Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
File: SoPufcwyg3sLpbiR2PFFQ1qztgo.mft (raw, json)
Hash identifier: FeEVnES+vtagt4SSdqxzNKo4BxPart2764nkOqpzsig=
Subject key identifier: A0:9D:F9:A7:B4:19:09:61:37:31:32:74:D2:71:3F:0C:4B:42:F6:B6
Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
Certificate issuer: /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Certificate serial: 019D37C0EF6EE6443607F867337EBB41AFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
Manifest number: 1299
Signing time: Sun 29 Mar 2026 04:01:24 +0000
Manifest this update: Sun 29 Mar 2026 04:01:24 +0000
Manifest next update: Mon 30 Mar 2026 04:01:24 +0000
Files and hashes: 1: SoPufcwyg3sLpbiR2PFFQ1qztgo.crl (hash: QOoMjGxqexbMsVELTnm4DvTrc5lksA+gl/3p5ex47HE=)
2: leys0pjSHL9YEW5sO6ANqpFFx5c.roa (hash: 9zF4zBfFF8tKINoW83chdjLm5f+mKJMMW9YkTlJDR08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ef:6e:e6:44:36:07:f8:67:33:7e:bb:41:af:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Validity
Not Before: Mar 29 04:01:24 2026 GMT
Not After : Mar 30 04:01:24 2026 GMT
Subject: CN=a09df9a7b419096137313274d2713f0c4b42f6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:57:24:a9:8e:cb:89:7b:3f:19:fb:17:18:
9f:82:e9:ab:4e:53:1a:a5:31:4e:cb:da:fe:e8:28:
6f:6c:62:c5:5b:5a:f8:9c:c3:27:52:b0:83:4f:b2:
e6:9a:a5:63:b1:e6:60:35:fe:fe:e1:9d:a8:02:8a:
5c:b8:14:8f:b7:c4:8a:e9:9a:07:f2:70:5e:dc:36:
70:1b:10:ef:07:73:9d:e5:9b:db:25:bd:77:79:0d:
9e:29:75:35:f3:e7:21:52:17:b5:11:85:f6:b4:9f:
3a:43:76:e5:33:d4:01:85:4c:63:60:6d:13:16:38:
46:cb:1d:45:84:ab:24:db:16:ce:44:72:9d:b2:27:
6a:78:18:e9:91:7c:69:07:b7:21:4b:13:36:92:20:
7d:ff:ea:c4:6d:ad:74:4b:29:95:e3:2c:42:58:84:
ef:72:be:42:5e:6d:08:e7:c0:2b:33:6a:c4:58:81:
6d:35:5d:93:9b:be:f7:10:06:38:cd:03:f0:41:23:
ef:aa:80:23:11:33:c7:db:56:e0:0c:43:9b:43:70:
9d:1d:b4:96:a4:8f:8f:11:da:4c:90:17:e9:77:75:
e5:bc:d0:78:28:1b:a7:16:ab:e3:e2:9a:56:06:a2:
e4:0d:d9:1d:66:1a:d4:50:fe:85:91:7a:51:ac:e2:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9D:F9:A7:B4:19:09:61:37:31:32:74:D2:71:3F:0C:4B:42:F6:B6
X509v3 Authority Key Identifier:
keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8d:31:56:da:07:0e:08:32:21:ac:6a:2d:fa:27:75:94:6d:
11:23:e2:6d:8f:27:17:71:ba:d6:6d:63:ac:d2:a9:54:fa:56:
bc:01:a0:c1:73:0d:db:f8:4e:1b:ac:5d:5e:de:96:25:b0:10:
fc:21:e7:ef:fb:0a:38:6d:75:15:d6:1b:9d:45:c3:26:e1:e2:
4a:24:9b:e4:8f:68:50:38:66:d9:db:81:b5:ce:e5:c1:20:25:
70:52:3b:c3:6b:78:95:b3:f8:57:4d:95:38:37:2d:32:31:5f:
f3:aa:6a:22:f2:0f:c6:82:23:96:f1:79:78:0d:be:72:2c:00:
09:50:98:c0:23:a3:a0:7b:11:32:55:d0:57:1d:80:87:8f:b8:
0a:fc:bd:aa:91:3a:28:0a:d2:8f:0d:f2:75:80:10:45:a6:2e:
a9:c9:0b:89:49:7d:7e:82:b1:66:ff:5e:7c:16:fb:8a:69:fd:
7d:96:e4:bb:33:c2:87:5f:50:43:6c:66:d0:ab:3a:4b:ba:ba:
69:6d:4c:23:73:3f:4e:00:8e:91:94:2f:42:ec:79:a6:3f:d1:
7f:ab:db:ae:e4:c5:ac:2d:f0:93:c5:ef:da:4f:9a:5d:85:9a:
78:66:4f:e5:55:d7:b3:27:93:e0:bf:13:ed:6f:54:fb:d0:1e:
63:b2:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:59 2026 by rpki-client