Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: gGg+UtE/YvPvnI48e7fnjmNl1WjVHp66vpVOBMzOQws=
Subject key identifier: EA:DF:EE:65:01:C7:AA:50:30:E2:9D:41:FD:4F:BF:FF:1F:37:46:91
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 019E314E181647346176D1360F39021FC370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 16A3
Signing time: Sat 16 May 2026 15:01:01 +0000
Manifest this update: Sat 16 May 2026 15:01:01 +0000
Manifest next update: Sun 17 May 2026 15:01:01 +0000
Files and hashes: 1: CXGVhKl7DsWirjDBB4d9lp0XVYo.roa (hash: vG2ULDUsBgokxLvpRChtUJL0gfvZ1Q8YEhzTpKweXsw=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: VC9SfbfjsA6gk8+OjZfExZuOaVa03ajGDOViehFy1uU=)
3: TXtG8gOe4ICQThOU5GVmNxWR1wY.roa (hash: 1oG8biV7yLA5eMcYQnufX6gNgX4sZUXdc41fFMpt6Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:18:16:47:34:61:76:d1:36:0f:39:02:1f:c3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: May 16 15:01:01 2026 GMT
Not After : May 17 15:01:01 2026 GMT
Subject: CN=eadfee6501c7aa5030e29d41fd4fbfff1f374691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:74:5e:26:f3:5a:7b:77:28:6e:44:86:60:
e7:b8:04:04:87:2a:0a:ec:82:0d:e4:c0:66:42:d2:
0f:62:24:cf:86:14:1e:64:70:ee:7d:4c:81:b7:1e:
64:9f:64:7e:2a:f2:7c:63:e8:ce:c2:1d:55:29:ca:
09:cb:53:dc:11:b8:6f:e9:95:00:ae:6c:2b:7c:64:
4c:28:45:62:01:4b:e1:50:49:dd:11:16:f8:2e:17:
ca:50:ea:b6:9b:a2:49:da:b2:05:55:0e:b9:73:6d:
5a:49:29:f3:d4:dd:f4:ba:a7:09:e9:4d:b4:f2:1f:
e9:d5:36:b8:12:81:ec:f2:47:a0:8b:e6:94:74:06:
1b:c8:35:ba:a2:73:b8:de:8e:4d:92:03:ad:4d:ae:
2d:a5:3f:a5:32:2e:ca:af:d2:94:99:a5:db:1d:16:
86:db:99:91:50:d9:58:86:22:56:13:88:54:50:a9:
c8:de:24:54:b0:32:13:9a:f4:00:8d:84:26:5e:b8:
3f:28:ee:56:ad:ac:af:7f:4a:2d:37:bc:56:d2:6a:
ce:85:37:67:99:c4:74:55:19:42:90:b9:0e:b9:8f:
0b:54:57:a9:cb:4a:c9:64:50:b8:79:be:d3:cc:fa:
6d:3e:08:7b:eb:46:30:94:1b:6f:11:82:f9:2c:b6:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DF:EE:65:01:C7:AA:50:30:E2:9D:41:FD:4F:BF:FF:1F:37:46:91
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b6:89:e0:d7:94:fc:6c:d8:7b:5c:4c:a7:f8:a5:df:e9:6b:
63:e2:23:e2:db:62:0a:78:3a:95:dd:67:c9:61:3a:d4:95:d3:
17:a7:18:a8:5f:22:35:53:61:a5:e9:ba:e7:e1:85:cd:30:55:
40:6e:5a:54:9d:75:a6:11:7e:dd:f5:95:de:0d:97:37:ec:8d:
f8:1e:b2:6f:c3:36:a5:d6:de:36:b9:d6:0d:3d:74:f1:f4:62:
75:11:cf:e0:61:00:20:db:62:aa:61:b1:e5:f6:25:8d:5d:54:
67:7b:2d:80:a1:a3:80:9f:78:f1:71:6e:a3:bb:9c:fa:33:ac:
0a:74:6d:4e:8c:ae:59:84:51:8a:78:b0:a4:6f:13:e4:1c:64:
53:ac:9d:e1:17:0a:9b:1e:49:f3:b0:3e:c1:e9:fd:ea:3e:6b:
27:cb:16:c8:a4:d8:a5:67:23:61:6d:43:17:bd:79:b3:89:3b:
a2:58:0d:d7:84:d0:33:83:75:a0:33:5c:e5:a1:7f:97:ef:55:
62:0d:be:8d:1c:1a:35:b7:75:a7:69:27:00:63:8a:94:e7:ff:
c1:4b:cc:25:e0:57:9f:08:a6:3b:63:1d:d2:12:1f:fb:28:c9:
e6:ec:b1:c9:b5:21:c9:f2:ae:35:a1:92:10:ac:29:8b:f0:51:
36:3e:cf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:57 2026 by rpki-client