Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
File: Sojzq5SgdYciDj1xb3txffHZ5tY.mft (raw, json)
Hash identifier: uwDTCP49KosAaZJXVbIFCV2/Pg5m0rV5wxCBLwG/VO0=
Subject key identifier: ED:36:F7:30:31:4A:E0:DB:22:87:D1:32:21:04:DC:B3:F0:4B:72:0E
Authority key identifier: 4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
Certificate issuer: /CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Certificate serial: 019D26967390C4B6317FD1928EE6876C2972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 20:01:27 +0000
Manifest this update: Wed 25 Mar 2026 20:01:27 +0000
Manifest next update: Thu 26 Mar 2026 20:01:27 +0000
Files and hashes: 1: Sojzq5SgdYciDj1xb3txffHZ5tY.crl (hash: 6HGgvGkOUCdkS0AGvzC6snoosmDxs1EvHQwwUkJ89JQ=)
2: _BierKqkbKF0322RypaPacK7rIc.roa (hash: ISjKL5qyY3D+UsNMMYXT9NMFhkS06ZSrlsMwCxHPEqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:73:90:c4:b6:31:7f:d1:92:8e:e6:87:6c:29:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Validity
Not Before: Mar 25 20:01:27 2026 GMT
Not After : Mar 26 20:01:27 2026 GMT
Subject: CN=ed36f730314ae0db2287d1322104dcb3f04b720e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:5a:ad:d8:db:79:22:f5:4d:17:f6:2a:ad:
83:b6:0c:63:5e:a2:56:0b:aa:40:29:95:4f:50:c5:
3c:18:9c:38:42:52:b1:55:a7:ae:9e:6e:69:2e:f8:
0d:1b:30:94:51:28:97:20:97:f0:b9:fa:52:3a:ca:
ec:d6:2b:69:27:3e:d0:52:84:d0:80:5b:f8:6a:1f:
ef:27:6d:f0:04:f0:90:32:de:77:be:a6:bf:12:6e:
8e:91:45:65:63:bc:33:7d:41:52:55:32:b8:1a:55:
4f:bc:d6:8a:12:8c:91:c1:90:55:62:08:5f:c6:39:
99:8a:ad:0c:5b:ea:fd:5d:6a:a4:c6:12:9f:7c:e1:
3b:5d:32:d8:ff:0b:be:8f:d9:90:89:59:28:bb:2b:
bc:81:d7:c0:24:1e:b7:ca:bc:8c:e4:7f:78:ff:87:
da:42:7c:bf:fc:7e:b6:49:5c:44:52:10:40:f3:fc:
c3:7d:12:25:15:14:04:98:69:b2:8d:5c:71:98:6c:
b6:71:2c:31:b7:8b:c0:98:6b:bd:0c:33:dc:a3:3d:
32:42:fc:31:46:bf:46:20:64:a5:5f:2d:c2:cf:7f:
c5:1a:ef:3b:fa:2c:82:2e:59:e5:26:d2:94:54:3e:
f9:42:89:c8:10:25:96:7d:6a:f7:13:40:48:07:44:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:36:F7:30:31:4A:E0:DB:22:87:D1:32:21:04:DC:B3:F0:4B:72:0E
X509v3 Authority Key Identifier:
keyid:4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1b:73:f8:83:14:8b:a6:e8:6a:a3:18:d1:10:ea:82:69:9b:
86:b0:39:d8:16:e6:5c:e7:63:6b:e2:4b:c5:3a:57:40:97:4e:
6c:68:ee:78:7d:07:17:9a:18:bf:1e:3a:e2:e3:26:04:69:61:
