Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: j/AXDVBie/hOMR2Se9LIbE88X0T3TMtcvpYJKOJQKmE=
Subject key identifier: 03:0F:9B:5F:29:12:AC:38:41:19:FE:03:CA:CD:75:EE:1A:59:03:EA
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 01A0E1075F1A4BBA1A4AE6B6B590917919FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 1A88
Signing time: Sun 27 Sep 2026 04:02:31 +0000
Manifest this update: Sun 27 Sep 2026 04:02:31 +0000
Manifest next update: Mon 28 Sep 2026 04:02:31 +0000
Files and hashes: 1: Eid3d62YnxHe5Y2-V0Bh36ut8zk.roa (hash: INOU1pQ7jEMWCkd6rFZSFopLqyhhp2Ctyc6t0sEfFdA=)
2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: 68+y6ihwwINYDZQ3twxX6Zzj1OsuJZospjrBDGJIzTs=)
3: nnLnTcVXO544vHFcYVwBAQxMeQo.roa (hash: SFOznpvXz/JoSjUg8z9TzNGJVZ8Y7Eg8GWV4zl8aNrY=)
4: v980U-h91dgOwXDSBh4k-i7QAt0.roa (hash: C5VY2sj93F7Cq2/ofd1slgZ2bbIgYdzNTiYM2XjNUXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:07:5f:1a:4b:ba:1a:4a:e6:b6:b5:90:91:79:19:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Sep 27 04:02:31 2026 GMT
Not After : Sep 28 04:02:31 2026 GMT
Subject: CN=030f9b5f2912ac384119fe03cacd75ee1a5903ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:24:07:be:95:97:80:c7:74:69:d9:20:8f:
38:d7:f7:aa:ad:bb:e7:05:56:da:ab:6c:18:d0:e4:
de:ed:15:f2:1b:ab:c9:21:b6:ca:e7:7b:35:97:c2:
b6:fa:40:a9:1b:2d:71:d6:69:bd:03:c4:ac:ef:91:
68:8c:26:8e:c3:c2:82:09:a7:2f:93:83:68:cb:b7:
a3:ad:24:8b:03:a4:bc:ba:a3:24:77:10:23:12:44:
d0:d1:a9:c3:e5:27:60:b2:15:05:79:40:a6:9b:67:
f5:a5:3f:74:fe:b8:65:58:8d:23:b9:0b:c3:07:f2:
ff:94:51:a2:bb:0b:78:1c:8b:87:67:ed:60:b8:bb:
8e:e6:74:d1:90:b9:5e:8e:13:33:cb:b6:fd:80:0b:
17:09:0d:f2:85:ba:63:59:84:db:04:a0:6e:ed:fc:
9b:90:20:d1:b4:2b:56:e7:4f:e1:63:3c:88:9d:89:
1f:29:98:b8:1d:d9:3b:48:f9:d9:c4:3e:db:fa:3e:
05:d0:09:ed:30:81:2d:9a:41:04:56:48:f2:54:15:
48:05:fe:30:f9:94:36:f1:1e:fe:f2:56:30:28:db:
68:37:17:d8:87:7b:4c:e6:bf:f4:c0:be:51:96:35:
84:df:78:74:c3:91:1e:06:4b:b2:c4:bd:01:f1:ce:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0F:9B:5F:29:12:AC:38:41:19:FE:03:CA:CD:75:EE:1A:59:03:EA
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:54:d2:39:e7:90:1c:c8:df:5b:15:f3:0e:cb:3f:13:cf:09:
78:43:09:86:c2:c7:9d:42:21:af:49:4a:94:54:67:8e:25:e7:
f0:d1:83:cc:00:63:e8:9c:46:8b:c6:9e:2a:88:df:6f:8f:69:
45:d8:06:e2:ed:9d:4b:d7:c1:c0:3f:10:13:28:11:ae:11:34:
92:5c:10:34:17:60:1f:82:37:62:a9:96:85:49:c5:bd:03:55:
1f:c3:18:a0:36:fd:a9:60:3e:01:70:ac:8c:8b:25:e1:f4:aa:
82:0b:c4:d8:3d:23:55:a7:5b:fa:4d:1a:9d:1d:c6:52:c6:97:
bd:b1:4f:fe:2d:ff:3d:c9:d2:a9:59:8a:23:46:e5:47:78:60:
c9:ed:d2:93:5a:1f:91:70:e6:91:88:23:c0:b0:51:1f:ab:3d:
4e:11:94:2e:a2:4b:72:28:42:51:60:bc:ec:04:7c:f3:9b:99:
01:de:1f:2f:0f:60:1c:2a:10:24:df:59:5e:de:b4:19:15:98:
c8:f1:9f:55:db:22:c7:2d:5f:c0:8e:88:24:ed:76:d6:6a:7c:
5e:31:61:4a:62:3f:73:68:2e:1f:62:09:ad:74:5d:1f:57:2c:
da:df:f5:11:3a:52:31:df:57:c6:ed:9b:20:bd:66:ca:1b:f0:
10:a3:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:35:58 2026 by rpki-client