Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
File: b2Wy-ou61lAcfSHvR13ERUE_sos.mft (raw, json)
Hash identifier: w9FfHU23AuSns5yRG2AoG/hhgOGzgm4Wm68045PPst8=
Subject key identifier: 28:D4:84:DE:5C:7D:13:30:C0:94:85:A3:EB:61:59:AB:BF:94:78:C9
Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
Certificate issuer: /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Certificate serial: 019D389BF7292144D3CE5AB7079478EBD43F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 08:00:38 +0000
Manifest this update: Sun 29 Mar 2026 08:00:38 +0000
Manifest next update: Mon 30 Mar 2026 08:00:38 +0000
Files and hashes: 1: b2Wy-ou61lAcfSHvR13ERUE_sos.crl (hash: 8PR7R2ZNzDPIQfRH/x/bPWRooz2Wgfgg2jzfpcN4x2g=)
2: qt--VLkqB3FoWkRNj2ZXuSn-S6w.roa (hash: +/UEoQ8DkmQntw0ZyYufnau70EapjulIrEn1Jx0czaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f7:29:21:44:d3:ce:5a:b7:07:94:78:eb:d4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Validity
Not Before: Mar 29 08:00:38 2026 GMT
Not After : Mar 30 08:00:38 2026 GMT
Subject: CN=28d484de5c7d1330c09485a3eb6159abbf9478c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:ee:1d:ca:b9:2d:1b:ab:89:19:5e:b5:73:
34:14:25:59:a1:77:48:60:32:a6:c4:dc:57:d2:12:
f6:8c:23:a2:21:9e:f3:44:25:19:8e:77:19:b9:a7:
4a:58:1d:94:d3:99:c0:fe:49:25:8c:e3:2f:96:2b:
51:fa:65:76:ea:4e:be:8d:08:a0:40:92:a1:d7:4b:
31:fb:f2:23:68:ba:ee:23:aa:e4:6f:5b:4a:11:f3:
81:30:7b:f0:19:8c:40:fc:76:ee:ba:da:3d:a2:71:
1f:a4:8b:30:ab:07:9d:8e:46:b4:ef:ff:14:c3:09:
08:92:a3:bb:4f:49:d4:c3:22:0c:e3:88:c6:8b:98:
f3:29:da:1e:85:4d:09:36:26:66:7a:91:6c:4e:0f:
f7:50:0f:dc:a3:0b:8e:ad:a1:80:b0:61:eb:de:8c:
95:82:9c:35:58:bb:f0:7a:c4:81:50:8f:f7:ba:4b:
b6:b9:03:70:de:a6:1f:9a:51:29:97:72:64:51:f8:
cb:5d:72:14:cf:94:40:32:65:24:8d:a3:5d:b3:28:
4c:f1:ef:ff:29:51:df:c0:c6:46:1b:0a:ef:5a:67:
ed:a3:43:f8:c1:41:40:0d:63:c2:bb:c8:97:c1:02:
64:5d:f1:ff:4d:a2:09:83:5f:aa:19:d9:72:6f:26:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D4:84:DE:5C:7D:13:30:C0:94:85:A3:EB:61:59:AB:BF:94:78:C9
X509v3 Authority Key Identifier:
keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9c:c3:3a:e2:14:6b:fe:6a:24:fb:92:e7:0c:2f:dd:e5:68:
9a:59:d4:72:e7:87:13:13:8c:61:fc:bb:a5:c2:c4:c2:06:f9:
fa:ed:5d:17:f4:25:b9:a4:81:27:8e:61:ce:84:16:b0:be:c8:
5b:c8:45:ec:4e:46:40:38:d3:36:23:ba:11:42:04:04:2d:64:
3c:30:0d:58:17:c4:d2:34:4b:ae:aa:b2:2a:5b:c0:94:71:b7:
45:ac:8b:a7:6f:f7:68:61:11:14:72:38:f9:f7:cf:f3:e8:45:
72:bb:66:c0:79:22:10:60:26:75:cb:79:17:0c:ac:9f:ca:3d:
42:34:1d:0a:57:1f:8f:2c:72:63:0e:a2:fa:b2:2f:28:dc:4d:
66:dd:22:56:e0:91:0e:6c:76:4a:c4:5f:16:b2:7b:ad:6d:79:
9e:47:5f:ce:f2:0d:10:05:c8:2b:58:fd:e3:61:ec:04:8f:87:
32:02:0e:39:99:28:41:22:82:f1:b2:7b:79:53:66:ff:4b:98:
6d:cf:51:b6:b8:f0:4f:30:00:c2:28:e7:2c:2f:9a:5c:e6:99:
40:35:e8:0f:6d:23:9a:62:a4:9c:bf:66:36:2d:ad:47:29:c6:
10:5d:4d:a6:68:15:57:f7:fd:2f:ba:af:7f:69:20:12:e3:37:
60:e5:a1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:26 2026 by rpki-client