Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: bse0K/jv8b0cNBNnj3z53JbXn8Dol2g93v8OYncYk6s=
Subject key identifier: AB:9E:6B:01:81:8F:69:6E:11:FD:10:C9:63:14:2B:0F:EF:D3:1A:71
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 01A13F704C9818C046435D460E55B379FC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 1838
Signing time: Thu 15 Oct 2026 12:01:26 +0000
Manifest this update: Thu 15 Oct 2026 12:01:26 +0000
Manifest next update: Fri 16 Oct 2026 12:01:26 +0000
Files and hashes: 1: CXGVhKl7DsWirjDBB4d9lp0XVYo.roa (hash: vG2ULDUsBgokxLvpRChtUJL0gfvZ1Q8YEhzTpKweXsw=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: Asqm7d2HmsfdRruZWnTxdUnzDqcQ9DgGZTVL3Gjxyvw=)
3: TXtG8gOe4ICQThOU5GVmNxWR1wY.roa (hash: 1oG8biV7yLA5eMcYQnufX6gNgX4sZUXdc41fFMpt6Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:4c:98:18:c0:46:43:5d:46:0e:55:b3:79:fc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Oct 15 12:01:26 2026 GMT
Not After : Oct 16 12:01:26 2026 GMT
Subject: CN=ab9e6b01818f696e11fd10c963142b0fefd31a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:4c:8b:8d:93:f1:14:9a:8e:b9:1d:9a:07:
9e:2d:d8:72:37:3d:ca:4c:ea:5e:e0:95:64:f0:51:
a8:86:63:b0:4d:aa:82:44:e9:9c:32:fe:ae:b3:8c:
17:cc:80:7c:b5:ab:0a:6b:49:20:07:f9:e5:62:da:
05:0d:ab:69:5c:f7:b5:0d:ea:5c:86:ee:3f:65:8f:
98:1f:b8:36:5f:0d:df:09:1d:85:cc:8d:bc:3d:69:
c4:4b:cc:b6:0d:73:99:7d:9c:7d:d8:47:15:e1:40:
fb:70:85:94:6c:e3:17:f9:44:a0:72:14:9a:5f:ff:
e9:dc:04:d3:6e:14:2c:f0:6f:de:eb:ac:2d:23:44:
a4:ae:eb:7d:4c:a6:a2:a5:69:28:cd:24:0c:10:19:
39:52:0f:60:ab:39:67:15:a5:e8:9f:c7:14:de:d4:
4e:84:46:35:89:3f:a3:e1:4e:66:8e:f5:a0:ec:d1:
fa:f2:3e:81:f6:18:08:e8:4a:00:55:2a:f4:8b:b9:
d1:9a:58:7f:ef:20:ae:1e:fa:5c:9d:a1:47:4f:17:
db:0b:33:2f:4c:1f:56:c6:72:7c:8c:be:30:ba:48:
6b:5e:4a:e2:b8:70:ea:23:f8:87:aa:cb:f3:43:40:
a0:ad:e9:ce:16:ed:15:44:47:39:2b:91:f2:6e:a1:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9E:6B:01:81:8F:69:6E:11:FD:10:C9:63:14:2B:0F:EF:D3:1A:71
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f3:3a:dd:00:d5:12:e9:9d:cd:51:90:8f:31:9c:b6:12:43:
4c:f7:65:ed:30:01:f1:e2:3e:0a:cf:cd:b0:bb:ba:e6:52:37:
da:5a:46:c9:7b:15:bf:8f:0c:26:6f:1e:bf:91:ad:15:33:9f:
b5:5b:b4:33:1f:8a:31:29:e6:62:9b:fa:2f:9a:fe:d8:92:f7:
93:92:5b:c5:20:9d:d4:f7:ad:bc:be:4f:46:a9:b2:98:ee:11:
bb:32:76:73:b4:8f:48:35:02:d8:79:09:e7:4f:d1:b2:a0:77:
e3:e3:e8:cd:9c:88:e8:14:ee:8b:cb:a8:e4:40:f5:40:82:15:
62:3d:73:86:c4:a7:68:b8:79:ba:ff:a8:b8:c3:ae:23:68:ef:
f2:54:8b:c1:20:ea:09:61:29:40:20:10:75:b6:88:27:60:c6:
e6:34:df:c1:d0:b1:bf:fd:cb:68:20:cf:50:f6:83:52:2b:96:
99:d0:b8:08:2a:a8:99:a2:d7:72:b6:77:5b:2a:38:c7:d1:83:
7d:a9:70:ad:a1:33:dc:85:b0:13:0b:d0:f6:9e:89:34:80:85:
88:76:90:65:a4:25:20:3b:3b:76:50:dc:80:74:72:1e:a6:f3:
a2:91:f5:96:51:e4:d4:2b:43:68:4d:87:1a:28:0d:c4:bd:64:
3e:aa:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:09:56 2026 by rpki-client