Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
File: SOmaP-7GTWutCY0bLfC1NqA4jqM.mft (raw, json)
Hash identifier: AtP4MdB/I9BxNSptvsh2hF2mhyQbd8W7X5aDyba40d4=
Subject key identifier: BD:6E:51:B7:A3:D1:D8:CE:F3:D3:28:39:23:3C:44:A8:07:4A:F3:F4
Authority key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
Certificate issuer: /CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Certificate serial: 019D38664287DE7A7D355909F12FB0531E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: SOmaP-7GTWutCY0bLfC1NqA4jqM.crl (hash: 7dOzm8I1NDbTb3r2+s/PP1+G81AXtj7hSONLTyhC1vs=)
2: ZKJ7OMsZ-2L7gwZt-ahGl36GQCk.roa (hash: dn5pl0tJHil7i7MEL6Urv0uyJj/BFkAQ/mpD5JtEACA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:42:87:de:7a:7d:35:59:09:f1:2f:b0:53:1e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=bd6e51b7a3d1d8cef3d32839233c44a8074af3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:08:88:95:9c:46:22:e5:2f:94:d0:b5:2a:
04:bd:f3:25:66:a7:e8:89:60:85:3a:e5:5e:bb:07:
51:96:c7:29:1d:dd:ca:c6:0a:b4:46:76:0c:3c:79:
8a:a5:e8:56:d5:15:a4:a1:38:63:2c:84:bd:30:b6:
33:8d:3a:bc:15:1e:98:a8:5a:f3:75:f6:e8:40:a3:
60:2f:d2:fc:84:3e:d4:d7:4d:e3:dc:ed:1c:24:8a:
61:cc:ba:ad:03:2d:8c:2f:4d:6c:f3:82:07:00:d1:
24:e6:c8:b0:76:02:af:7f:eb:ca:f8:f0:5b:44:74:
c4:b3:3d:e1:68:e9:56:af:63:51:0b:e6:4a:7a:28:
ef:2e:5c:32:de:82:29:d6:04:fc:81:2c:f4:01:48:
37:b0:dc:c7:14:94:6a:99:f0:c7:30:02:5d:f7:3f:
3c:cf:c5:87:e3:d0:fd:5b:d4:ce:c7:df:4d:ef:1f:
15:2d:32:5b:1a:34:b1:f1:46:8b:d5:55:a1:eb:9e:
ee:a2:0b:33:ce:72:bc:23:c8:80:d1:47:67:6e:91:
90:f7:bd:95:59:1e:ee:b2:b0:9c:d3:55:69:1a:8e:
11:4b:a1:bb:db:02:03:10:8b:55:83:fe:0e:4a:f4:
77:38:5d:0a:08:17:d0:f4:01:40:9d:d8:b3:6b:cb:
61:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6E:51:B7:A3:D1:D8:CE:F3:D3:28:39:23:3C:44:A8:07:4A:F3:F4
X509v3 Authority Key Identifier:
keyid:48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:96:cd:82:af:51:a4:6f:ff:da:67:55:67:ef:5b:a8:bd:83:
7d:f4:12:e7:31:6a:6b:7a:1c:f6:1e:86:d2:75:82:73:26:28:
51:8b:0d:90:fb:03:87:cd:8e:6f:85:f3:04:24:00:b4:23:de:
e5:34:6c:83:c3:d2:3e:74:07:22:6b:f2:3a:91:fe:71:08:00:
fd:8d:c1:d6:cb:e4:60:2a:f3:b1:9d:83:53:e4:e6:61:10:4a:
d3:20:0b:e1:89:6e:3d:05:4e:75:f4:31:71:08:03:00:25:8f:
92:aa:5e:82:15:5a:78:51:5a:3f:90:71:33:b7:f8:90:92:4f:
04:26:4c:34:11:c2:62:37:92:8d:18:ec:f9:39:c3:c7:8a:c6:
8a:9c:64:d1:d8:a1:c0:84:c1:c1:a8:66:72:99:fb:ca:43:3c:
b5:84:a3:f4:fe:e0:ac:6f:bd:91:05:41:9c:7f:19:e1:46:52:
12:bd:32:d2:91:62:06:20:92:96:06:29:ef:93:0e:d1:85:96:
9a:0a:86:a3:a9:d3:e9:27:48:3a:13:5e:96:32:5b:c2:e8:7e:
77:b9:2d:dc:1d:08:13:b8:dc:24:79:18:54:e9:39:bc:05:dc:
20:b2:b1:8e:a0:68:ca:77:a2:e3:63:91:4e:58:9e:52:cb:a4:
3d:61:b5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:22 2026 by rpki-client