Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: 7TcCZ2Nyqt4s9Zhv/c1xJrS2d6u1IMoSxiPD63LBo0o=
Subject key identifier: E4:F4:5F:25:85:0C:84:80:97:3E:B0:48:DA:98:86:F3:B4:1F:0C:2B
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 019D3A1CA41A039D744008284521F7FD97A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 1623
Signing time: Sun 29 Mar 2026 15:00:48 +0000
Manifest this update: Sun 29 Mar 2026 15:00:48 +0000
Manifest next update: Mon 30 Mar 2026 15:00:48 +0000
Files and hashes: 1: CXGVhKl7DsWirjDBB4d9lp0XVYo.roa (hash: vG2ULDUsBgokxLvpRChtUJL0gfvZ1Q8YEhzTpKweXsw=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: Um0754Ogeuerd3TnjRdycyfrO3ugYye10Urq/PyVAEE=)
3: TXtG8gOe4ICQThOU5GVmNxWR1wY.roa (hash: 1oG8biV7yLA5eMcYQnufX6gNgX4sZUXdc41fFMpt6Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:a4:1a:03:9d:74:40:08:28:45:21:f7:fd:97:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Mar 29 15:00:48 2026 GMT
Not After : Mar 30 15:00:48 2026 GMT
Subject: CN=e4f45f25850c8480973eb048da9886f3b41f0c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:d5:0d:8d:1b:14:9e:1c:6f:57:6e:8e:aa:
ef:5a:be:57:4e:f3:d8:0f:8c:1c:c8:b8:0a:10:49:
c8:e1:43:14:7c:a8:52:df:5c:e5:27:eb:1b:87:40:
df:3c:ae:92:75:5b:ee:48:5b:2c:40:93:75:5e:c5:
a3:0a:0b:74:de:39:e6:0a:31:33:1c:64:5a:1c:74:
4e:ee:a6:ee:21:62:4f:2c:71:c7:ca:d7:88:0a:e8:
36:ec:fe:a6:a9:46:81:51:6a:8a:0e:76:ad:39:37:
d2:5e:03:2e:a4:9c:07:ea:a3:70:4f:f1:c7:ef:95:
6c:41:47:40:3c:d3:c5:9f:8e:59:79:4d:e3:39:94:
88:e7:f8:ee:fa:e5:f4:4d:d6:83:ab:33:22:2a:85:
49:bf:cd:b6:72:20:f1:44:bd:ec:dc:4a:0a:60:1d:
f5:4a:46:0b:a3:c4:05:29:77:25:d0:50:ab:2f:0d:
c4:35:1a:af:44:de:23:1a:d8:57:9e:41:7e:c5:44:
f3:d4:68:cc:af:2c:f9:13:b0:3b:6c:cd:49:e3:09:
87:b3:a8:5e:10:06:1c:75:97:26:bc:67:9b:85:4d:
a4:de:0d:44:e5:23:70:83:41:08:9d:4e:f3:17:43:
4a:b4:fb:d3:00:ab:86:9a:5e:0f:af:12:a9:46:be:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F4:5F:25:85:0C:84:80:97:3E:B0:48:DA:98:86:F3:B4:1F:0C:2B
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:58:53:62:1b:ba:9a:30:e7:2b:f5:28:44:7e:3e:c4:f7:22:
7a:9a:95:5c:4e:96:37:39:7d:67:e9:c1:f5:9b:a6:b2:99:bd:
ab:67:98:ca:16:84:44:15:07:a0:a9:07:a5:e2:3b:7b:62:07:
18:01:39:52:5b:75:64:12:a9:32:c8:37:d6:21:f1:4c:5f:20:
a1:fd:53:e5:1b:42:9d:a9:0b:24:42:2b:09:49:98:ee:29:be:
8d:bb:93:fa:97:0c:44:59:02:f4:1f:a4:14:3a:b8:de:a4:8a:
79:69:3d:66:29:71:ea:64:38:59:30:8c:51:8e:6f:28:9c:1d:
31:95:fa:d8:c3:74:f7:1f:2c:37:ed:4d:a2:5d:3f:57:de:1b:
e1:5a:3c:cd:9b:57:e9:a5:30:f4:00:2e:e2:ed:c9:b9:bb:9a:
90:68:80:61:ed:df:13:ed:fc:20:ea:44:29:e4:2b:6a:79:0b:
e0:26:cc:44:02:d3:c2:51:bd:cc:e1:5a:df:9c:44:49:02:b4:
07:79:cf:52:02:38:b1:10:61:95:54:d4:92:3e:dd:b6:5a:4a:
0d:3f:8e:1e:f8:96:05:84:45:94:b4:92:9a:15:9e:26:ad:d5:
ac:f2:6f:67:84:4e:fb:78:d2:2d:55:82:fe:52:4c:b1:0d:d7:
d6:76:65:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:08 2026 by rpki-client