Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: uqLNPeWcdV4+JCLMTX58sCId1r4YT13JtSpFyKwQHoc=
Subject key identifier: 3E:BB:92:01:85:6A:B9:1B:93:ED:F9:DF:6B:A5:C5:9F:DF:6D:8A:20
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 01A11CE416BA7DC39F87BCC7E5C8C26B1293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 1AA7
Signing time: Thu 08 Oct 2026 19:01:12 +0000
Manifest this update: Thu 08 Oct 2026 19:01:12 +0000
Manifest next update: Fri 09 Oct 2026 19:01:12 +0000
Files and hashes: 1: Eid3d62YnxHe5Y2-V0Bh36ut8zk.roa (hash: INOU1pQ7jEMWCkd6rFZSFopLqyhhp2Ctyc6t0sEfFdA=)
2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: sLu3RD2fFhzNB2NrL45xwEphgtOs53Rj7DUL7ncGL6A=)
3: nnLnTcVXO544vHFcYVwBAQxMeQo.roa (hash: SFOznpvXz/JoSjUg8z9TzNGJVZ8Y7Eg8GWV4zl8aNrY=)
4: v980U-h91dgOwXDSBh4k-i7QAt0.roa (hash: C5VY2sj93F7Cq2/ofd1slgZ2bbIgYdzNTiYM2XjNUXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:e4:16:ba:7d:c3:9f:87:bc:c7:e5:c8:c2:6b:12:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Oct 8 19:01:12 2026 GMT
Not After : Oct 9 19:01:12 2026 GMT
Subject: CN=3ebb9201856ab91b93edf9df6ba5c59fdf6d8a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:6f:b3:6d:39:5e:7f:c2:2d:60:57:bc:1c:
b0:be:9a:f1:a0:c2:f6:28:fd:76:e1:79:84:1d:96:
42:d3:14:c8:e1:af:7f:7c:29:e1:32:f0:a9:c9:59:
ba:4b:e0:1e:0c:61:63:61:ea:4c:a8:bb:e5:86:e0:
9f:0c:c8:35:85:c6:a3:1a:9b:aa:00:79:71:55:31:
09:fb:f8:2c:da:c5:f8:5a:4c:58:ec:1e:ce:08:2b:
76:31:7d:76:6e:8f:2a:24:5c:78:ab:77:b8:1c:31:
df:fd:79:6b:31:01:d0:b1:b6:e9:cd:fb:aa:38:da:
8e:45:78:8b:6f:3b:31:d4:d2:a1:7a:cb:5d:0d:90:
98:52:7f:c6:a6:4a:32:f4:e2:22:8f:fd:8f:e9:5d:
c1:6e:39:df:26:c7:13:21:63:c2:0b:2c:b2:4c:ef:
bd:9c:a8:49:16:ad:a4:80:61:45:0b:6d:a0:d7:ae:
9f:79:86:1b:73:21:96:41:23:d9:cb:4c:0f:43:7a:
41:28:e7:3e:16:5c:c0:6f:10:4d:44:96:f6:df:52:
e7:79:63:ff:54:5b:e0:ec:ad:d4:14:63:23:5f:59:
b7:81:16:01:55:5e:e4:bc:fc:c7:1b:03:57:3c:59:
45:65:9d:3a:63:33:44:5b:9c:94:17:99:c2:d5:12:
a2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BB:92:01:85:6A:B9:1B:93:ED:F9:DF:6B:A5:C5:9F:DF:6D:8A:20
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:49:86:38:03:d7:10:38:e0:0c:70:a9:48:76:7a:ec:c4:8c:
b0:ce:55:1b:00:c3:e4:45:d8:ad:0e:a0:af:80:37:25:c7:ab:
bf:9b:3b:62:c0:95:f4:e8:75:0f:4c:15:eb:54:5b:59:83:81:
bb:06:99:4b:a3:da:33:ff:35:17:5f:36:e6:b3:4c:c2:bc:38:
69:04:22:e0:c8:a8:e8:f3:c2:62:6f:eb:e5:ee:49:d1:1e:27:
81:f6:7c:b1:1d:27:c4:40:e0:d8:dd:37:26:c8:0b:1e:8a:e9:
81:5c:67:24:0c:50:8f:e9:4c:38:0c:b9:57:b6:de:5d:29:d5:
03:db:eb:51:3f:7f:19:44:f4:39:f7:2e:d3:4f:af:58:ea:16:
e2:1a:37:0b:d6:c3:d4:91:11:1a:3b:d4:5d:dc:4f:4a:60:f4:
8c:de:a4:a1:27:fe:49:d2:fd:44:d1:6e:89:e2:ea:0d:5a:1f:
53:73:ac:c6:99:39:f3:40:7c:ce:59:8a:ee:ef:c5:c5:b8:ee:
4d:57:9c:e4:16:e1:78:98:4f:3f:ae:0c:80:8b:6a:33:cd:14:
eb:22:57:ae:a3:d3:96:07:df:67:db:3b:9c:4c:ea:ee:33:24:
85:82:d2:76:51:9d:2f:fe:0c:91:50:c6:fa:82:4f:bf:b1:f9:
23:60:9d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:56:37 2026 by rpki-client