Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
File: SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft (raw, json)
Hash identifier: VchNOLikYsVk8XUdxf/VjW6DkPldrZl7sNgDQ06cKuo=
Subject key identifier: 97:4C:66:AE:C1:F3:40:E9:84:9C:39:63:45:5C:C8:89:4D:FE:14:49
Authority key identifier: 48:E6:B2:5B:F9:89:FC:37:04:BD:8E:84:E0:D5:D9:D6:8D:02:B4:EB
Certificate issuer: /CN=48e6b25bf989fc3704bd8e84e0d5d9d68d02b4eb
Certificate serial: 019FA2CDE216BA84496577F5C94A724E3610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:00:29 +0000
Manifest this update: Mon 27 Jul 2026 09:00:29 +0000
Manifest next update: Tue 28 Jul 2026 09:00:29 +0000
Files and hashes: 1: NA4KUnaZ-7quWuidYkuLJ9qLJL8.roa (hash: WMFv5tO73TosL+xYHmLzwInHMA669D5/mO5dF7Lq1sg=)
2: SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl (hash: s5OttlmeY6huYu1Hj+3HQ+aVbFxukHt2ccwgN74+0G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:e2:16:ba:84:49:65:77:f5:c9:4a:72:4e:36:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e6b25bf989fc3704bd8e84e0d5d9d68d02b4eb
Validity
Not Before: Jul 27 09:00:29 2026 GMT
Not After : Jul 28 09:00:29 2026 GMT
Subject: CN=974c66aec1f340e9849c3963455cc8894dfe1449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:bc:3d:74:47:26:e7:2c:92:8b:cd:f6:11:
1f:c6:a5:6b:fe:17:5b:d1:e0:fb:e4:52:db:42:64:
67:b5:d6:2c:e1:39:c4:91:d3:e1:15:30:f9:57:b8:
14:d0:37:73:3b:d2:6e:67:ef:c1:a5:fa:9a:b8:90:
1a:29:1c:11:a8:a4:09:02:89:b8:51:92:3b:e6:7a:
7e:9f:76:23:37:3f:28:c8:d7:91:57:c2:45:10:3f:
13:b9:be:17:bb:96:6c:49:76:79:39:00:16:ba:ba:
c4:47:68:64:ed:fa:d9:b5:20:72:17:41:ec:c5:f2:
e3:1c:e1:ca:f7:74:21:77:97:71:0d:1e:4e:1a:3c:
d3:dc:b8:92:fd:9c:3c:8c:b0:a9:39:74:44:49:68:
3f:05:dc:7d:da:88:d8:a2:0f:9b:d2:30:6c:d7:8c:
a8:48:32:9e:38:07:5e:1c:a5:16:7f:83:e5:08:81:
cd:b1:7b:ad:23:b0:8a:7d:31:00:ee:55:70:1a:c5:
24:1e:40:67:6e:fa:a6:13:2d:78:48:7d:a7:f1:ef:
9d:d5:54:5a:cb:d7:67:af:a7:77:c5:88:9c:12:3d:
c1:3e:a4:47:b3:3f:7f:0e:b2:5c:47:27:f9:0b:a8:
3f:bf:84:4e:07:25:e2:22:cf:30:6d:09:cc:7d:f6:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4C:66:AE:C1:F3:40:E9:84:9C:39:63:45:5C:C8:89:4D:FE:14:49
X509v3 Authority Key Identifier:
keyid:48:E6:B2:5B:F9:89:FC:37:04:BD:8E:84:E0:D5:D9:D6:8D:02:B4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:aa:d3:b0:ce:61:7a:6f:fa:96:2b:70:15:cf:a7:2a:89:a8:
c3:32:3b:6b:44:1f:b8:a7:f2:c5:31:92:f1:c6:6e:cf:8e:66:
