Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json)
Hash identifier: AJHkP9IOT/Y9cCINZM8Z9D+JgwZhSiQcICKXNfPUH0w=
Subject key identifier: E2:E9:98:84:6B:AB:E4:A9:8F:62:03:8B:25:CD:A9:CB:9B:AA:E0:5C
Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Certificate serial: 019D38D3082AF424F8007AD158FA29994780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
Manifest number: 189D
Signing time: Sun 29 Mar 2026 09:00:47 +0000
Manifest this update: Sun 29 Mar 2026 09:00:47 +0000
Manifest next update: Mon 30 Mar 2026 09:00:47 +0000
Files and hashes: 1: 1WFTVE_laDxR2551YD9-IDIhOK4.roa (hash: 1U7XfEnUkzCJgaorLVPneDn26hSAWBbm2FCXShHT0iY=)
2: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: sSWibPwMcJje9LLhBdtObCNA0vfIp2J2wcBIh+TzZz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:08:2a:f4:24:f8:00:7a:d1:58:fa:29:99:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Validity
Not Before: Mar 29 09:00:47 2026 GMT
Not After : Mar 30 09:00:47 2026 GMT
Subject: CN=e2e998846babe4a98f62038b25cda9cb9baae05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:62:7f:7c:76:c9:5b:67:2c:9f:42:ac:02:
5a:51:6c:e8:67:c9:e9:80:0c:26:08:55:fa:06:5f:
3d:f7:a5:18:cc:83:c7:18:74:00:36:d9:5a:31:45:
ec:ef:a1:df:9d:32:e0:cb:95:9f:87:71:9e:d6:fb:
8b:e4:c0:39:fb:ad:97:6e:94:40:97:7d:5a:a6:91:
fb:25:01:6d:4f:ff:24:c9:c2:8c:5f:70:d4:55:92:
06:33:72:0a:66:8e:a6:f1:99:ef:91:93:f7:17:05:
99:c9:b5:8b:0c:89:1d:3a:23:c2:20:46:74:00:07:
be:30:48:87:72:8f:9d:fb:f8:27:6f:22:c1:da:d4:
2a:5a:db:3c:e3:0a:42:4b:b8:cc:25:9a:24:a0:9c:
52:3b:8a:6c:4c:0e:40:ff:6d:a9:5f:d9:a2:09:26:
3e:97:4a:5f:94:b5:7d:bf:1c:58:51:da:37:e2:48:
bf:19:84:21:62:a5:4d:d0:fb:45:c8:6a:3e:b6:9e:
be:11:11:b6:24:a8:61:43:c8:ab:e6:34:40:4c:7d:
b9:91:16:13:a8:62:99:8b:33:81:21:d5:5e:c7:fb:
1d:04:73:f6:55:39:d6:6c:fd:c6:44:23:32:1e:75:
c3:74:96:22:9a:5f:13:f2:b0:fe:85:50:4b:42:0a:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E9:98:84:6B:AB:E4:A9:8F:62:03:8B:25:CD:A9:CB:9B:AA:E0:5C
X509v3 Authority Key Identifier:
keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8f:df:f9:57:98:81:6c:a8:b6:41:fa:86:8c:16:f5:90:58:
4a:a5:10:44:e6:d6:5b:d9:09:2a:00:43:2d:89:1a:c0:7c:5d:
20:52:8e:4e:f7:16:9e:ce:3e:8b:0d:8f:20:c5:92:93:5c:19:
7f:08:97:2a:a0:e3:2b:21:b0:c1:9a:c1:f3:48:d2:c2:b9:a5:
63:6e:3f:72:b6:76:d2:d9:e5:97:6a:fd:88:3f:d9:1e:a9:46:
9a:bf:c2:1d:d3:16:1b:92:d8:f1:69:2b:f8:c5:4c:18:06:8b:
5d:fc:19:b9:a8:ee:b0:ea:ab:08:c4:73:8e:6b:ad:e4:c4:6f:
99:2b:54:eb:c5:32:ce:0f:6f:aa:77:34:86:a4:49:c0:6e:6c:
d5:3a:81:9b:bd:ad:78:75:ab:37:65:72:aa:99:cf:59:9b:e7:
8b:b1:e1:58:49:cb:11:60:c5:1e:6b:45:3c:28:75:48:d7:11:
67:b3:0f:72:4f:79:2d:f1:14:ed:9d:b4:e3:52:88:04:90:77:
b8:d6:2e:68:56:c0:dd:5c:62:5a:40:fe:f1:a8:85:c6:72:a6:
06:6c:22:54:bb:18:54:3e:bc:bb:22:60:a6:d8:ab:e0:ff:da:
38:ce:3c:b9:c9:f5:70:1d:cd:c3:1d:4b:a3:8d:3b:28:f6:3a:
ce:de:89:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040wgq9CT4AHrRWPopmUeAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOGU2ODcwMmVmNWQ0OGM0ZjJiMDcyZDljYjQ3M2U2MmI4
N2IzZTQwHhcNMjYwMzI5MDkwMDQ3WhcNMjYwMzMwMDkwMDQ3WjAzMTEwLwYDVQQD
EyhlMmU5OTg4NDZiYWJlNGE5OGY2MjAzOGIyNWNkYTljYjliYWFlMDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl99if3x2yVtnLJ9CrAJaUWzoZ8np
gAwmCFX6Bl8996UYzIPHGHQANtlaMUXs76HfnTLgy5Wfh3Ge1vuL5MA5+62XbpRA
l31appH7JQFtT/8kycKMX3DUVZIGM3IKZo6m8ZnvkZP3FwWZybWLDIkdOiPCIEZ0
AAe+MEiHco+d+/gnbyLB2tQqWts84wpCS7jMJZokoJxSO4psTA5A/22pX9miCSY+
l0pflLV9vxxYUdo34ki/GYQhYqVN0PtFyGo+tp6+ERG2JKhhQ8ir5jRATH25kRYT
qGKZizOBIdVex/sdBHP2VTnWbP3GRCMyHnXDdJYiml8T8rD+hVBLQgpkKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLpmIRrq+Spj2IDiyXNqcubquBcMB8GA1UdIwQY
MBaAFEqOaHAu9dSMTysHLZy0c+Yrh7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kMTlmYzItODk0OS00ZmU2LTkzMWIt
MWM0YmI1OGFiNzIwLzEvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kMTlmYzItODk0OS00ZmU2LTkzMWItMWM0YmI1OGFiNzIw
LzEvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnY/f+VeY
gWyotkH6howW9ZBYSqUQRObWW9kJKgBDLYkawHxdIFKOTvcWns4+iw2PIMWSk1wZ
fwiXKqDjKyGwwZrB80jSwrmlY24/crZ20tnll2r9iD/ZHqlGmr/CHdMWG5LY8Wkr
+MVMGAaLXfwZuajusOqrCMRzjmut5MRvmStU68Uyzg9vqnc0hqRJwG5s1TqBm72t
eHWrN2VyqpnPWZvni7HhWEnLEWDFHmtFPCh1SNcRZ7MPck95LfEU7Z2041KIBJB3
uNYuaFbA3VxiWkD+8aiFxnKmBmwiVLsYVD68uyJgptir4P/aOM48ucn1cB3Nwx1L
o407KPY6zt6JqQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:56 2026 by rpki-client