Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
File: SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json)
Hash identifier: A65aV3I6INAeZzYbhTWZrrMRO4FvNSdCR+oTY+P6obw=
Subject key identifier: 38:F6:38:BA:17:64:0A:E8:5F:BE:90:D3:AE:4C:89:C3:C4:28:48:A7
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial: 019D9B5100910098ED38288D6A43001FCFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 12:01:10 +0000
Manifest this update: Fri 17 Apr 2026 12:01:10 +0000
Manifest next update: Sat 18 Apr 2026 12:01:10 +0000
Files and hashes: 1: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: cn9F5tIiKWKJ3tGJXTrOpZky7RWG2LP9imGgJDFdj+w=)
2: pth9nCfBOVCefSZjAlug7noCoiE.roa (hash: KUjSylzqEOQCJFtk+as86jaCnLWzKEeHrEArRWzUT98=)
3: ukI_HPYNJmvBtX0I8YnAqCqHIKc.roa (hash: V4VFe3RvbqJ8JaD1mJXWX5JH1StQafZpQ0cqoqd+N6E=)
4: z8VOUiSLPVMno5KoGBbOODeDDys.roa (hash: ReCSqOhvRxYoHh6okc3nEFEolgVxGfoS2RfPgFeXDJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:00:91:00:98:ed:38:28:8d:6a:43:00:1f:cf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
Validity
Not Before: Apr 17 12:01:10 2026 GMT
Not After : Apr 18 12:01:10 2026 GMT
Subject: CN=38f638ba17640ae85fbe90d3ae4c89c3c42848a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:ee:0b:5e:c0:83:ca:0a:7b:68:2c:39:05:
2a:0b:9f:b5:0f:1c:ad:4d:09:68:f2:0d:7f:22:4c:
c5:fd:80:f1:2c:24:26:3a:c1:48:26:a5:ed:93:87:
03:32:b7:14:14:6f:94:16:68:0f:03:6d:ef:60:19:
91:51:35:0d:1a:5d:df:9e:bb:84:60:87:49:94:df:
aa:7f:c8:a3:c9:46:34:29:4f:98:44:37:e1:f1:d1:
81:3f:d4:1e:fb:96:3a:67:73:0a:fe:62:95:5e:d3:
91:0f:bf:b4:19:43:e1:97:ae:63:00:92:1e:6d:f1:
46:26:4b:1e:80:7d:4b:4d:0a:63:0b:39:87:64:bb:
fc:17:3d:54:7a:e9:bc:f9:22:84:32:fb:a4:a2:a9:
e9:3f:18:62:bc:75:fc:65:6d:d3:7b:17:4a:07:75:
4b:a7:10:bf:b8:10:04:bb:81:d1:1e:eb:b8:74:cb:
74:f0:fe:cc:44:a1:8d:c5:49:95:1e:71:5b:56:2a:
43:75:9c:27:d0:e5:dc:a4:24:24:fd:26:8e:d6:bd:
0e:ae:7d:98:be:11:04:e2:ff:47:e1:c0:a3:55:dd:
11:9d:90:5a:96:ae:49:5e:ed:0c:af:e7:62:1d:38:
8c:79:1a:9b:ad:70:24:32:29:f7:2a:36:ec:02:71:
68:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F6:38:BA:17:64:0A:E8:5F:BE:90:D3:AE:4C:89:C3:C4:28:48:A7
X509v3 Authority Key Identifier:
keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:48:1b:0b:06:2a:2b:99:35:48:12:82:65:8b:74:91:c7:ff:
39:67:d0:98:8e:4a:b5:e9:6f:e0:10:a5:1f:c1:4a:ff:01:bd:
e0:f7:6e:1d:08:f9:20:f8:46:38:b3:06:11:1a:94:6c:2e:6f:
e8:a7:9d:bf:88:1a:7b:98:06:85:c4:da:a9:fe:79:73:c8:d8:
29:77:41:1d:9b:b5:c0:3a:8e:4a:6c:81:41:24:20:fe:3f:19:
d0:d5:9e:8c:f0:37:ae:ef:9c:af:d1:64:e7:f9:c2:8e:4a:5b:
87:1a:ee:86:e2:45:20:e1:6c:25:6f:ae:e7:27:75:50:38:e1:
03:ef:1a:91:e1:fc:54:b5:c9:2a:fd:ba:90:ba:d7:43:24:e9:
b3:21:e9:5c:18:29:ff:b9:5c:17:57:0a:13:04:d7:11:0f:22:
a6:54:97:b6:bd:9e:a1:80:63:1a:cb:31:bd:83:4e:9b:cd:e9:
f2:d3:ff:f5:0b:54:24:ac:88:13:7b:71:3e:bf:90:08:9d:6b:
e1:41:fb:01:9d:40:05:b9:13:8f:23:93:08:6f:a4:a0:5d:82:
50:18:4b:87:d2:ad:a2:e4:4a:de:d6:b2:fa:7a:99:10:21:ab:
ea:50:5c:f4:ce:d1:9d:6a:92:6f:ed:5d:22:82:12:46:ce:0c:
c6:1d:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:54:23 2026 by rpki-client