Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
File: soWZKSpjJCl-Av_zxRGb7gsxdUg.mft (raw, json)
Hash identifier: zGr0ZnBGmhj9mHCPhc33z9syankY+PG21ygU9b5vAHU=
Subject key identifier: F5:32:CA:65:EE:04:48:EC:18:27:C7:93:8B:4E:E5:D9:27:DD:FC:6D
Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
Certificate issuer: /CN=b28599292a6324297e02fff3c5119bee0b317548
Certificate serial: 01A08C0D0A5D4DE210902D3ADA2BAF0775D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
Manifest number: 1A50
Signing time: Thu 10 Sep 2026 16:00:59 +0000
Manifest this update: Thu 10 Sep 2026 16:00:59 +0000
Manifest next update: Fri 11 Sep 2026 16:00:59 +0000
Files and hashes: 1: l2rqq_GRsLUyUp2oarBXwxPDz-0.roa (hash: Xi3flxJeBdK/7++5BD8j/Md9YzUTg2l8DsCAYSS8HoM=)
2: soWZKSpjJCl-Av_zxRGb7gsxdUg.crl (hash: 9knnfVI4o/4TW0PsqAoMRHHQ0WeLYgOARuozV9ttPhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:0a:5d:4d:e2:10:90:2d:3a:da:2b:af:07:75:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548
Validity
Not Before: Sep 10 16:00:59 2026 GMT
Not After : Sep 11 16:00:59 2026 GMT
Subject: CN=f532ca65ee0448ec1827c7938b4ee5d927ddfc6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:7b:fc:00:7e:ad:88:83:c7:6a:13:db:49:
84:a1:00:57:9a:5a:58:6b:04:59:0d:ae:d4:5d:46:
e0:c2:c5:22:dc:fa:e3:06:37:aa:24:53:56:45:5b:
95:4b:2d:58:23:97:06:e1:b9:50:4f:b1:e2:cb:01:
8a:39:97:25:79:d3:5c:13:0a:ce:49:8c:9e:97:eb:
3d:8d:27:c6:e8:54:07:97:8d:2a:7d:6c:24:6f:4f:
09:7e:e2:12:79:ba:d9:53:69:87:d9:fb:34:7d:f8:
72:d9:e9:b0:01:75:27:f6:d7:37:5b:d5:7d:d3:75:
cc:08:92:2b:a4:ca:d4:37:59:4c:40:a4:df:1e:d4:
2c:fd:c0:ed:d0:aa:e8:be:68:33:00:9e:bb:dc:71:
92:8f:ee:e5:a5:b3:05:93:25:62:15:ea:ec:f5:5e:
50:48:cc:d6:af:d3:81:91:00:fd:47:b6:06:93:9d:
2d:3c:3b:96:ed:80:16:c1:fa:3a:27:a1:b3:b3:b2:
38:b1:99:d9:c3:49:ec:6d:6e:bc:cc:1e:fe:9e:2f:
6b:59:fa:c6:28:50:5b:e3:78:00:d1:a5:1f:90:41:
7f:d7:a3:62:6f:16:6f:eb:51:fe:0a:12:4c:36:ac:
92:97:38:0a:3f:8d:ae:f7:a3:88:81:93:eb:89:ef:
ad:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:32:CA:65:EE:04:48:EC:18:27:C7:93:8B:4E:E5:D9:27:DD:FC:6D
X509v3 Authority Key Identifier:
keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ff:a5:f3:52:40:07:fc:31:1c:c3:c2:29:13:e9:32:a7:c4:
b4:b3:a4:71:b7:12:a7:92:ef:ea:f8:d6:67:7e:6a:f3:13:9f:
f5:67:6a:32:ef:18:7c:b8:f8:66:71:bd:a5:f2:4a:b9:62:98:
75:9a:da:9b:c0:d0:9f:ef:34:9e:ed:88:1b:e8:aa:40:6a:90:
9c:6b:6c:06:d3:bf:9a:13:e0:0d:0d:7c:95:be:d7:5d:80:84:
8b:6a:d5:f1:11:d0:8b:2a:73:2b:6e:2f:2f:26:f0:3f:75:57:
ec:95:a7:e5:41:e0:76:3a:c2:bd:40:4c:a9:cd:08:82:03:e6:
c9:54:ee:44:87:41:bc:b6:62:38:43:a0:c5:c2:f8:ef:43:1d:
84:55:13:61:01:da:0b:d8:22:3d:d1:8b:cb:62:07:67:52:94:
c7:89:6e:20:f4:36:4c:87:7a:56:81:2f:c7:ff:a4:ca:b2:2f:
2a:d2:42:78:e9:31:59:72:cf:d9:0e:04:e2:e0:fd:e5:76:93:
f3:29:1b:07:1a:dd:b6:1e:6e:f9:cd:3e:69:84:3f:66:2b:4f:
5f:ef:e6:5a:49:49:8c:60:64:07:34:b8:2d:5d:35:79:fa:bc:
f6:86:f8:95:58:29:18:f6:c1:af:a8:04:3d:08:b4:2c:67:cd:
8e:7c:c0:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDQpdTeIQkC062iuvB3XZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODU5OTI5MmE2MzI0Mjk3ZTAyZmZmM2M1MTE5YmVlMGIz
MTc1NDgwHhcNMjYwOTEwMTYwMDU5WhcNMjYwOTExMTYwMDU5WjAzMTEwLwYDVQQD
EyhmNTMyY2E2NWVlMDQ0OGVjMTgyN2M3OTM4YjRlZTVkOTI3ZGRmYzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ17/AB+rYiDx2oT20mEoQBXmlpY
awRZDa7UXUbgwsUi3PrjBjeqJFNWRVuVSy1YI5cG4blQT7HiywGKOZcledNcEwrO
SYyel+s9jSfG6FQHl40qfWwkb08JfuISebrZU2mH2fs0ffhy2emwAXUn9tc3W9V9
03XMCJIrpMrUN1lMQKTfHtQs/cDt0KrovmgzAJ673HGSj+7lpbMFkyViFers9V5Q
SMzWr9OBkQD9R7YGk50tPDuW7YAWwfo6J6Gzs7I4sZnZw0nsbW68zB7+ni9rWfrG
KFBb43gA0aUfkEF/16NibxZv61H+ChJMNqySlzgKP42u96OIgZPrie+tnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUyymXuBEjsGCfHk4tO5dkn3fxtMB8GA1UdIwQY
MBaAFLKFmSkqYyQpfgL/88URm+4LMXVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lNTUyZjQtOTZjYS00MjU5LWE4MmEt
ZTM1YTY3ZTVkOWUyLzEvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lNTUyZjQtOTZjYS00MjU5LWE4MmEtZTM1YTY3ZTVkOWUy
LzEvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADv+l81JA
B/wxHMPCKRPpMqfEtLOkcbcSp5Lv6vjWZ35q8xOf9WdqMu8YfLj4ZnG9pfJKuWKY
dZram8DQn+80nu2IG+iqQGqQnGtsBtO/mhPgDQ18lb7XXYCEi2rV8RHQiypzK24v
LybwP3VX7JWn5UHgdjrCvUBMqc0IggPmyVTuRIdBvLZiOEOgxcL470MdhFUTYQHa
C9giPdGLy2IHZ1KUx4luIPQ2TId6VoEvx/+kyrIvKtJCeOkxWXLP2Q4E4uD95XaT
8ykbBxrdth5u+c0+aYQ/ZitPX+/mWklJjGBkBzS4LV01efq89ob4lVgpGPbBr6gE
PQi0LGfNjnzArg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:20:20 2026 by rpki-client