Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
File: Sojzq5SgdYciDj1xb3txffHZ5tY.mft (raw, json)
Hash identifier: LUkIC9uUoXmbtrKZcBYPfP4JXB+gMD9eLRNQQzwYkiQ=
Subject key identifier: 8C:C8:B9:23:E7:09:A4:C1:BF:4D:DE:E8:D5:50:82:7E:64:1B:01:91
Authority key identifier: 4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
Certificate issuer: /CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Certificate serial: 019D37F738790DB438BC9127BE18B45B278C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 05:00:41 +0000
Manifest this update: Sun 29 Mar 2026 05:00:41 +0000
Manifest next update: Mon 30 Mar 2026 05:00:41 +0000
Files and hashes: 1: Sojzq5SgdYciDj1xb3txffHZ5tY.crl (hash: Sr77WrGaKmsLwMnuO6Adf0lZPp2rpwc5/1AZDCxvY28=)
2: _BierKqkbKF0322RypaPacK7rIc.roa (hash: ISjKL5qyY3D+UsNMMYXT9NMFhkS06ZSrlsMwCxHPEqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:38:79:0d:b4:38:bc:91:27:be:18:b4:5b:27:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Validity
Not Before: Mar 29 05:00:41 2026 GMT
Not After : Mar 30 05:00:41 2026 GMT
Subject: CN=8cc8b923e709a4c1bf4ddee8d550827e641b0191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:b7:16:25:93:48:5a:21:a1:9b:f9:3a:06:
1b:85:fb:eb:2c:fb:2d:4b:d1:41:2a:78:0f:83:d9:
84:f7:c6:73:e9:2c:06:c5:5e:08:83:1f:d2:7d:ca:
c7:9b:fa:fe:8f:e5:0e:eb:83:ae:5d:8b:83:bf:c4:
2c:10:96:7d:b7:f2:0b:9a:2c:e2:c1:c5:f0:70:9e:
8e:81:ec:f7:4a:bb:84:65:fe:06:b4:8a:9f:e3:3c:
a5:6a:f0:15:50:ad:8c:aa:47:6b:f4:db:64:ae:a9:
36:de:bf:df:b4:64:6c:1c:f2:61:8a:51:71:8f:3e:
b4:2d:2b:f8:ce:89:17:16:92:b6:b0:8d:bb:8a:69:
d8:bb:c4:c7:a4:22:7d:98:8f:54:7a:c3:37:f5:e7:
d7:31:62:e5:1e:c2:4d:cf:87:16:c3:0e:c4:7e:19:
da:c4:8c:33:42:30:a9:27:e6:4f:7e:c1:71:62:9f:
d7:b2:21:a6:20:44:13:0d:d6:9b:0c:ac:f1:4c:5a:
fc:38:58:db:bc:9f:cb:92:39:a2:55:87:2a:a2:13:
fb:32:d4:d2:85:13:b6:28:d6:df:48:07:63:a9:ad:
ce:3e:ea:22:8b:67:d8:36:ef:e0:a8:80:97:7f:2b:
46:e2:f0:45:2d:85:00:26:26:90:2b:60:c2:93:7c:
5d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C8:B9:23:E7:09:A4:C1:BF:4D:DE:E8:D5:50:82:7E:64:1B:01:91
X509v3 Authority Key Identifier:
keyid:4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c2:63:04:d9:0d:17:34:b5:4f:ee:c7:38:88:ff:e4:e8:40:
78:77:cb:d8:d8:54:49:55:db:b2:f8:df:75:a9:eb:96:bb:36:
46:79:1b:7d:3d:b7:84:70:f4:30:b0:2a:8e:94:5d:22:7b:52:
6a:9c:86:79:8b:2f:35:f4:6b:97:34:10:e6:30:e7:f3:32:ab:
9d:b7:83:1e:d9:a0:3e:39:86:0b:65:fe:8e:c0:62:d6:f5:a8:
d9:8c:39:16:34:ef:cb:a0:8e:24:95:35:96:10:9e:64:ce:ba:
77:06:86:82:77:6e:da:62:5b:ba:e4:52:3f:37:aa:ca:8e:fb:
e0:89:25:9d:eb:db:10:70:d3:e6:26:bc:ac:ca:1f:71:7c:d5:
3a:f2:38:fe:4e:bc:de:ab:b3:fc:24:fc:a0:69:90:c6:79:fc:
4d:0d:38:99:90:33:05:8a:df:ca:25:16:b5:e2:65:96:39:35:
45:71:f3:9c:d3:58:de:5e:e1:fe:bc:dd:3b:95:8b:a1:f9:af:
39:f7:e2:ed:c3:50:bb:c5:9e:72:e3:ba:98:35:33:5f:62:74:
c9:da:dc:74:b4:8d:78:c9:0a:23:6d:b8:ae:6b:2b:51:98:4b:
02:53:f9:6d:61:28:d3:57:fe:9f:1d:59:ab:a5:8f:7a:81:e1:
7e:28:42:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039zh5DbQ4vJEnvhi0WyeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhODhmM2FiOTRhMDc1ODcyMjBlM2Q3MTZmN2I3MTdkZjFk
OWU2ZDYwHhcNMjYwMzI5MDUwMDQxWhcNMjYwMzMwMDUwMDQxWjAzMTEwLwYDVQQD
Eyg4Y2M4YjkyM2U3MDlhNGMxYmY0ZGRlZThkNTUwODI3ZTY0MWIwMTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaC3FiWTSFohoZv5OgYbhfvrLPst
S9FBKngPg9mE98Zz6SwGxV4Igx/SfcrHm/r+j+UO64OuXYuDv8QsEJZ9t/ILmizi
wcXwcJ6Ogez3SruEZf4GtIqf4zylavAVUK2Mqkdr9Ntkrqk23r/ftGRsHPJhilFx
jz60LSv4zokXFpK2sI27imnYu8THpCJ9mI9UesM39efXMWLlHsJNz4cWww7Efhna
xIwzQjCpJ+ZPfsFxYp/XsiGmIEQTDdabDKzxTFr8OFjbvJ/LkjmiVYcqohP7MtTS
hRO2KNbfSAdjqa3OPuoii2fYNu/gqICXfytG4vBFLYUAJiaQK2DCk3xdZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzIuSPnCaTBv03e6NVQgn5kGwGRMB8GA1UdIwQY
MBaAFEqI86uUoHWHIg49cW97cX3x2ebWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU29qenE1U2dkWWNpRGoxeGIzdHhmZkhaNXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MzZkZDItMGM5YS00OGU5LWFhNzEt
ZDQ1MTljNTM5YzlhLzEvU29qenE1U2dkWWNpRGoxeGIzdHhmZkhaNXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85MzZkZDItMGM5YS00OGU5LWFhNzEtZDQ1MTljNTM5Yzlh
LzEvU29qenE1U2dkWWNpRGoxeGIzdHhmZkhaNXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcJjBNkN
FzS1T+7HOIj/5OhAeHfL2NhUSVXbsvjfdanrlrs2RnkbfT23hHD0MLAqjpRdIntS
apyGeYsvNfRrlzQQ5jDn8zKrnbeDHtmgPjmGC2X+jsBi1vWo2Yw5FjTvy6COJJU1
lhCeZM66dwaGgndu2mJbuuRSPzeqyo774IklnevbEHDT5ia8rMofcXzVOvI4/k68
3quz/CT8oGmQxnn8TQ04mZAzBYrfyiUWteJlljk1RXHznNNY3l7h/rzdO5WLofmv
Offi7cNQu8WecuO6mDUzX2J0ydrcdLSNeMkKI224rmsrUZhLAlP5bWEo01f+nx1Z
q6WPeoHhfihCSQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:46 2026 by rpki-client