64:94:c7:63:42:14:3b:95:eb:fc:50:1d:04:7e:65:7a:18:4e:
c6:82:d0:eb:09:01:97:31:cf:29:cf:51:29:df:dc:22:5f:e5:
11:6d:f0:de:9c:6c:5b:ab:73:a2:99:06:aa:a0:2e:c7:04:7e:
d7:01:32:05:7b:8c:11:69:7b:d6:00:ea:3b:7a:00:fa:23:4f:
4f:b4:9b:e8:6e:82:52:f6:59:15:76:64:e9:e7:14:12:8e:26:
d5:e5:69:8a:c8:ba:d6:6f:35:dd:94:d4:a9:bb:6a:85:b1:df:
72:ef:63:ab:8f:47:b7:89:d8:0c:c9:38:04:90:c1:50:31:de:
f8:f2:7e:f3:79:c4:04:83:5f:18:63:04:d4:c4:e7:9a:d7:68:
b9:6b:3e:fa:e3:c0:a1:ae:c1:73:da:8a:a7:25:f8:1c:53:19:
69:7e:34:e5:98:62:ad:27:a7:5b:05:8f:43:34:01:6a:2d:f0:
e7:8f:32:19:0a:29:6b:cb:e1:c2:7c:d7:99:26:01:ad:eb:41:
e6:d3:92:32:5c:cc:3c:17:9e:33:e4:60:e0:91:21:f9:cc:3f:
69:14:64:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izeIWuoRJZXf1yUpyTjYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZTZiMjViZjk4OWZjMzcwNGJkOGU4NGUwZDVkOWQ2OGQw
MmI0ZWIwHhcNMjYwNzI3MDkwMDI5WhcNMjYwNzI4MDkwMDI5WjAzMTEwLwYDVQQD
Eyg5NzRjNjZhZWMxZjM0MGU5ODQ5YzM5NjM0NTVjYzg4OTRkZmUxNDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdO8PXRHJucskovN9hEfxqVr/hdb
0eD75FLbQmRntdYs4TnEkdPhFTD5V7gU0DdzO9JuZ+/BpfqauJAaKRwRqKQJAom4
UZI75np+n3YjNz8oyNeRV8JFED8Tub4Xu5ZsSXZ5OQAWurrER2hk7frZtSByF0Hs
xfLjHOHK93Qhd5dxDR5OGjzT3LiS/Zw8jLCpOXRESWg/Bdx92ojYog+b0jBs14yo
SDKeOAdeHKUWf4PlCIHNsXutI7CKfTEA7lVwGsUkHkBnbvqmEy14SH2n8e+d1VRa
y9dnr6d3xYicEj3BPqRHsz9/DrJcRyf5C6g/v4ROByXiIs8wbQnMffYGRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdMZq7B80DphJw5Y0VcyIlN/hRJMB8GA1UdIwQY
MBaAFEjmslv5ifw3BL2OhODV2daNArTrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU09heVdfbUpfRGNFdlk2RTROWFoxbzBDdE9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZDk1M2MtOTZiYy00MDdiLWFkNmEt
M2NmZDZjM2ZkY2E0LzEvU09heVdfbUpfRGNFdlk2RTROWFoxbzBDdE9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yZDk1M2MtOTZiYy00MDdiLWFkNmEtM2NmZDZjM2ZkY2E0
LzEvU09heVdfbUpfRGNFdlk2RTROWFoxbzBDdE9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArKrTsM5h
em/6litwFc+nKomowzI7a0QfuKfyxTGS8cZuz45mZJTHY0IUO5Xr/FAdBH5lehhO
xoLQ6wkBlzHPKc9RKd/cIl/lEW3w3pxsW6tzopkGqqAuxwR+1wEyBXuMEWl71gDq
O3oA+iNPT7Sb6G6CUvZZFXZk6ecUEo4m1eVpisi61m813ZTUqbtqhbHfcu9jq49H
t4nYDMk4BJDBUDHe+PJ+83nEBINfGGME1MTnmtdouWs++uPAoa7Bc9qKpyX4HFMZ
aX405ZhirSenWwWPQzQBai3w548yGQopa8vhwnzXmSYBretB5tOSMlzMPBeeM+Rg
4JEh+cw/aRRkwQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 16:47:09 2026 by rpki-client