Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
File: soH_MU_IquOXVAewoMF_L9403CY.mft (raw, json)
Hash identifier: APotnX7xvIE9BvhqMJGMmukZNsTfm9amwXMVPXxK2m4=
Subject key identifier: D8:2A:6C:5D:64:55:32:E3:FD:2B:E1:15:EF:35:42:05:17:BA:1F:4A
Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
Certificate issuer: /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Certificate serial: 019D39AE7A8BD2A07B193674F965F43F95FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
Manifest number: 1180
Signing time: Sun 29 Mar 2026 13:00:29 +0000
Manifest this update: Sun 29 Mar 2026 13:00:29 +0000
Manifest next update: Mon 30 Mar 2026 13:00:29 +0000
Files and hashes: 1: 9edgoRI9JlNIz79sa7BfNr6pgh8.roa (hash: DRtSkD3Pzsqv0sboOuhUp1FzUNEQXeI+pQ9DuM7Nj18=)
2: soH_MU_IquOXVAewoMF_L9403CY.crl (hash: sYakNCVSR94LLVYPzUCZQLXO5peM9E2br9VzS/qCXxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:7a:8b:d2:a0:7b:19:36:74:f9:65:f4:3f:95:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Validity
Not Before: Mar 29 13:00:29 2026 GMT
Not After : Mar 30 13:00:29 2026 GMT
Subject: CN=d82a6c5d645532e3fd2be115ef35420517ba1f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c3:55:7b:8a:cc:70:73:f7:7a:53:b4:1f:40:
f5:a2:34:30:30:e2:0f:09:8d:2f:50:fb:47:7c:b1:
48:b0:61:24:18:c2:39:a6:14:65:a3:dc:67:55:32:
28:08:df:cc:df:50:a9:f1:d7:46:58:2d:97:49:14:
b0:23:45:49:5e:26:19:67:45:3c:29:21:00:c4:3d:
6e:37:d9:92:bd:a6:87:a7:55:aa:9d:22:5f:ff:c7:
91:01:c9:7d:86:c6:b5:e7:53:71:5d:2a:f6:a8:e5:
08:bf:32:f8:72:e3:08:da:75:67:8c:b3:ff:d7:fe:
a5:ef:32:dc:a8:1c:2b:83:92:33:e9:fb:33:c5:db:
30:b2:92:c8:44:dc:93:e5:f8:4d:0c:76:33:bd:aa:
ff:a5:39:12:cb:e3:68:5b:0d:b9:41:e2:84:5f:cc:
99:72:e1:14:92:b2:f8:c7:86:15:7d:dd:e6:70:2f:
74:96:31:75:11:75:c7:3b:f7:8c:ee:ab:6c:ec:46:
b4:1f:87:01:7d:12:ee:09:0f:a5:f4:e6:74:30:0a:
62:c3:ce:c0:ec:a0:95:d1:b9:17:21:c5:97:53:c2:
62:59:75:1e:dc:91:7a:5b:5d:c9:3d:71:3f:ac:a5:
4d:8d:46:d7:43:1e:11:d4:95:8f:dc:5f:4b:52:73:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2A:6C:5D:64:55:32:E3:FD:2B:E1:15:EF:35:42:05:17:BA:1F:4A
X509v3 Authority Key Identifier:
keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f5:49:5a:d3:cf:78:6f:c7:75:4c:ef:d1:fb:f4:53:d3:b2:
df:38:2e:43:0d:01:f6:61:2c:68:a1:91:e8:25:22:d7:8f:8f:
93:06:17:6d:eb:63:fc:27:65:1f:8c:46:c7:a6:e2:0f:09:2f:
41:24:78:20:c2:29:63:c4:8a:c3:a0:17:f1:c6:02:2c:86:6e:
6e:2d:c3:c9:fa:f7:c1:f4:24:6d:35:68:7a:1f:7e:37:03:b6:
1e:a0:7a:f6:6f:a8:2a:9e:eb:73:21:54:7a:f1:ca:99:62:c4:
e5:c1:61:4a:1f:ff:f0:fb:19:66:d4:8f:8d:cc:3a:f2:5f:60:
6c:60:d9:c2:3a:d2:b7:82:62:6c:20:bc:e6:5c:05:e4:0c:52:
72:50:50:22:13:44:9b:3c:cb:24:10:d0:96:4a:a6:73:2e:e0:
21:7e:10:fb:be:10:6e:e7:aa:03:28:f2:9b:03:2b:59:fa:1e:
a8:dc:03:02:c7:09:7b:54:36:ed:01:38:08:c9:5c:1d:1f:d7:
55:63:c4:97:84:8f:cf:f5:96:9a:f7:a5:fa:24:32:13:0a:9e:
3e:16:0c:d9:09:76:6e:be:bb:9b:88:16:44:24:3a:d5:a6:dd:
37:1f:41:a3:07:00:6c:b0:7a:83:18:87:e0:23:45:0a:94:35:
4c:4b:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:33 2026 by rpki-client