Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft
File: 1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft (raw, json)
Hash identifier: g02qyYkJ5Iz4t9PiGQschw/MK4WfngHLH3K+TEsOyjg=
Subject key identifier: EE:62:F1:4D:08:01:E5:61:14:FD:79:33:2A:1B:20:23:E4:F0:22:42
Authority key identifier: FA:98:32:F0:7A:1C:65:D7:E3:53:F4:8E:08:6F:CF:25:08:68:88:FF
Certificate issuer: /CN=fa9832f07a1c65d7e353f48e086fcf25086888ff
Certificate serial: 019D39E5FCE365C6BDD52C7ADD04D1688EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pgy8HocZdfjU_SOCG_PJQhoiP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft
Manifest number: 015B
Signing time: Sun 29 Mar 2026 14:01:06 +0000
Manifest this update: Sun 29 Mar 2026 14:01:06 +0000
Manifest next update: Mon 30 Mar 2026 14:01:06 +0000
Files and hashes: 1: 1-pgy8HocZdfjU_SOCG_PJQhoiP8.crl (hash: xmS6vqck0UArgD2JZf16PSslQv3CoxXSrJYMzUwl/Es=)
2: OQLXEqiI0-t-jDFZ7Aw_RfcOogA.roa (hash: M/HaQZELEO7odM10mCvVSjhkNjEOwFy6fTyGxP3z8UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pgy8HocZdfjU_SOCG_PJQhoiP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:fc:e3:65:c6:bd:d5:2c:7a:dd:04:d1:68:8e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9832f07a1c65d7e353f48e086fcf25086888ff
Validity
Not Before: Mar 29 14:01:06 2026 GMT
Not After : Mar 30 14:01:06 2026 GMT
Subject: CN=ee62f14d0801e56114fd79332a1b2023e4f02242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:03:09:e8:e6:6a:76:4a:7d:5d:4a:ad:17:
28:2c:cc:07:a8:41:8d:7e:dd:b9:57:5f:5e:de:85:
25:0c:76:84:8b:2a:38:f4:d1:39:8f:7a:68:ac:a2:
0c:f4:89:a8:a0:61:b9:b5:53:4d:ef:dd:2b:a7:97:
89:c1:e1:9b:3d:ee:78:a9:d0:7e:34:8f:d5:81:49:
b2:25:bf:e7:d8:e9:54:5f:8a:26:a6:25:1f:74:b5:
50:88:e4:b0:46:0e:aa:6c:b6:3a:69:34:d5:55:d2:
1f:cf:b5:a9:73:a9:4c:f3:91:aa:f9:48:1b:ce:0c:
25:db:fb:7c:8b:17:8c:52:b9:77:9c:da:f7:37:09:
bb:7e:2d:0d:71:02:49:b2:9c:30:50:4c:81:bf:0d:
40:33:61:55:2d:d6:1e:28:c1:7f:a9:e7:db:9e:73:
f4:64:2c:e3:ae:40:ee:4b:1f:d5:ca:43:eb:c6:b6:
ad:d9:55:5f:46:4b:0b:b3:71:41:c8:24:a5:42:00:
4e:fa:9c:d3:ad:10:bb:59:69:b8:3d:ee:2d:f2:9f:
e4:3c:9a:00:30:05:89:50:d6:2e:91:e8:1f:40:76:
be:11:a6:6f:0c:98:19:bf:73:74:75:c8:93:6e:82:
ab:56:3a:e8:9d:f9:47:55:32:83:75:17:d7:2f:39:
5a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:62:F1:4D:08:01:E5:61:14:FD:79:33:2A:1B:20:23:E4:F0:22:42
X509v3 Authority Key Identifier:
keyid:FA:98:32:F0:7A:1C:65:D7:E3:53:F4:8E:08:6F:CF:25:08:68:88:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pgy8HocZdfjU_SOCG_PJQhoiP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:40:34:bd:58:37:6f:17:36:69:95:b8:f6:ea:79:17:96:56:
d6:60:40:fc:6d:eb:6b:15:53:00:e2:62:66:68:46:83:7f:2d:
b7:25:bc:4a:8d:b0:5c:f9:05:47:72:69:e9:b5:63:d6:71:e1:
5f:64:bb:bd:0f:03:73:1d:48:a7:ec:b1:ca:ba:32:9f:04:ca:
29:5d:6a:89:93:92:04:66:c5:8a:52:ab:28:93:96:88:df:29:
47:0b:dc:ca:68:c5:8e:d5:ab:dd:2d:2e:e8:68:4f:48:81:6c:
07:d8:6a:94:bc:11:6a:82:cf:02:09:38:57:49:4c:62:57:95:
7b:ba:3e:69:94:1b:08:7a:8b:fc:08:59:46:ad:39:f1:9b:2a:
60:c9:b1:fa:cb:6d:ea:9b:cf:fa:5c:6b:94:e4:e3:14:8d:b1:
1d:4f:7c:ba:ef:dd:4a:2c:a4:2c:b7:fa:02:fe:5f:e2:23:31:
f1:0c:93:1b:71:d3:03:66:76:ea:3b:72:95:29:f6:05:b0:77:
6f:b9:d2:da:bb:06:44:c6:ce:24:88:b2:7a:4a:58:7f:d9:a0:
c8:e4:f8:4b:f0:2e:af:a4:08:d2:26:3d:d5:f8:93:da:ce:a4:
a8:ef:e4:9d:33:f5:04:2f:21:81:35:54:d8:ed:4a:58:80:4e:
0d:77:22:f7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ055fzjZca91Sx63QTRaI6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOTgzMmYwN2ExYzY1ZDdlMzUzZjQ4ZTA4NmZjZjI1MDg2
ODg4ZmYwHhcNMjYwMzI5MTQwMTA2WhcNMjYwMzMwMTQwMTA2WjAzMTEwLwYDVQQD
EyhlZTYyZjE0ZDA4MDFlNTYxMTRmZDc5MzMyYTFiMjAyM2U0ZjAyMjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkEDCejmanZKfV1KrRcoLMwHqEGN
ft25V19e3oUlDHaEiyo49NE5j3porKIM9ImooGG5tVNN790rp5eJweGbPe54qdB+
NI/VgUmyJb/n2OlUX4ompiUfdLVQiOSwRg6qbLY6aTTVVdIfz7Wpc6lM85Gq+Ugb
zgwl2/t8ixeMUrl3nNr3Nwm7fi0NcQJJspwwUEyBvw1AM2FVLdYeKMF/qefbnnP0
ZCzjrkDuSx/VykPrxrat2VVfRksLs3FByCSlQgBO+pzTrRC7WWm4Pe4t8p/kPJoA
MAWJUNYukegfQHa+EaZvDJgZv3N0dciTboKrVjronflHVTKDdRfXLzlalQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFO5i8U0IAeVhFP15MyobICPk8CJCMB8GA1UdIwQY
MBaAFPqYMvB6HGXX41P0jghvzyUIaIj/MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1wZ3k4SG9jWmRmalVfU09DR19QSlFob2lQOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvNGM5ZTg2LTFhZDctNGE4Zi1hNTVi
LTkyY2YwMWZhN2U2Yy8xLzEtcGd5OEhvY1pkZmpVX1NPQ0dfUEpRaG9pUDgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQxLzRjOWU4Ni0xYWQ3LTRhOGYtYTU1Yi05MmNmMDFmYTdl
NmMvMS8xLXBneThIb2NaZGZqVV9TT0NHX1BKUWhvaVA4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUA0
vVg3bxc2aZW49up5F5ZW1mBA/G3raxVTAOJiZmhGg38ttyW8So2wXPkFR3Jp6bVj
1nHhX2S7vQ8Dcx1Ip+yxyroynwTKKV1qiZOSBGbFilKrKJOWiN8pRwvcymjFjtWr
3S0u6GhPSIFsB9hqlLwRaoLPAgk4V0lMYleVe7o+aZQbCHqL/AhZRq058ZsqYMmx
+stt6pvP+lxrlOTjFI2xHU98uu/dSiykLLf6Av5f4iMx8QyTG3HTA2Z26jtylSn2
BbB3b7nS2rsGRMbOJIiyekpYf9mgyOT4S/Aur6QI0iY91fiT2s6kqO/knTP1BC8h
gTVU2O1KWIBODXci9w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:23 2026 by rpki-client