Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
File: SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json)
Hash identifier: Rr8KjGZtPGLvxXdlIjRu1fTmFBMin6cuLHU0TlZYT/8=
Subject key identifier: 5F:54:68:13:A2:BA:AF:80:78:CE:3B:49:EF:F5:A2:E0:E3:2C:E6:14
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial: 019CABD9A2F3C2FF038AEDA6F781E2B440DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 00:01:32 +0000
Manifest this update: Mon 02 Mar 2026 00:01:32 +0000
Manifest next update: Tue 03 Mar 2026 00:01:32 +0000
Files and hashes: 1: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: ok4B4F5J19Qynh4Z+Pj2Xh6V16uKMCadtw9JH62XMSY=)
2: pth9nCfBOVCefSZjAlug7noCoiE.roa (hash: KUjSylzqEOQCJFtk+as86jaCnLWzKEeHrEArRWzUT98=)
3: ukI_HPYNJmvBtX0I8YnAqCqHIKc.roa (hash: V4VFe3RvbqJ8JaD1mJXWX5JH1StQafZpQ0cqoqd+N6E=)
4: z8VOUiSLPVMno5KoGBbOODeDDys.roa (hash: ReCSqOhvRxYoHh6okc3nEFEolgVxGfoS2RfPgFeXDJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a2:f3:c2:ff:03:8a:ed:a6:f7:81:e2:b4:40:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
Validity
Not Before: Mar 2 00:01:32 2026 GMT
Not After : Mar 3 00:01:32 2026 GMT
Subject: CN=5f546813a2baaf8078ce3b49eff5a2e0e32ce614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:99:17:71:3c:37:bf:2a:f8:48:75:1d:31:
ed:15:9e:e2:70:43:02:1a:c2:16:c2:fc:fc:80:06:
ec:d8:a1:c8:14:83:d9:5e:5c:90:ed:bc:82:3e:e1:
bf:d2:10:dc:cc:67:a3:8e:88:4b:e2:be:be:dc:ff:
ba:37:1a:0a:45:db:1d:f9:79:7e:0b:c1:f9:b0:4a:
01:37:bf:59:39:a0:50:ff:ff:97:5d:8c:0b:50:f0:
52:dd:d6:8b:51:3e:37:25:da:b2:41:24:49:f5:10:
29:c4:2e:97:c3:85:8c:0b:b9:ae:25:7e:ef:fb:27:
25:91:87:e4:cc:ce:81:d3:6e:2b:c4:3e:b3:46:88:
ec:28:2f:28:44:43:64:65:4a:ce:ca:bc:8d:8b:2a:
78:2c:6a:a6:e4:11:0d:b2:9d:b1:1d:55:e9:43:9a:
21:35:15:1c:57:f2:03:02:00:da:e6:d4:2f:0c:5b:
39:a5:7d:4e:67:55:1b:e2:f5:b9:70:00:0e:e2:13:
0b:5f:d1:70:a7:5d:40:7c:47:d1:fd:38:91:61:8f:
ea:e5:d0:28:d5:61:8c:97:20:f4:99:e1:8f:8c:00:
01:8e:c2:d2:38:10:d0:55:fc:ba:cd:9b:1d:43:45:
6d:44:66:16:54:8a:c9:21:b7:9d:76:70:cc:25:c1:
e1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:54:68:13:A2:BA:AF:80:78:CE:3B:49:EF:F5:A2:E0:E3:2C:E6:14
X509v3 Authority Key Identifier:
keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:61:3a:ac:2f:73:0d:a7:9e:66:58:f4:36:43:aa:12:50:e1:
e6:22:bf:f8:e6:11:3d:b3:a7:cc:ec:7f:05:f9:b8:d1:11:e3:
49:57:a5:33:66:de:5b:52:08:4e:1b:a1:5c:e6:0d:b8:2f:5b:
42:5c:bf:95:25:ab:d2:0f:1d:96:1e:eb:12:06:84:03:57:66:
f1:1d:46:24:cb:81:c8:93:01:fc:29:07:76:21:07:eb:8b:33:
06:77:02:91:6e:d6:22:7d:66:57:40:2f:d7:ae:57:67:c5:81:
18:fa:ae:28:0c:36:9a:8a:e6:40:4e:29:9f:42:a3:4f:6d:bf:
54:55:73:17:f6:d2:5d:94:d7:fc:09:25:d7:8a:62:62:77:5c:
d7:6e:d9:52:09:da:b4:b3:17:94:2d:4b:d2:b6:91:7d:63:bd:
f0:f5:5a:35:e8:35:f9:2b:04:7b:5c:9b:65:9a:5d:20:f8:4d:
32:bc:9e:08:4f:4c:22:a4:02:95:d4:7a:3a:8a:f1:f8:17:e6:
3c:8d:07:56:35:ed:41:a8:d0:ce:d9:6e:c1:db:a9:bc:a9:72:
6e:86:ba:e1:6d:b9:15:ef:91:7d:58:4f:53:31:be:48:7f:27:
14:b2:f9:f5:9e:9e:ba:e5:74:e1:9f:5b:95:e7:b2:b8:3b:f7:
e2:50:8d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:39 2026 by rpki-client