Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: uHEIrZJ7qQnn9IE+EXlMqvTHTv5ZDYe2bmbtzyKqGyw=
Subject key identifier: B2:79:CC:9F:AB:99:81:A4:26:4B:A9:D4:0C:2D:68:FE:B6:6F:D5:00
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 019E2BB9CEB5D7CE6B8C421D010C5FC4BF15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 1921
Signing time: Fri 15 May 2026 13:00:57 +0000
Manifest this update: Fri 15 May 2026 13:00:57 +0000
Manifest next update: Sat 16 May 2026 13:00:57 +0000
Files and hashes: 1: Eid3d62YnxHe5Y2-V0Bh36ut8zk.roa (hash: INOU1pQ7jEMWCkd6rFZSFopLqyhhp2Ctyc6t0sEfFdA=)
2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: 91cOVAVpueM5bpG98xrTyyNONbjMG7IHDjR3EvjRjvQ=)
3: nnLnTcVXO544vHFcYVwBAQxMeQo.roa (hash: SFOznpvXz/JoSjUg8z9TzNGJVZ8Y7Eg8GWV4zl8aNrY=)
4: v980U-h91dgOwXDSBh4k-i7QAt0.roa (hash: C5VY2sj93F7Cq2/ofd1slgZ2bbIgYdzNTiYM2XjNUXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:b9:ce:b5:d7:ce:6b:8c:42:1d:01:0c:5f:c4:bf:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: May 15 13:00:57 2026 GMT
Not After : May 16 13:00:57 2026 GMT
Subject: CN=b279cc9fab9981a4264ba9d40c2d68feb66fd500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:9a:b3:74:a9:2f:c6:64:2e:d6:35:1d:60:
24:72:06:59:25:76:b7:e3:85:c5:8f:d0:1b:13:d5:
82:ca:0f:cb:c9:00:bc:d1:ff:67:9e:f5:73:3c:e6:
4c:15:a4:d7:bb:48:8d:24:a6:3b:4d:d9:54:70:5d:
80:be:91:b1:b8:35:28:a6:1e:e6:ce:d5:6a:b4:40:
1b:6d:0c:c1:42:c6:79:30:ca:51:11:db:78:c8:46:
d5:b6:26:c4:9e:f7:21:5c:9e:ce:c8:7b:64:c0:0a:
aa:43:7c:3a:a1:af:e0:95:cb:4d:aa:c0:12:2b:67:
96:19:80:71:dc:01:2b:ad:59:de:49:54:5f:12:aa:
4c:59:73:8f:8d:26:06:fa:e3:24:a4:a4:c7:0e:e6:
c0:48:fc:6f:c8:d8:b8:ce:68:b3:22:51:7a:17:69:
03:1f:70:d0:99:34:b5:db:ee:bc:91:22:99:15:cf:
e0:ab:46:63:26:b5:85:8a:c0:1a:0a:46:4a:4e:ac:
6f:02:12:65:01:e3:2e:16:3c:cb:7d:6f:2c:dd:10:
2a:be:f5:21:ec:11:32:12:7d:c2:83:2d:a1:f7:10:
d3:52:7f:97:0e:08:ed:83:ed:86:06:1a:ad:6a:be:
89:34:9c:34:e7:43:3e:f4:a6:91:75:24:16:a7:54:
49:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:79:CC:9F:AB:99:81:A4:26:4B:A9:D4:0C:2D:68:FE:B6:6F:D5:00
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0e:dd:45:d2:f6:cb:4a:6a:5c:57:30:35:36:99:dd:38:2c:
44:d5:68:56:85:db:47:9f:89:71:91:21:ec:79:2f:c3:6e:0f:
87:5a:7a:d4:33:ea:78:b2:56:d3:e4:2f:65:0d:cd:63:4f:47:
96:56:98:c6:ce:d9:e5:c0:ef:cd:14:ea:75:ca:30:82:bf:3b:
f9:52:71:b7:6e:6a:95:ae:44:bb:1b:ec:a4:38:e7:00:95:dd:
0b:74:d9:5c:73:1e:87:1c:80:c7:7c:fa:b7:f0:a3:b2:76:e6:
17:aa:89:04:f6:92:5a:db:ca:d4:63:ee:d4:74:a2:75:f8:cf:
1c:b9:68:95:38:f1:1f:18:0d:34:dc:27:8f:be:44:84:3b:f3:
cd:38:b4:58:04:0a:be:20:87:d0:74:9b:c9:55:67:8f:c9:e0:
4e:ae:31:69:21:32:56:ca:c2:8c:84:a0:4a:52:62:ca:82:a4:
16:df:c3:9b:b3:52:2c:8c:2e:f8:7b:48:18:64:cd:e9:c5:fa:
6b:da:dd:fe:a8:f9:24:6a:db:a8:a4:99:6c:db:a7:32:eb:01:
c0:91:2c:c7:1d:80:1f:47:ea:0d:c3:ab:68:ae:6a:ef:34:a5:
15:fd:73:51:9d:5b:c0:57:5f:96:64:fe:77:9a:b6:39:34:d0:
7a:76:df:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ruc61185rjEIdAQxfxL8VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZTA2YTM1MWE1MTg5YmNkYzQ0ODQwOTQ4ZGJmYjQwYWJm
NThiZTUwHhcNMjYwNTE1MTMwMDU3WhcNMjYwNTE2MTMwMDU3WjAzMTEwLwYDVQQD
EyhiMjc5Y2M5ZmFiOTk4MWE0MjY0YmE5ZDQwYzJkNjhmZWI2NmZkNTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvaas3SpL8ZkLtY1HWAkcgZZJXa3
44XFj9AbE9WCyg/LyQC80f9nnvVzPOZMFaTXu0iNJKY7TdlUcF2AvpGxuDUoph7m
ztVqtEAbbQzBQsZ5MMpREdt4yEbVtibEnvchXJ7OyHtkwAqqQ3w6oa/glctNqsAS
K2eWGYBx3AErrVneSVRfEqpMWXOPjSYG+uMkpKTHDubASPxvyNi4zmizIlF6F2kD
H3DQmTS12+68kSKZFc/gq0ZjJrWFisAaCkZKTqxvAhJlAeMuFjzLfW8s3RAqvvUh
7BEyEn3Cgy2h9xDTUn+XDgjtg+2GBhqtar6JNJw050M+9KaRdSQWp1RJcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJ5zJ+rmYGkJkup1AwtaP62b9UAMB8GA1UdIwQY
MBaAFEjgajUaUYm83ESECUjb+0Cr9YvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDIt
YWIxYTg3ZWNkZjFiLzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDItYWIxYTg3ZWNkZjFi
LzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeg7dRdL2
y0pqXFcwNTaZ3TgsRNVoVoXbR5+JcZEh7Hkvw24Ph1p61DPqeLJW0+QvZQ3NY09H
llaYxs7Z5cDvzRTqdcowgr87+VJxt25qla5EuxvspDjnAJXdC3TZXHMehxyAx3z6
t/CjsnbmF6qJBPaSWtvK1GPu1HSidfjPHLlolTjxHxgNNNwnj75EhDvzzTi0WAQK
viCH0HSbyVVnj8ngTq4xaSEyVsrCjISgSlJiyoKkFt/Dm7NSLIwu+HtIGGTN6cX6
a9rd/qj5JGrbqKSZbNunMusBwJEsxx2AH0fqDcOraK5q7zSlFf1zUZ1bwFdflmT+
d5q2OTTQenbfjw==
-----END CERTIFICATE-----
Generated at Fri May 15 16:39:46 2026 by rpki-client