Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.mft
File: hSOM5-r2mlui8JR7K6BTOUtFts0.mft (raw, json)
Hash identifier: 98piM0mMtbO+0eSneGlxlnAE1NMiuR76L5/hjH12ICM=
Subject key identifier: F3:21:E0:15:99:96:4C:D6:D6:1E:FC:54:E4:E4:A6:34:FD:3A:1B:89
Authority key identifier: 85:23:8C:E7:EA:F6:9A:5B:A2:F0:94:7B:2B:A0:53:39:4B:45:B6:CD
Certificate issuer: /CN=85238ce7eaf69a5ba2f0947b2ba053394b45b6cd
Certificate serial: 019FA1F204E6477BE9545CB1336278EF0F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSOM5-r2mlui8JR7K6BTOUtFts0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.mft
Manifest number: 1960
Signing time: Mon 27 Jul 2026 05:00:20 +0000
Manifest this update: Mon 27 Jul 2026 05:00:20 +0000
Manifest next update: Tue 28 Jul 2026 05:00:20 +0000
Files and hashes: 1: 9WDzni9fLgS4Y1Z4NykfP7TpMa0.roa (hash: tKJRFaY2YcR7s8GJcJFATvbLWJiSSXElLCi1btrAeAw=)
2: hSOM5-r2mlui8JR7K6BTOUtFts0.crl (hash: koNJf1897lfoyQP1th9jZEYy+f6GtINQVEexgE/Ewxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSOM5-r2mlui8JR7K6BTOUtFts0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:04:e6:47:7b:e9:54:5c:b1:33:62:78:ef:0f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85238ce7eaf69a5ba2f0947b2ba053394b45b6cd
Validity
Not Before: Jul 27 05:00:20 2026 GMT
Not After : Jul 28 05:00:20 2026 GMT
Subject: CN=f321e01599964cd6d61efc54e4e4a634fd3a1b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:07:1f:59:a1:82:b0:1c:77:f8:50:d1:54:fe:
8f:45:5d:33:69:88:fc:3d:f3:75:64:76:09:57:bb:
f8:2d:b1:a5:f9:0c:9e:63:b7:1e:72:ba:24:b3:1e:
3c:50:9c:40:6f:2e:88:df:a5:a2:a2:44:27:2a:a0:
e8:59:d4:19:49:90:85:ec:32:af:b0:f1:e9:ad:95:
78:4e:f1:4e:e0:17:f4:ca:e6:b4:21:03:e7:1d:39:
96:76:0a:4d:74:01:f0:f8:ae:e5:fe:5a:80:50:a4:
2a:19:b6:31:10:6f:69:19:32:c1:1e:1e:f6:64:ae:
29:32:ac:b7:16:9d:5c:43:92:68:3a:5b:46:65:5b:
8f:c5:0e:94:76:c0:98:cd:f5:56:63:3d:73:dd:ac:
45:1c:7b:2e:3e:b6:df:15:1d:9e:d9:f4:01:49:96:
c8:48:75:47:c1:be:1c:8b:11:44:62:e2:78:67:7e:
6a:d3:2c:b8:fc:24:3b:bc:9d:d5:27:ad:c1:00:1f:
bd:55:e4:c7:15:06:ee:0b:89:bb:5f:c2:eb:87:75:
2c:b0:a4:63:36:35:83:86:1c:e4:8f:7c:2c:60:86:
77:2e:6c:7e:67:89:5e:f7:5a:90:6e:f0:b6:69:ec:
a1:67:bd:35:d4:66:b2:07:81:4d:9c:63:9d:6d:a0:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:21:E0:15:99:96:4C:D6:D6:1E:FC:54:E4:E4:A6:34:FD:3A:1B:89
X509v3 Authority Key Identifier:
keyid:85:23:8C:E7:EA:F6:9A:5B:A2:F0:94:7B:2B:A0:53:39:4B:45:B6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSOM5-r2mlui8JR7K6BTOUtFts0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:62:92:91:91:74:9b:d4:38:f2:b0:39:d4:5a:2a:18:9d:48:
00:b5:89:c7:32:00:93:66:b3:a8:f5:52:ce:c9:09:de:43:2b:
43:88:ae:0e:c4:9c:dd:d5:8e:98:07:8f:57:8f:31:a2:8f:de:
c7:16:3a:d2:63:b7:52:4b:4a:af:f8:f4:e9:72:a1:8e:d9:36:
1d:8e:af:b5:9e:96:fa:01:4a:f1:99:52:89:65:37:3d:67:f5:
8c:97:9f:d5:8d:0e:62:f6:5b:84:6f:66:3a:ac:3c:a6:4d:ca:
0b:84:d4:ba:6c:65:20:0a:35:6b:37:4d:05:5c:df:9f:6d:8b:
a1:c6:30:69:5a:66:61:4f:69:0c:0a:f8:94:73:3c:fb:cf:3f:
51:d8:9d:21:be:52:c1:d5:37:f1:88:97:69:42:0c:82:c8:43:
16:dd:9e:a1:47:9a:82:e5:28:28:04:ed:b3:b9:1a:90:de:77:
85:21:35:e6:1f:c6:3f:02:f9:15:44:d2:7c:85:4d:56:09:1e:
f6:7d:f1:55:35:0d:45:59:a2:35:20:94:a6:0c:dd:e3:5e:27:
a4:46:50:d3:5d:5d:79:32:3f:4b:de:34:0b:b8:48:74:5c:f0:
36:cb:f2:94:34:87:27:ed:fe:f0:b6:8b:16:f5:31:0a:85:d9:
9d:97:73:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:07:11 2026 by rpki-client