Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier: UeUqBtrBdw42LFRJA0UubCYP44q42iOKjL7MKHvFExE=
Subject key identifier: 8E:E3:EE:CA:51:9B:56:8C:2D:72:7E:8B:71:9D:A0:69:D5:F4:48:EE
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 019D3AF8AB7CAFDDEBA268D7B30054218B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 19:01:08 +0000
Manifest this update: Sun 29 Mar 2026 19:01:08 +0000
Manifest next update: Mon 30 Mar 2026 19:01:08 +0000
Files and hashes: 1: Q_p3RQQ_HXAPjFO1R7wMSzG_ctY.roa (hash: FFF1GXtrqdDjFsaeT8BSbn/j24vTOF2Mi08IWvzfgUY=)
2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: 3fw7Cq7tMwZcDdstb5FT5C6V4TUisKcJImER/rDhMtg=)
3: vYJipEt__NYvmPqT8J0-vmljydE.roa (hash: xICOTeDyqcgtBhQlPEYdz0O2VGAqMM4d5syKeJc/PnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:ab:7c:af:dd:eb:a2:68:d7:b3:00:54:21:8b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Mar 29 19:01:08 2026 GMT
Not After : Mar 30 19:01:08 2026 GMT
Subject: CN=8ee3eeca519b568c2d727e8b719da069d5f448ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:1b:73:9e:92:9b:a0:a4:cd:3e:56:00:f8:
b2:55:cf:a5:9d:d3:bf:24:9e:bb:62:9e:3b:2c:ed:
2a:4e:7a:3a:25:ea:98:5c:0b:3a:bd:15:2f:db:5b:
50:17:21:bf:21:a8:ba:a3:9f:07:14:c5:0a:68:86:
dd:b4:7f:19:24:5c:10:90:b0:8c:62:0f:6c:eb:c5:
8c:41:62:da:76:6c:c3:17:e6:87:66:15:3b:36:8c:
9a:67:1f:1f:01:6b:a1:f2:ef:65:52:6c:43:75:ef:
2c:cf:91:5f:aa:35:40:70:d1:91:5d:f5:ee:f5:9d:
85:e1:3c:6c:f7:6c:b3:1f:11:6d:f6:64:1c:a3:2c:
5a:32:9d:9c:15:a8:ce:b6:fb:a9:af:d6:41:84:86:
cb:ba:2c:89:0e:49:3c:14:b3:6b:81:7f:77:55:a5:
4e:fd:3f:23:57:a4:68:90:de:f8:6d:13:74:64:6b:
e0:8e:e3:d6:9f:49:c7:bd:8d:d5:99:2e:da:4b:d9:
1e:5a:46:9f:86:cc:9a:f9:38:b2:1d:80:85:07:92:
8b:e7:86:15:e7:c4:3c:87:28:6b:f5:3a:18:b5:a5:
77:7b:47:9a:51:92:9a:32:68:d0:61:20:83:80:3a:
91:71:15:bc:d5:3e:46:33:be:4c:30:f9:33:0c:96:
c9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E3:EE:CA:51:9B:56:8C:2D:72:7E:8B:71:9D:A0:69:D5:F4:48:EE
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:91:f1:78:45:15:23:0b:41:ac:5f:71:80:a5:80:8a:a1:52:
07:e9:d3:38:fb:cf:80:7d:28:82:8a:e3:93:cd:73:93:de:2d:
fa:ab:13:df:a1:cd:af:3f:81:74:f8:d3:c3:ac:68:bf:e4:96:
92:c2:44:ef:73:f8:76:4e:62:c6:ee:c2:a1:96:c8:03:b9:d9:
06:e3:a2:ae:cd:a0:92:2a:69:53:78:6d:25:c3:1a:b0:a4:3f:
e1:2c:7e:94:36:3b:34:58:9b:3e:12:a9:95:90:71:49:54:5a:
d6:21:21:f8:8a:2e:93:94:01:75:44:d2:ed:9c:cc:fe:41:7f:
95:a7:ef:69:6c:6c:37:ac:03:52:1a:84:db:48:1d:c9:9d:a3:
97:fb:bc:6d:77:cd:56:8b:cf:61:38:3e:db:ff:f0:38:1b:e8:
d5:21:d8:ec:7a:a0:1c:34:27:80:fc:f2:03:88:06:89:95:a9:
dc:5b:32:2d:f4:80:48:dd:6c:ca:81:0d:2d:5f:b7:82:7e:ff:
5d:b2:b5:3e:a3:de:3e:7e:43:1f:2e:e6:9b:5a:83:f5:43:d5:
59:56:7b:fc:b8:b8:1b:ff:b2:3a:60:24:b7:ce:e8:5d:1e:69:
ea:92:f9:81:f2:c2:eb:17:09:0a:14:0e:0e:a7:94:a8:14:24:
09:1b:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:11:20 2026 by rpki-client