
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
File: SOowwPKOAiacV2W_SgRWd8onlKU.mft (raw, json)
Hash identifier: 9xKp6K9i+RDCLfQH//pHZjw54G5y/t+clQa3y6iFspg=
Subject key identifier: 4B:6E:E8:10:B8:59:01:69:FA:09:44:D3:30:66:37:C1:79:0F:E3:B7
Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
Certificate issuer: /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Certificate serial: 01A17DE1D79F1A860CD833085CA4ED1437C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
Manifest number: 16CD
Signing time: Tue 27 Oct 2026 15:01:55 +0000
Manifest this update: Tue 27 Oct 2026 15:01:55 +0000
Manifest next update: Wed 28 Oct 2026 15:01:55 +0000
Files and hashes: 1: QUGDzQXyufF4cTbxCFKpDXDDu0Y.roa (hash: 8BFiaRg39psluNeIpVd2PWr39z5J747/91yNbr4CXuY=)
2: SOowwPKOAiacV2W_SgRWd8onlKU.crl (hash: zbh1IGFiWzP73mKoh1JYc1j5VFxEHYM65rlh+6kwjDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:d7:9f:1a:86:0c:d8:33:08:5c:a4:ed:14:37:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Validity
Not Before: Oct 27 15:01:55 2026 GMT
Not After : Oct 28 15:01:55 2026 GMT
Subject: CN=4b6ee810b8590169fa0944d3306637c1790fe3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:19:e1:98:55:0c:78:f6:92:b0:48:47:a6:be:
a9:fd:cc:ef:7d:4f:07:88:ff:24:1f:aa:88:be:31:
bb:b4:39:e8:48:d0:78:94:2f:27:96:b0:b1:d7:a6:
53:1b:f8:ae:50:eb:6b:3e:31:12:c8:02:87:47:dd:
88:51:b6:99:c7:15:fb:57:f3:cb:bc:4f:b2:ed:e8:
d7:67:4e:31:06:1e:f4:5e:28:2f:49:8e:db:6f:40:
95:aa:b3:f3:48:f3:26:b1:52:9b:12:e4:20:4e:5a:
42:75:fa:88:9c:75:34:63:61:d3:94:19:03:ad:49:
09:0b:ff:82:06:3d:d2:03:a3:7e:19:6b:bc:54:4a:
ac:94:41:11:70:1c:bf:21:ad:0d:5d:ff:a7:6b:96:
ef:ea:f4:25:37:65:27:a2:f7:b8:b4:91:8f:47:77:
4a:e0:fb:72:b2:51:71:1a:86:a3:c9:15:b0:9a:7e:
d1:ef:69:e2:c7:0d:2f:28:89:2c:eb:b6:51:15:88:
0a:6f:ba:52:90:9c:2f:b3:3d:a6:58:a2:b2:27:65:
0e:0e:97:c7:d3:98:c5:15:63:f9:05:1b:19:66:eb:
45:19:15:f9:07:74:e1:45:b5:ef:8c:16:78:af:e3:
3e:f5:43:1f:a7:10:62:f8:f4:5d:c2:37:f4:f6:be:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6E:E8:10:B8:59:01:69:FA:09:44:D3:30:66:37:C1:79:0F:E3:B7
X509v3 Authority Key Identifier:
keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:69:67:b3:0d:5b:0b:bd:95:9f:05:9a:ab:64:de:3c:96:78:
a6:9e:ce:00:c4:ec:f3:fa:d4:1d:89:31:88:c6:c9:73:fc:68:
2f:fc:d3:20:d0:a5:58:4f:72:ae:38:ea:1b:e0:cc:c6:95:74:
2e:51:ee:b1:4f:e7:cd:09:70:bb:c0:f1:64:ad:33:5a:4b:3a:
86:57:59:a4:45:a0:b7:af:6c:c2:9e:45:73:b6:aa:60:f3:83:
86:6e:83:a3:c9:6a:51:7a:8a:0a:26:18:5c:58:d4:74:59:cb:
38:3e:37:0e:82:04:12:d0:1f:8d:ab:27:84:93:0f:12:24:41:
7a:e4:07:cb:ca:22:72:fd:5b:12:16:ef:c8:ef:cf:67:50:0c:
c7:81:c2:67:9d:83:93:ac:8f:3e:f6:dd:09:c6:c9:70:6e:84:
55:28:a8:38:b9:25:65:4f:32:6f:7f:d9:78:1e:f6:2b:d1:cc:
1d:89:84:7c:3d:b3:4b:e4:46:ad:4c:21:9e:a9:48:f2:b2:dd:
2e:14:4f:55:bf:0d:94:82:94:f7:73:e7:c5:f7:71:49:28:6b:
20:17:1e:21:20:69:89:ee:13:75:ff:18:b8:44:16:e8:32:4f:
79:ec:b2:70:5f:f8:13:9e:e5:be:4c:8e:0c:03:48:d7:d5:b8:
78:13:d1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:50:18 2026 by rpki-client