bf:44:9c:7d:22:ce:
be:19:4a:28:d4:e6:64:e1:cc:6e:0c:89:ef:67:fd:
32:b5:39:06:e3:9e:38:ab:5c:0c:ad:a4:5c:7b:a2:
8f:d6:64:52:f2:a2:97:f9:92:78:20:39:76:e7:0e:
53:f7:92:f4:64:f3:14:64:db:aa:fe:57:ca:c2:14:
1f:cb:d2:b5:4f:2a:38:ec:b1:da:d9:6c:d7:98:2b:
d9:f9:aa:51:bc:5c:62:72:95:8c:69:cf:64:8a:c1:
07:4d:c4:8a:b1:a2:ac:61:3e:e7:a7:87:39:20:66:
07:ef:99:9c:8d:cd:5d:db:86:b8:72:1c:b1:1e:74:
b2:37:c1:f5:23:bd:85:78:a8:99:ea:d4:6f:d4:b7:
4e:90:9c:a4:78:b5:d3:4a:0c:e4:7f:a4:4d:f6:74:
35:27:f8:fc:53:0b:fd:7a:b7:c8:29:99:90:8e:b4:
b2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:81:85:F4:44:7F:23:3F:B4:6C:6D:F2:2B:BB:DB:3E:33:68:4E:B9
X509v3 Authority Key Identifier:
keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2a:df:e8:21:04:95:0b:0b:10:1e:d5:8b:d7:ac:7c:79:1e:
bf:70:a0:49:9b:9b:92:0c:fc:61:3c:51:64:e2:4d:13:87:55:
09:09:26:01:d8:db:2e:b4:72:52:a5:3a:2c:92:bf:d3:06:a9:
03:60:1b:28:33:d2:a0:70:b0:db:6f:43:65:79:23:84:41:32:
23:4d:f1:e0:8e:d5:df:61:e0:3e:eb:5d:36:db:6a:90:f4:d5:
bf:7d:13:a6:7b:3f:a3:e3:aa:3d:73:27:ff:51:44:af:0f:34:
59:48:85:64:d1:25:d1:b9:41:3c:22:c9:15:9f:56:ed:bf:37:
1f:1a:cc:11:98:ca:64:63:86:7e:eb:67:b1:b3:8a:59:89:2a:
2d:4e:42:4c:55:3b:e0:e1:eb:da:14:95:e7:c3:66:97:30:1c:
1c:97:ea:c2:ae:98:fc:22:b0:5d:1f:c7:87:0b:1d:07:79:ff:
d9:4e:9c:c0:a4:c8:c3:48:03:48:be:f6:74:06:a6:19:a8:1e:
a7:35:fd:e4:28:03:88:a2:96:b1:e8:11:82:98:5d:9a:87:09:
10:e4:17:60:cc:4d:12:50:0b:5e:b6:64:35:51:8b:eb:44:eb:
5d:95:dc:57:0c:e2:e7:a0:f7:fb:26:9b:5f:1a:e1:09:0c:13:
f4:68:40:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECSNjSKN6ouPMp4CJMyuKmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZWEzMGMwZjI4ZTAyMjY5YzU3NjViZjRhMDQ1Njc3Y2Ey
Nzk0YTUwHhcNMjYxMDAzMTUwMTMwWhcNMjYxMDA0MTUwMTMwWjAzMTEwLwYDVQQD
EyhkZDgxODVmNDQ0N2YyMzNmYjQ2YzZkZjIyYmJiZGIzZTMzNjg0ZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWQWiD7ipWQeIn1c3ZqJvkLDeLVK
DJb4gpmL11EXSyoVYtpYHKtV/PQ9XivRd8/yGLJpQDq3rryxqCN01ZpDvo1pQzRi
88estrgBlr4JH/y8lDa/RJx9Is6+GUoo1OZk4cxuDInvZ/0ytTkG4544q1wMraRc
e6KP1mRS8qKX+ZJ4IDl25w5T95L0ZPMUZNuq/lfKwhQfy9K1Tyo47LHa2WzXmCvZ
+apRvFxicpWMac9kisEHTcSKsaKsYT7np4c5IGYH75mcjc1d24a4chyxHnSyN8H1
I72FeKiZ6tRv1LdOkJykeLXTSgzkf6RN9nQ1J/j8Uwv9erfIKZmQjrSyAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2BhfREfyM/tGxt8iu72z4zaE65MB8GA1UdIwQY
MBaAFEjqMMDyjgImnFdlv0oEVnfKJ5SlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMTUzZjgtMTk5NC00YjJkLTk2NDUt
ZjI4YjRkNjQwYTQ5LzEvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMTUzZjgtMTk5NC00YjJkLTk2NDUtZjI4YjRkNjQwYTQ5
LzEvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbirf6CEE
lQsLEB7Vi9esfHkev3CgSZubkgz8YTxRZOJNE4dVCQkmAdjbLrRyUqU6LJK/0wap
A2AbKDPSoHCw229DZXkjhEEyI03x4I7V32HgPutdNttqkPTVv30Tpns/o+OqPXMn
/1FErw80WUiFZNEl0blBPCLJFZ9W7b83HxrMEZjKZGOGfutnsbOKWYkqLU5CTFU7
4OHr2hSV58NmlzAcHJfqwq6Y/CKwXR/HhwsdB3n/2U6cwKTIw0gDSL72dAamGage
pzX95CgDiKKWsegRgphdmocJEOQXYMxNElALXrZkNVGL60TrXZXcVwzi56D3+yab
XxrhCQwT9GhAvw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:37:43 2026 by rpki-client