Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
File: SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft (raw, json)
Hash identifier: GBd+jUfuTuTetTOVtcfNoo7M+UBxaHAhxbdDiVCkJd8=
Subject key identifier: 5C:34:A4:CD:6D:FA:AC:E1:66:2C:C8:16:81:DF:48:11:58:A3:67:F4
Authority key identifier: 48:E6:B2:5B:F9:89:FC:37:04:BD:8E:84:E0:D5:D9:D6:8D:02:B4:EB
Certificate issuer: /CN=48e6b25bf989fc3704bd8e84e0d5d9d68d02b4eb
Certificate serial: 01A1950E441BCED7A2DE33204C6D866F7A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
Manifest number: 014B
Signing time: Sun 01 Nov 2026 03:01:42 +0000
Manifest this update: Sun 01 Nov 2026 03:01:42 +0000
Manifest next update: Mon 02 Nov 2026 03:01:42 +0000
Files and hashes: 1: NA4KUnaZ-7quWuidYkuLJ9qLJL8.roa (hash: WMFv5tO73TosL+xYHmLzwInHMA669D5/mO5dF7Lq1sg=)
2: SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl (hash: PXP38qtKXIhP8N8prfhLch820GI2iZAro6N7pNiIi5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:0e:44:1b:ce:d7:a2:de:33:20:4c:6d:86:6f:7a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e6b25bf989fc3704bd8e84e0d5d9d68d02b4eb
Validity
Not Before: Nov 1 03:01:42 2026 GMT
Not After : Nov 2 03:01:42 2026 GMT
Subject: CN=5c34a4cd6dfaace1662cc81681df481158a367f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:84:81:85:82:3a:ab:7b:fd:5b:16:86:77:
96:f3:bc:42:d5:34:82:cb:15:21:63:d0:ac:2c:1d:
ef:07:f2:ce:cd:e9:7c:82:11:14:96:e6:91:da:47:
66:cb:c0:eb:0c:af:3a:04:d4:13:ac:05:bd:50:d3:
10:07:5c:de:4b:dd:1b:54:54:5a:e5:7c:45:3f:cd:
f0:de:18:e3:47:6f:9c:9d:75:3d:c0:3a:59:75:1d:
33:c9:9d:cb:a8:58:ae:f3:c7:cc:08:b0:8f:52:3a:
20:1b:b6:d3:2c:d6:a1:1e:8c:37:0c:fd:c7:78:4c:
81:b9:cb:1b:6c:0f:da:c6:10:b3:2f:76:5c:ef:cb:
ed:c5:77:13:3c:3b:4a:23:80:30:ff:76:5f:ab:e8:
47:e5:a5:b5:dd:30:85:c7:7d:dc:a9:a3:62:1f:c3:
91:4c:81:8e:e5:c9:0d:4f:12:bb:73:43:a1:f9:77:
44:19:14:7a:ef:58:87:3d:5c:34:85:58:e1:4e:15:
9f:e9:56:82:a5:24:49:06:c7:e9:25:ac:67:4c:16:
0b:ac:1d:df:81:45:74:dd:c8:59:42:5e:90:eb:fa:
a6:5d:7f:30:c8:41:ab:01:06:1b:68:ee:b0:ea:9e:
fd:70:23:b7:39:6f:c6:25:f0:fd:f7:43:07:40:4d:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:34:A4:CD:6D:FA:AC:E1:66:2C:C8:16:81:DF:48:11:58:A3:67:F4
X509v3 Authority Key Identifier:
keyid:48:E6:B2:5B:F9:89:FC:37:04:BD:8E:84:E0:D5:D9:D6:8D:02:B4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:94:5c:08:0e:25:56:54:be:be:9f:cb:bc:0a:99:17:e3:d7:
ad:0b:a1:7a:cc:4d:49:03:af:6c:70:ba:fd:4b:c9:eb:29:ab:
49:ae:e4:cb:e1:17:50:35:fa:9c:81:98:e2:1b:0d:15:5c:9c:
c7:c7:a7:f2:a8:4d:be:69:ed:78:18:90:cc:d1:1b:48:77:e3:
a3:00:29:60:6e:d4:0b:a3:20:03:c4:3a:42:59:22:82:5c:3a:
90:1a:64:3c:f1:36:83:3d:fd:06:3e:de:41:4b:0b:c8:5d:cb:
fc:ce:66:60:36:f3:21:8a:7c:5a:6c:65:56:63:23:bb:e7:2f:
02:b0:0b:76:e8:16:25:4e:7b:f5:b2:ab:e5:b9:6d:63:0b:3a:
55:66:38:5a:69:c9:ab:9b:d7:0e:15:30:1a:ab:f9:56:04:2c:
d7:64:5f:0c:af:99:a8:3d:8c:9b:06:aa:e4:43:6e:bc:c3:a2:
cd:04:7e:6c:7e:af:92:39:64:ab:01:9a:a0:be:18:f0:26:54:
c1:71:5b:a8:73:6f:de:e5:5f:e6:2f:8a:35:c7:8e:d1:2d:17:
70:36:de:8a:88:6a:00:86:cc:44:4c:45:0d:7b:99:1a:14:59:
0c:f5:b9:05:81:04:df:ad:4c:86:dd:52:59:2b:83:2c:c6:00:
2c:6e:00:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:47:11 2026 by rpki-client