Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft
File: 1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft (raw, json)
Hash identifier: FfxUW2GYS/GxL75ci6iIycHsT226xsmv7kVofkqF0Ik=
Subject key identifier: AA:8C:2F:93:49:3E:21:7A:B5:AC:A9:43:96:C2:05:8A:73:E3:22:3C
Authority key identifier: FA:98:32:F0:7A:1C:65:D7:E3:53:F4:8E:08:6F:CF:25:08:68:88:FF
Certificate issuer: /CN=fa9832f07a1c65d7e353f48e086fcf25086888ff
Certificate serial: 019D322C0A9A6D8131936609C0E0049919B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pgy8HocZdfjU_SOCG_PJQhoiP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft
Manifest number: 0157
Signing time: Sat 28 Mar 2026 02:00:40 +0000
Manifest this update: Sat 28 Mar 2026 02:00:40 +0000
Manifest next update: Sun 29 Mar 2026 02:00:40 +0000
Files and hashes: 1: 1-pgy8HocZdfjU_SOCG_PJQhoiP8.crl (hash: 163Si8neqYb5rHQV2zEhBdRUitiV5PSwkCR9PeUWfmw=)
2: OQLXEqiI0-t-jDFZ7Aw_RfcOogA.roa (hash: M/HaQZELEO7odM10mCvVSjhkNjEOwFy6fTyGxP3z8UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pgy8HocZdfjU_SOCG_PJQhoiP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:0a:9a:6d:81:31:93:66:09:c0:e0:04:99:19:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9832f07a1c65d7e353f48e086fcf25086888ff
Validity
Not Before: Mar 28 02:00:40 2026 GMT
Not After : Mar 29 02:00:40 2026 GMT
Subject: CN=aa8c2f93493e217ab5aca94396c2058a73e3223c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:50:5a:b0:86:ce:0c:76:d5:2d:30:77:30:b1:
f3:98:a5:8a:68:70:b5:15:89:7f:27:80:89:ca:e8:
06:57:30:2b:68:32:7f:c3:12:54:d4:fc:ba:ca:8c:
09:40:d0:77:ec:c7:0e:f4:11:07:bf:76:e5:82:5b:
72:a3:07:4a:65:f3:6d:7e:e4:12:47:f6:50:25:c7:
4f:5c:36:2d:6c:bd:2d:38:71:c9:d9:b2:25:93:06:
4b:09:4d:d0:82:ff:51:9d:9a:9e:eb:9b:24:f0:b7:
79:5c:25:16:d1:9d:2c:b3:4e:18:d2:d8:0e:ca:25:
f4:79:0a:4f:85:dc:33:a6:5e:85:d5:9b:44:53:6e:
46:1f:bd:c7:11:65:69:e2:17:7c:f5:a1:9f:7b:57:
07:7e:09:5d:5c:98:b3:a4:40:e9:03:8a:5d:80:84:
a8:a5:80:1e:dc:88:6e:8f:6f:85:e6:51:ae:38:64:
96:3b:96:01:0b:80:f4:69:3c:aa:e1:57:68:9f:ff:
86:d8:e1:9a:6f:64:51:f0:84:8e:65:a6:13:fe:6a:
f6:01:2e:6d:6b:02:99:57:4e:9b:6b:14:c9:e5:57:
04:1a:df:92:ce:43:0e:ca:6a:a9:28:20:b4:f7:11:
ac:1e:fa:7b:29:cd:9d:be:b7:b3:30:dc:12:3b:c3:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8C:2F:93:49:3E:21:7A:B5:AC:A9:43:96:C2:05:8A:73:E3:22:3C
X509v3 Authority Key Identifier:
keyid:FA:98:32:F0:7A:1C:65:D7:E3:53:F4:8E:08:6F:CF:25:08:68:88:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pgy8HocZdfjU_SOCG_PJQhoiP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5e:d5:f6:7e:87:f1:8f:49:fb:22:b3:70:b5:bc:5a:a7:e3:
e6:33:e3:ab:cd:a2:3a:94:de:a8:ae:88:2d:5f:cf:36:78:eb:
64:fb:ee:1a:32:55:75:ec:27:19:2c:31:34:0c:07:8c:03:ef:
ca:61:ee:9a:5a:f2:67:ce:ea:6b:04:a2:21:0b:ad:9d:93:7d:
84:39:f1:8f:ed:0c:80:17:03:47:ff:bc:fd:20:93:14:56:0a:
85:46:dd:ff:e2:02:5e:c1:74:9b:4f:a0:1b:a2:5e:0d:99:91:
55:86:bb:ea:4c:a4:0d:f2:7f:30:a4:4f:3c:9b:be:dd:a3:1c:
93:84:d8:05:61:4c:46:7f:2c:f1:33:56:d8:8b:bb:95:d1:5e:
d6:e6:a9:3c:d5:d7:2c:51:01:dd:cb:94:71:91:4f:c8:79:42:
d9:1b:31:4d:4f:df:28:a3:c3:89:52:a8:79:71:18:a8:cd:47:
d3:99:68:38:c9:12:58:dc:de:3a:52:cd:1a:e4:4f:5e:89:16:
b0:37:dc:8b:bb:86:aa:47:11:fd:cc:32:8a:3a:ca:38:da:40:
6e:be:84:47:70:7a:4e:de:a9:65:2f:cf:f8:56:ce:d4:b3:ca:
0c:ff:4c:42:57:65:6b:47:82:e3:64:78:45:ff:05:d3:2c:52:
4e:06:a4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:57 2026 by rpki-client