Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
File: SOowwPKOAiacV2W_SgRWd8onlKU.mft (raw, json)
Hash identifier: 6HYdB52jqtMp9S47du8HlYKixzB4wGo62AkSnRgawNE=
Subject key identifier: F1:C7:23:A1:6D:67:DD:42:40:91:F2:FE:94:44:15:AC:6E:59:01:0C
Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
Certificate issuer: /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Certificate serial: 019D38D3CCED71D8FDEE7E8AC0E2C329139C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
Manifest number: 1497
Signing time: Sun 29 Mar 2026 09:01:37 +0000
Manifest this update: Sun 29 Mar 2026 09:01:37 +0000
Manifest next update: Mon 30 Mar 2026 09:01:37 +0000
Files and hashes: 1: QUGDzQXyufF4cTbxCFKpDXDDu0Y.roa (hash: 8BFiaRg39psluNeIpVd2PWr39z5J747/91yNbr4CXuY=)
2: SOowwPKOAiacV2W_SgRWd8onlKU.crl (hash: KaR0+xxjl7RRE8CmjpD+Bx7bLP++i7dilK825v53WV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:cc:ed:71:d8:fd:ee:7e:8a:c0:e2:c3:29:13:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Validity
Not Before: Mar 29 09:01:37 2026 GMT
Not After : Mar 30 09:01:37 2026 GMT
Subject: CN=f1c723a16d67dd424091f2fe944415ac6e59010c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:f8:f6:3c:ab:47:83:79:8a:ba:a4:4b:04:
2c:bd:dd:9a:37:89:5c:f0:b9:79:1b:5c:f5:ac:a9:
01:ca:ad:76:42:a1:d9:aa:c0:de:25:78:47:dc:13:
ee:c4:5b:7a:84:d0:b9:d6:b8:11:fd:d9:96:45:9c:
12:63:14:92:ca:64:63:c8:96:5f:61:8b:aa:47:60:
49:89:79:75:67:f4:c2:42:43:76:fa:10:6e:80:61:
5e:62:f2:2d:a1:f6:de:14:c6:65:d0:8f:13:ee:e7:
f5:f5:b4:5a:04:96:4b:c4:23:77:83:84:27:f5:59:
e9:1e:6e:51:45:19:aa:40:56:27:fe:69:c4:ce:65:
e4:a3:21:81:f4:32:b7:b0:8b:73:6f:68:a5:48:59:
1f:3e:02:17:32:3f:9d:8e:e2:bc:c9:22:03:ef:66:
b7:6d:8e:0f:e5:2b:10:26:66:b0:e5:8f:6f:81:fe:
63:ed:1d:98:3f:47:03:06:69:20:61:f5:51:9a:67:
e6:bb:eb:e6:95:61:e5:58:b7:9b:74:88:75:0f:2d:
bc:e7:b2:15:fc:ff:b0:f9:36:1a:cb:04:95:47:f7:
7b:88:76:e3:a9:30:d3:37:c1:ae:38:c8:e4:63:4f:
f7:f9:77:bb:5c:4f:18:36:70:67:9a:f5:f7:5d:22:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C7:23:A1:6D:67:DD:42:40:91:F2:FE:94:44:15:AC:6E:59:01:0C
X509v3 Authority Key Identifier:
keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3a:ab:df:a0:68:bc:b0:d4:6b:29:19:6f:10:b1:b3:0a:c5:
6c:d1:a0:e7:f5:19:6c:ce:66:21:9e:0e:f5:b8:ed:ac:2f:f2:
bd:d7:bd:f5:af:70:e6:f4:17:f3:3b:01:26:bc:15:25:62:61:
20:b8:9f:4b:33:e4:40:f1:62:8b:7d:52:d0:10:58:00:ad:be:
2a:d7:a6:07:51:72:da:49:bd:35:a2:e9:f9:63:58:10:17:1b:
fe:64:ab:1c:ad:25:7d:35:82:74:66:92:13:0c:ea:d3:13:2e:
0a:bc:bd:1b:8f:6f:1d:0c:2d:d9:d5:17:66:ef:3d:96:35:72:
69:fe:64:21:c6:b7:60:9d:9e:50:24:98:91:e3:41:99:e8:2e:
30:23:37:ff:24:44:ba:fc:30:01:27:24:9b:87:24:e5:6f:87:
f5:b5:c5:e7:b3:a1:26:4c:6c:88:2c:0c:b1:07:c7:b0:c3:d1:
a9:59:a1:9e:56:8b:48:b5:e7:e7:c0:81:c9:72:85:9e:b0:db:
65:7d:51:c9:00:f1:bb:7c:82:8c:fc:97:1e:17:85:c6:c0:d0:
48:13:55:48:4a:88:31:52:b0:ab:e0:e3:15:34:c7:d1:28:cc:
d9:55:45:80:74:29:fe:6a:0b:5b:2d:1b:b0:c8:b7:34:25:8b:
8b:15:55:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:48 2026 by rpki-client