Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: f1IX0xRfSgpoZUsYw4ed8Z08H8PWMbJiq7OPH81ijv8=
Subject key identifier: 89:4C:FC:8F:9A:53:A3:BF:D2:F1:F5:B0:25:0F:46:68:0E:8D:A9:38
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 019DB08FA4F1862FF2549A1D4774D3DE801B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 18D5
Signing time: Tue 21 Apr 2026 15:01:37 +0000
Manifest this update: Tue 21 Apr 2026 15:01:37 +0000
Manifest next update: Wed 22 Apr 2026 15:01:37 +0000
Files and hashes: 1: NB0aH6OOCebNV60ghv0p2gPbNWw.roa (hash: /9rlQ1XN3AQEA0is6CHHICzhqLVHFMmR/Xfd2U8bL3c=)
2: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: FWM3Rg+zdblWQs8IPJ3kuAXAr+Cm+k7muLBxgSIS8gw=)
3: uECQUsjfaqrlYL383G6Bm7t8I4M.roa (hash: fiYRp6eJInd1HBPu5f1buVFXTSVD/xHqEtnjRPebiMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:8f:a4:f1:86:2f:f2:54:9a:1d:47:74:d3:de:80:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Apr 21 15:01:37 2026 GMT
Not After : Apr 22 15:01:37 2026 GMT
Subject: CN=894cfc8f9a53a3bfd2f1f5b0250f46680e8da938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:e7:8c:ca:82:a1:37:25:49:87:22:49:1d:
e7:5b:a0:58:cc:0c:85:0c:51:bf:f4:ac:ee:2e:e7:
b1:02:83:07:88:f1:40:7e:88:e0:38:26:bd:f1:23:
85:4d:7e:90:b3:d9:56:55:61:20:ab:3b:08:27:fe:
fe:ad:f7:8f:73:af:0b:8f:14:6e:90:86:b7:dd:dc:
50:61:f4:c6:11:5d:86:88:01:58:28:6f:b3:36:70:
c8:57:4f:18:9e:4e:9a:14:1f:85:e6:6b:4a:2a:4f:
de:f1:42:a5:53:81:69:6e:df:4e:cb:15:70:15:ab:
84:45:cc:81:e8:ed:bc:d2:a2:24:22:54:14:b7:b5:
97:53:b3:ba:99:76:dc:3d:2a:c3:a2:b5:b8:98:f2:
53:20:cc:7e:06:e8:10:30:eb:69:7f:21:88:5b:36:
da:ac:9f:f2:84:6f:58:f1:26:68:fd:44:25:fd:98:
6a:ab:22:18:38:78:af:27:1f:9f:6e:a4:69:76:f5:
d4:c1:4d:fd:72:73:07:82:37:26:c2:8f:5e:70:93:
61:15:1f:05:6e:ab:d3:51:c5:f3:c1:2c:ee:0e:e5:
0f:7e:70:03:87:d5:9a:c5:97:89:5a:ee:ef:16:bb:
40:67:3e:f9:6f:14:7d:69:43:c2:79:b4:2e:db:d6:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4C:FC:8F:9A:53:A3:BF:D2:F1:F5:B0:25:0F:46:68:0E:8D:A9:38
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f3:8c:79:62:4a:6f:bb:4d:e2:57:ab:4a:8f:b4:04:ff:28:
e5:40:f2:36:7d:f8:ff:22:43:ff:b2:96:4a:a3:15:07:12:4b:
db:09:3c:a7:2b:7b:3e:7f:f2:a5:f8:c4:e9:b3:f1:04:ef:da:
59:ee:6f:e6:d0:dc:b9:43:0e:3f:05:da:df:18:74:f9:8e:14:
e5:bb:ca:54:17:65:a9:c6:13:f9:88:10:2e:80:be:5f:97:44:
81:25:d7:5f:ac:44:da:f9:2b:e5:76:85:ca:a4:83:27:b1:83:
ae:53:68:29:3b:20:39:7c:db:54:d0:3b:08:aa:49:c0:c0:4c:
c3:4b:44:df:aa:40:c9:92:63:5d:1a:23:e6:92:32:71:73:33:
e7:1b:df:48:cf:8c:45:05:4f:31:b7:3c:81:3f:7b:21:e5:40:
bd:ae:61:33:2a:59:65:fd:1c:1c:64:cc:63:d8:d8:a7:99:0e:
92:02:8a:dc:9d:7e:3b:28:3f:23:1c:dc:5f:51:b7:6c:82:e0:
ad:1f:69:69:70:29:57:52:6e:e4:25:04:5c:a4:64:54:22:00:
f3:90:f3:0b:8b:9a:01:1a:90:b7:29:df:56:8c:f9:2f:a8:4a:
80:95:08:bf:ef:28:40:f7:b2:70:15:3c:55:90:9e:36:5f:d5:
3b:62:27:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:05:41 2026 by rpki-client