25:cf:fc:43:e8:8d:c9:b7:63:68:0d:09:2d:0a:67:59:d5:b7:
02:ef:60:75:c8:7f:f2:fb:76:2b:22:24:bd:18:70:68:b2:c0:
be:f3:d9:7a:f3:17:03:2d:3e:16:d7:5d:6b:59:1f:26:46:49:
79:4e:90:70:4f:de:56:46:c4:f4:28:27:59:10:4c:6a:48:e6:
1d:bc:f9:5d:d6:c8:55:cf:c8:f2:74:ff:dc:b2:22:12:68:d7:
21:21:79:80:80:2e:71:33:d6:80:42:06:43:9f:2b:ce:3b:60:
97:82:66:04:95:61:53:54:c7:15:28:38:86:68:4d:46:c0:af:
31:62:6b:0d:93:03:71:4f:31:9d:92:e7:d1:22:ff:40:d4:99:
1a:75:4b:50:d2:6b:e9:0b:17:6d:02:d2:12:53:10:3f:d1:56:
af:54:ca:15:a9:54:8b:b7:37:8e:5f:ec:6f:f9:3a:df:92:68:
39:8f:81:31:e9:8e:ab:c3:53:c5:4c:90:b4:12:6f:26:8f:b9:
4a:26:e4:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlnOQxLYxf9GSjuaHbClyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhODhmM2FiOTRhMDc1ODcyMjBlM2Q3MTZmN2I3MTdkZjFk
OWU2ZDYwHhcNMjYwMzI1MjAwMTI3WhcNMjYwMzI2MjAwMTI3WjAzMTEwLwYDVQQD
EyhlZDM2ZjczMDMxNGFlMGRiMjI4N2QxMzIyMTA0ZGNiM2YwNGI3MjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUNardjbeSL1TRf2Kq2DtgxjXqJW
C6pAKZVPUMU8GJw4QlKxVaeunm5pLvgNGzCUUSiXIJfwufpSOsrs1itpJz7QUoTQ
gFv4ah/vJ23wBPCQMt53vqa/Em6OkUVlY7wzfUFSVTK4GlVPvNaKEoyRwZBVYghf
xjmZiq0MW+r9XWqkxhKffOE7XTLY/wu+j9mQiVkouyu8gdfAJB63yryM5H94/4fa
Qny//H62SVxEUhBA8/zDfRIlFRQEmGmyjVxxmGy2cSwxt4vAmGu9DDPcoz0yQvwx
Rr9GIGSlXy3Cz3/FGu87+iyCLlnlJtKUVD75QonIECWWfWr3E0BIB0QeNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO029zAxSuDbIofRMiEE3LPwS3IOMB8GA1UdIwQY
MBaAFEqI86uUoHWHIg49cW97cX3x2ebWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU29qenE1U2dkWWNpRGoxeGIzdHhmZkhaNXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MzZkZDItMGM5YS00OGU5LWFhNzEt
ZDQ1MTljNTM5YzlhLzEvU29qenE1U2dkWWNpRGoxeGIzdHhmZkhaNXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85MzZkZDItMGM5YS00OGU5LWFhNzEtZDQ1MTljNTM5Yzlh
LzEvU29qenE1U2dkWWNpRGoxeGIzdHhmZkhaNXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxtz+IMU
i6boaqMY0RDqgmmbhrA52BbmXOdja+JLxTpXQJdObGjueH0HF5oYvx464uMmBGlh
Jc/8Q+iNybdjaA0JLQpnWdW3Au9gdch/8vt2KyIkvRhwaLLAvvPZevMXAy0+Ftdd
a1kfJkZJeU6QcE/eVkbE9CgnWRBMakjmHbz5XdbIVc/I8nT/3LIiEmjXISF5gIAu
cTPWgEIGQ58rzjtgl4JmBJVhU1THFSg4hmhNRsCvMWJrDZMDcU8xnZLn0SL/QNSZ
GnVLUNJr6QsXbQLSElMQP9FWr1TKFalUi7c3jl/sb/k635JoOY+BMemOq8NTxUyQ
tBJvJo+5SibkXA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:09 2026 by rpki-client