Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: ohp+/PkOsT4lyb6EqfUOVKJ30rjthHaEEIZjqAV0mFU=
Subject key identifier: 0E:29:46:35:A7:FD:89:75:B9:DA:22:05:4D:AA:12:37:2E:B4:1B:9D
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 019EE39E8974567BA226902A7C5059287404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 1974
Signing time: Sat 20 Jun 2026 06:01:18 +0000
Manifest this update: Sat 20 Jun 2026 06:01:18 +0000
Manifest next update: Sun 21 Jun 2026 06:01:18 +0000
Files and hashes: 1: NB0aH6OOCebNV60ghv0p2gPbNWw.roa (hash: /9rlQ1XN3AQEA0is6CHHICzhqLVHFMmR/Xfd2U8bL3c=)
2: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: 2H3ijli6eTljlQhTgr1fAP4UDwSGjElREeZjXKEOEMQ=)
3: uECQUsjfaqrlYL383G6Bm7t8I4M.roa (hash: fiYRp6eJInd1HBPu5f1buVFXTSVD/xHqEtnjRPebiMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e3:9e:89:74:56:7b:a2:26:90:2a:7c:50:59:28:74:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Jun 20 06:01:18 2026 GMT
Not After : Jun 21 06:01:18 2026 GMT
Subject: CN=0e294635a7fd8975b9da22054daa12372eb41b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:ac:e0:e0:f9:23:ad:be:ca:27:28:84:95:
a3:ce:8b:bb:93:3f:16:65:b1:f3:65:2e:bd:d5:7a:
64:54:b5:dd:7d:78:98:9e:0f:32:bc:a9:69:d4:29:
ee:d4:30:9a:d7:a7:f5:0d:a0:fc:15:28:4e:a9:31:
8c:eb:08:c7:1e:12:4b:b2:7a:b3:62:26:8d:b8:66:
47:25:b8:78:8c:a7:1f:f7:57:7a:df:90:2b:06:6c:
05:5e:05:9d:88:b6:76:c6:f2:4b:3d:17:06:ac:70:
76:1b:44:90:35:22:85:5f:82:41:6b:97:2d:4e:4c:
3d:db:8d:96:2a:55:37:75:a5:6d:29:02:3d:76:74:
59:25:82:de:e1:2e:1d:60:58:be:47:62:d0:8f:e5:
4d:7d:a0:18:f3:07:9d:ee:45:49:fb:17:48:f3:7e:
e3:38:07:72:83:96:54:16:26:56:78:ec:9f:f7:44:
26:cd:6a:fe:1f:c7:4a:9b:fa:d8:40:e1:f0:0b:b8:
b4:23:7a:5f:4b:04:1f:0d:32:c2:b5:0d:17:53:b4:
c8:fe:6e:fe:78:e4:e5:3c:ea:bb:fc:8a:5a:c0:a2:
05:98:73:8e:b7:7e:a8:3d:c9:64:4c:78:16:d4:c2:
a7:d7:83:64:15:ab:cd:98:b3:37:ea:94:be:dc:07:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:29:46:35:A7:FD:89:75:B9:DA:22:05:4D:AA:12:37:2E:B4:1B:9D
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b9:2a:7b:b2:d3:fd:4f:24:31:cc:29:94:a0:52:c6:14:6f:
dd:7a:06:8e:97:6e:ec:78:d9:6c:53:74:95:04:4e:64:22:d4:
29:87:f4:3b:c9:e1:b9:f8:5e:2a:f4:6e:e4:ef:6c:27:c4:cd:
0f:2b:c1:a9:b2:47:1a:51:f3:34:aa:5a:12:7f:7c:fd:0e:19:
43:f7:0c:ce:06:c5:20:78:7e:bf:d7:8a:21:00:e0:a9:b4:70:
07:e0:ee:93:c4:21:86:29:0a:06:22:21:53:8f:c8:59:df:5b:
2c:03:77:fb:24:e3:39:85:b9:32:e8:44:10:3b:a0:98:47:e8:
5c:bb:56:1a:82:82:39:1b:fd:4b:87:77:51:6b:62:6f:1b:84:
f5:22:56:34:df:39:b2:47:10:60:f7:f9:47:da:f2:e3:d9:b1:
50:49:35:29:b8:d5:6d:ae:57:ae:07:b8:0c:ff:8c:77:39:e7:
b3:02:66:87:a7:39:92:29:d2:95:2a:29:6f:1f:5d:89:bf:00:
ec:08:bf:c9:96:ed:c7:73:8a:46:8e:a0:28:ae:10:25:67:e1:
88:5e:dd:a0:48:24:d8:12:85:be:40:5c:e0:fc:98:20:88:45:
39:bd:2c:41:6e:88:84:21:32:8c:c2:20:4a:7d:26:99:bb:12:
ae:27:d1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 13:14:54 2026 by rpki-client