Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: XkBG/bco2oE/I8HbkUUIDpnTVX39qgfgiAjBptSzmBo=
Subject key identifier: D1:4E:D8:CF:84:11:0E:5F:19:3C:87:D2:94:5B:5C:6F:39:B4:DC:FF
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 01A0B7649E36E27FC3A1CA95056C008A8FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 1A67
Signing time: Sat 19 Sep 2026 02:00:19 +0000
Manifest this update: Sat 19 Sep 2026 02:00:19 +0000
Manifest next update: Sun 20 Sep 2026 02:00:19 +0000
Files and hashes: 1: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: Cg91/hgJ2gqDXVn3CexQNvAoMALoD3abU2TO5IaFtuE=)
2: uECQUsjfaqrlYL383G6Bm7t8I4M.roa (hash: fiYRp6eJInd1HBPu5f1buVFXTSVD/xHqEtnjRPebiMg=)
3: zkuzAY2enYrtLGkFM8ERODYZLKA.roa (hash: PvdIqB+Fh9fTeVDgdqOpL7fRPe7DtvHIS5ulz/6oVFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:64:9e:36:e2:7f:c3:a1:ca:95:05:6c:00:8a:8f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Sep 19 02:00:19 2026 GMT
Not After : Sep 20 02:00:19 2026 GMT
Subject: CN=d14ed8cf84110e5f193c87d2945b5c6f39b4dcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:e4:3c:32:97:1b:d4:d8:d5:58:63:30:71:
73:db:ba:0a:d3:7b:c2:24:64:88:4b:47:07:c5:d5:
6b:80:91:04:e4:20:f3:87:ce:fd:75:40:d8:5d:1e:
1c:ec:36:fb:33:a3:b9:95:65:d6:b4:10:50:cb:4d:
e0:0c:37:61:0e:ee:da:0a:4b:d3:5b:ae:31:e6:47:
ee:9c:bb:ab:c3:39:6b:11:14:8c:f3:15:a7:7b:d1:
f0:a1:ef:63:e3:06:56:04:f7:42:70:85:93:2b:59:
4d:80:d7:50:26:0b:a7:37:6b:29:9c:6f:97:90:3c:
83:66:3d:1d:4b:6b:5d:36:f0:cb:88:eb:70:ff:63:
ce:07:4c:91:a5:6d:2f:c3:87:63:01:18:1a:24:27:
95:32:9c:83:b9:3c:13:5d:ee:7b:87:bf:ef:d6:62:
12:28:8d:1c:bd:60:7f:b9:b2:16:bd:0c:f0:5c:a5:
82:b2:2c:1d:cb:c9:c0:08:cf:15:66:0f:c5:b8:4d:
9d:b2:33:79:20:24:b5:42:e4:66:e7:30:b4:51:10:
42:b8:15:4e:38:b1:cb:b2:7e:e9:61:a4:9b:00:e6:
72:b9:7f:88:b3:ee:1f:3b:1a:c4:85:8a:aa:2a:8d:
ec:a3:55:75:f0:02:d8:51:37:42:49:1e:2a:70:b5:
ae:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4E:D8:CF:84:11:0E:5F:19:3C:87:D2:94:5B:5C:6F:39:B4:DC:FF
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a3:48:e2:30:cf:f9:d3:29:50:bc:28:ff:fa:df:fd:53:7a:
15:22:e6:66:5e:5a:fe:c9:98:75:88:04:24:9b:26:fb:ab:04:
49:30:bc:3c:03:df:27:3d:9f:8a:99:b3:96:37:8a:17:7a:c2:
4e:6c:d7:31:52:17:58:1c:a7:73:b4:d4:32:93:fa:bf:12:e9:
6e:25:28:25:32:33:13:c4:df:99:c0:b4:4c:e5:2a:88:27:15:
6d:1d:58:60:6b:5b:81:79:2c:d0:c5:57:a0:5d:23:ba:dd:b2:
d5:e2:e7:a0:76:98:6d:97:d6:ba:3d:87:5e:a1:80:f4:5f:e2:
9a:b7:b1:e4:d3:ef:44:0e:e0:7e:98:a2:89:9a:ac:e6:59:2e:
e4:32:31:b7:2d:1c:b7:5b:20:c2:37:ab:ee:b8:29:cc:7f:57:
50:95:a0:ef:50:b1:21:d6:98:6c:99:a5:d8:a9:5c:e7:6d:b9:
98:76:68:02:1a:d4:e2:fb:64:06:d1:ac:e1:bc:34:5a:8d:77:
f8:35:88:54:81:dc:12:f1:89:a9:e4:1a:50:83:a9:b8:bc:03:
90:3d:46:11:81:8a:fe:b4:51:3f:8e:54:ee:e3:0b:25:c9:38:
0e:e1:5d:26:d4:10:1d:23:88:13:a8:3c:78:82:ab:99:23:e2:
b9:6a:6f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:13:48 2026 by rpki-client