Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
File: SoPufcwyg3sLpbiR2PFFQ1qztgo.mft (raw, json)
Hash identifier: tBULT6xhOGWOpfdgrJ0g7Qnw4BL/TCEbXTY65Ee9UiY=
Subject key identifier: 42:E8:10:26:4B:36:79:22:6D:49:56:80:0E:40:DB:19:DA:71:5B:AA
Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
Certificate issuer: /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Certificate serial: 01A0E24FEC73F3FFC200834454DE86234B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
Manifest number: 147F
Signing time: Sun 27 Sep 2026 10:01:23 +0000
Manifest this update: Sun 27 Sep 2026 10:01:23 +0000
Manifest next update: Mon 28 Sep 2026 10:01:23 +0000
Files and hashes: 1: SoPufcwyg3sLpbiR2PFFQ1qztgo.crl (hash: qRNc+kKkA2RORck8h2mxLW7kWqExqruWa7ST8Qn4G7A=)
2: leys0pjSHL9YEW5sO6ANqpFFx5c.roa (hash: 9zF4zBfFF8tKINoW83chdjLm5f+mKJMMW9YkTlJDR08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:4f:ec:73:f3:ff:c2:00:83:44:54:de:86:23:4b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Validity
Not Before: Sep 27 10:01:23 2026 GMT
Not After : Sep 28 10:01:23 2026 GMT
Subject: CN=42e810264b3679226d4956800e40db19da715baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cb:32:15:10:fd:39:cd:b6:61:7e:3a:a1:37:
4b:42:58:08:bc:6c:e8:0c:29:86:d5:7c:e2:a8:bc:
df:6b:45:62:5b:46:01:0f:a4:ef:49:56:e2:e2:e1:
0b:4e:87:98:00:43:19:6e:2c:ab:f5:57:eb:9d:eb:
be:ef:70:b2:44:b6:9f:5a:13:75:e0:ed:f4:a3:5b:
12:4c:59:5a:aa:24:7e:82:60:cb:87:c0:0d:66:66:
8f:c3:d2:b8:3e:c8:e8:ce:d4:ce:1d:17:eb:38:9a:
da:f7:31:19:3e:22:44:49:20:e3:f7:da:34:c6:e1:
50:bf:45:4e:71:b0:f2:85:86:27:e5:80:ce:84:99:
e8:c7:49:e2:79:87:a5:3d:2d:17:95:af:55:49:8e:
16:6f:c9:46:ae:d7:fd:41:65:57:cf:45:8c:77:9a:
e3:f9:b0:65:5e:3a:91:1b:16:70:34:f3:25:c9:6a:
58:98:d2:4a:e7:c4:4a:f0:48:ca:1a:76:8a:01:38:
17:33:27:20:20:04:64:70:ac:73:05:5e:8b:e2:ab:
28:22:d8:f6:10:12:45:22:0a:be:7c:03:ff:d2:64:
db:30:0c:ee:87:9a:8d:3c:24:12:e5:03:07:d5:7a:
d8:53:a1:60:4b:6c:68:e6:42:bd:88:3a:6a:e5:a7:
89:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E8:10:26:4B:36:79:22:6D:49:56:80:0E:40:DB:19:DA:71:5B:AA
X509v3 Authority Key Identifier:
keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:61:f3:dc:e6:c4:f1:b1:7d:88:3d:5a:28:3c:da:3e:7a:e2:
57:61:1e:f4:c1:b1:a9:39:2b:e6:bd:47:be:65:71:6f:bd:d0:
26:e6:ed:fa:e5:30:59:d6:9c:41:e5:e4:88:69:73:84:ed:61:
