Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
File: soH_MU_IquOXVAewoMF_L9403CY.mft (raw, json)
Hash identifier: GpqGwBYHF0xvvo0/VVqL85L712zUMwho83oo+Acmlu0=
Subject key identifier: D1:A2:FB:C8:EC:40:DB:5E:88:4D:52:82:2E:C2:F9:B9:78:E8:BB:5D
Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
Certificate issuer: /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Certificate serial: 019D265FBA2A5ED84A984AE7CFFF5EF0BD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
Manifest number: 1176
Signing time: Wed 25 Mar 2026 19:01:40 +0000
Manifest this update: Wed 25 Mar 2026 19:01:40 +0000
Manifest next update: Thu 26 Mar 2026 19:01:40 +0000
Files and hashes: 1: 9edgoRI9JlNIz79sa7BfNr6pgh8.roa (hash: DRtSkD3Pzsqv0sboOuhUp1FzUNEQXeI+pQ9DuM7Nj18=)
2: soH_MU_IquOXVAewoMF_L9403CY.crl (hash: DJn+ho1GHj1hiqDNHOz8xoYaxNAG824wUZwaomVOMSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ba:2a:5e:d8:4a:98:4a:e7:cf:ff:5e:f0:bd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Validity
Not Before: Mar 25 19:01:40 2026 GMT
Not After : Mar 26 19:01:40 2026 GMT
Subject: CN=d1a2fbc8ec40db5e884d52822ec2f9b978e8bb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1a:87:e9:34:21:0d:24:b0:82:03:c9:d7:cb:
00:82:f7:05:5a:cf:72:82:f6:e0:3c:2f:7d:c0:3f:
ec:63:ca:24:08:d6:2e:00:71:f3:1a:e7:a0:15:01:
0a:8a:eb:a4:de:90:02:ae:54:c3:f8:3b:55:b4:b3:
99:a9:3b:7c:b5:a4:f4:fb:2c:e7:f6:b9:af:5b:9b:
59:ed:0f:87:f5:c6:55:2e:43:25:7a:49:f2:d6:df:
de:a7:b9:e0:17:9d:76:9c:24:71:33:c3:c0:64:fe:
b9:d2:2e:ae:d7:3b:42:4b:79:5b:cf:2d:f0:d8:c3:
7b:0a:3a:45:5b:63:95:3a:b4:0c:ab:65:05:1b:c4:
3c:8e:e7:56:24:64:65:fc:82:fd:53:dd:f6:d0:87:
40:b1:79:c0:2b:3e:a1:c8:0e:0f:dd:a8:03:42:dc:
20:ea:7d:37:06:ae:de:69:ec:5a:e8:90:e6:fe:ad:
62:da:be:77:e1:7e:a2:1f:7f:17:7a:44:25:ca:65:
23:e4:6e:2e:ca:f0:f2:0c:23:94:35:82:52:f7:4f:
c0:ed:56:de:b8:27:70:ab:cd:b2:87:70:fa:d8:f3:
a4:ec:a5:a5:1a:c2:bd:55:34:bf:1e:b5:1e:1e:0c:
b7:ed:37:62:af:3f:43:f0:2a:94:94:08:ce:33:2a:
46:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A2:FB:C8:EC:40:DB:5E:88:4D:52:82:2E:C2:F9:B9:78:E8:BB:5D
X509v3 Authority Key Identifier:
keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:50:ca:bb:8b:3a:fb:8d:d0:29:88:d8:ca:ab:0c:36:b3:48:
98:b6:b9:cf:10:a6:a6:65:1a:03:6d:aa:8a:fa:2a:20:ab:8e:
35:e9:77:a6:73:5f:40:9d:c1:fe:50:8f:c3:98:64:d6:a0:f9:
4c:99:87:fd:c1:50:f7:12:9b:2e:93:b9:dc:89:4a:47:ff:da:
65:e7:79:02:5a:a3:b3:e4:ce:f4:e3:c7:14:8f:b6:6f:a0:bf:
35:4f:03:a4:af:a1:a3:0d:3e:bb:6d:40:22:1b:70:39:de:11:
c2:cb:54:b5:00:bf:3c:bc:fc:19:d5:16:9e:e2:94:fa:e5:e8:
69:db:7d:fb:26:2d:37:2e:83:67:31:bc:27:80:44:8a:b8:f7:
3b:c3:ce:ab:0a:81:4f:c0:bc:dd:e5:53:72:d6:66:01:c6:46:
7e:f8:a3:c3:6b:06:9d:c8:16:1f:c7:1b:9d:05:bb:0b:08:df:
3e:ac:bb:df:a3:49:ef:83:76:52:6e:5a:c0:92:16:30:ca:67:
57:7d:f1:27:ac:d9:da:6d:57:b9:fa:ad:96:2b:6a:b3:83:7c:
c8:23:32:6b:8e:2b:a2:d6:c9:09:f2:0f:5d:35:03:bd:29:1b:
54:f7:00:a5:8c:de:cb:d9:cf:cc:4c:79:06:50:f0:b4:89:1b:
2d:14:b2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:11 2026 by rpki-client