Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: H8Fgytd+pa6d8jj0TvqetJUj8BdwfpuuwJ1Hcm4nSM0=
Subject key identifier: 3D:22:82:F6:2B:A4:34:DA:A7:B9:0E:36:F9:AD:53:93:8A:37:BE:AD
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 019D386568F17AFB8B0ABFAE401D494CDAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 18A3
Signing time: Sun 29 Mar 2026 07:01:03 +0000
Manifest this update: Sun 29 Mar 2026 07:01:03 +0000
Manifest next update: Mon 30 Mar 2026 07:01:03 +0000
Files and hashes: 1: Eid3d62YnxHe5Y2-V0Bh36ut8zk.roa (hash: INOU1pQ7jEMWCkd6rFZSFopLqyhhp2Ctyc6t0sEfFdA=)
2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: oetlrWKLSCBroH3BGmTurvtEkN4MpW5WE+OSmSbmNWc=)
3: nnLnTcVXO544vHFcYVwBAQxMeQo.roa (hash: SFOznpvXz/JoSjUg8z9TzNGJVZ8Y7Eg8GWV4zl8aNrY=)
4: v980U-h91dgOwXDSBh4k-i7QAt0.roa (hash: C5VY2sj93F7Cq2/ofd1slgZ2bbIgYdzNTiYM2XjNUXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:68:f1:7a:fb:8b:0a:bf:ae:40:1d:49:4c:da:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Mar 29 07:01:03 2026 GMT
Not After : Mar 30 07:01:03 2026 GMT
Subject: CN=3d2282f62ba434daa7b90e36f9ad53938a37bead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c3:d8:72:3b:ef:ef:8b:6a:f3:e0:97:4e:29:
7e:b6:a0:9f:a1:89:2f:f4:f1:c2:0c:36:7f:43:96:
22:5a:06:dd:69:f0:47:3e:ce:2b:2d:82:fe:b2:b0:
31:a4:a7:f1:67:78:d0:c2:3a:ad:55:ff:f2:10:b6:
11:b3:7c:18:96:93:1a:9c:9f:44:69:d1:7d:97:92:
d0:b1:1b:fb:be:ac:07:97:3c:e4:3e:65:00:db:84:
13:89:05:bd:ec:5d:53:0c:68:77:96:38:64:3c:47:
6b:85:c6:24:b1:8e:2d:52:c3:31:52:2c:9a:0e:4e:
04:ac:b1:59:92:49:89:be:a8:29:c3:51:07:8b:6e:
9a:70:9b:db:90:b2:85:77:6a:03:f8:da:39:3b:7b:
7e:24:20:12:3a:cf:14:1e:5d:09:8d:d0:04:6e:8a:
4d:da:b5:74:bf:8a:2f:16:7d:b2:32:e5:d9:5c:2b:
89:d5:9e:b2:c0:46:9c:29:e9:97:76:56:04:8e:c5:
ad:32:ca:85:3a:35:f8:a7:79:02:b9:ad:ff:ac:3c:
e3:27:d5:6b:88:9a:2d:9d:80:7a:e2:80:60:8e:df:
0d:93:96:73:7b:e9:fe:54:fd:f9:ee:62:9f:9e:45:
81:b2:ba:01:2b:2f:60:3c:0d:0e:0b:b0:2d:b1:07:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:22:82:F6:2B:A4:34:DA:A7:B9:0E:36:F9:AD:53:93:8A:37:BE:AD
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1d:c6:a9:64:5a:f6:de:aa:bb:39:de:03:b2:bb:38:e2:d5:
f4:a0:d2:56:e2:db:2c:e4:dd:36:dc:05:a8:2b:fb:7f:fc:ee:
fd:5c:61:3f:5b:ab:03:46:0e:b7:ca:7c:84:ec:37:46:91:3a:
1c:ab:a2:2a:68:7e:78:2b:77:7e:da:c6:e8:f6:cb:0c:40:5f:
ca:f4:72:c3:f6:c1:2f:40:64:da:75:ae:08:83:e0:e3:f8:82:
50:e7:41:27:fd:0d:b8:0d:3b:aa:55:0a:b7:5b:8a:39:c3:16:
a8:ae:8d:73:28:34:47:50:ae:29:f9:c8:cc:f5:37:ff:b0:1d:
65:e2:0f:a6:2f:1c:b5:f4:be:4e:c7:de:b5:21:30:b9:6d:d0:
fe:0c:6e:fc:20:de:19:dd:9e:75:83:4a:8b:a7:73:11:eb:7f:
af:03:3a:2c:c9:bb:51:a3:d2:5c:b7:51:84:98:93:59:8f:b1:
75:e4:0a:6f:be:27:44:4f:66:83:f1:15:01:25:f6:fd:f6:d1:
1c:a4:04:ea:82:c0:f0:0b:17:e8:2b:3f:4c:ed:41:06:46:34:
7f:96:0d:65:20:46:1b:74:76:4f:03:b8:15:58:34:f9:ea:d5:
91:b1:f0:4d:51:3a:de:f2:16:40:ed:6c:b9:5d:08:19:82:92:
22:f3:1a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:43 2026 by rpki-client