39:5f:6b:da:6c:5c:22:02:e8:2d:93:5a:e5:76:3c:ff:26:eb:
98:b3:84:b2:ac:ad:14:41:ca:21:5d:e1:7c:d3:c4:4c:e1:de:
84:6a:ec:70:c4:e3:76:b4:43:43:f1:01:a3:b5:67:87:ce:3e:
28:cf:73:c2:f2:bc:ac:dd:dd:e5:f6:49:33:67:96:bb:17:cb:
8c:d8:0b:fe:21:1c:20:6c:35:f7:f1:ae:6f:75:ae:4b:af:4c:
07:c3:6f:29:1a:3b:08:f7:48:1c:bd:1d:d2:a4:fd:28:ec:8a:
34:2b:21:58:b8:2f:e0:48:60:e8:74:a9:ef:1e:1b:ed:73:f6:
b9:f3:5d:93:bd:cf:a2:5e:91:74:f9:08:f9:e3:6b:ed:bf:f3:
ab:7f:8a:2d:6e:9c:1d:1e:f6:46:96:20:d1:2d:b6:7c:64:4b:
25:34:0d:a3:90:b2:d2:27:19:cf:68:df:65:e5:31:47:49:91:
a8:c0:1e:54:2c:41:a1:d5:2c:8e:01:c7:42:ec:df:41:41:2a:
1e:3c:9b:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDiT+xz8//CAINEVN6GI0teMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhODNlZTdkY2MzMjgzN2IwYmE1Yjg5MWQ4ZjE0NTQzNWFi
M2I2MGEwHhcNMjYwOTI3MTAwMTIzWhcNMjYwOTI4MTAwMTIzWjAzMTEwLwYDVQQD
Eyg0MmU4MTAyNjRiMzY3OTIyNmQ0OTU2ODAwZTQwZGIxOWRhNzE1YmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMsyFRD9Oc22YX46oTdLQlgIvGzo
DCmG1XziqLzfa0ViW0YBD6TvSVbi4uELToeYAEMZbiyr9Vfrneu+73CyRLafWhN1
4O30o1sSTFlaqiR+gmDLh8ANZmaPw9K4PsjoztTOHRfrOJra9zEZPiJESSDj99o0
xuFQv0VOcbDyhYYn5YDOhJnox0nieYelPS0Xla9VSY4Wb8lGrtf9QWVXz0WMd5rj
+bBlXjqRGxZwNPMlyWpYmNJK58RK8EjKGnaKATgXMycgIARkcKxzBV6L4qsoItj2
EBJFIgq+fAP/0mTbMAzuh5qNPCQS5QMH1XrYU6FgS2xo5kK9iDpq5aeJJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELoECZLNnkibUlWgA5A2xnacVuqMB8GA1UdIwQY
MBaAFEqD7n3MMoN7C6W4kdjxRUNas7YKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU29QdWZjd3lnM3NMcGJpUjJQRkZRMXF6dGdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81MTNlOGEtYWQ1Yi00MmJlLTliNmUt
YjQyNjk0NjNiY2U4LzEvU29QdWZjd3lnM3NMcGJpUjJQRkZRMXF6dGdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS81MTNlOGEtYWQ1Yi00MmJlLTliNmUtYjQyNjk0NjNiY2U4
LzEvU29QdWZjd3lnM3NMcGJpUjJQRkZRMXF6dGdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGHz3ObE
8bF9iD1aKDzaPnriV2Ee9MGxqTkr5r1HvmVxb73QJubt+uUwWdacQeXkiGlzhO1h
OV9r2mxcIgLoLZNa5XY8/ybrmLOEsqytFEHKIV3hfNPETOHehGrscMTjdrRDQ/EB
o7Vnh84+KM9zwvK8rN3d5fZJM2eWuxfLjNgL/iEcIGw19/Gub3WuS69MB8NvKRo7
CPdIHL0d0qT9KOyKNCshWLgv4Ehg6HSp7x4b7XP2ufNdk73Pol6RdPkI+eNr7b/z
q3+KLW6cHR72RpYg0S22fGRLJTQNo5Cy0icZz2jfZeUxR0mRqMAeVCxBodUsjgHH
QuzfQUEqHjybjA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 15:57:58 2026 by rpki-client