Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: 7JHK1OHUhS7NNGCv9Er6afTBdABc6a1I3ezNq7GjYyA=
Subject key identifier: D9:9F:CE:F1:8A:66:79:1C:E0:EA:58:53:82:20:70:AD:B4:28:CA:01
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 019D27045DC65E040BD5F092A63BED3852CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 189A
Signing time: Wed 25 Mar 2026 22:01:30 +0000
Manifest this update: Wed 25 Mar 2026 22:01:30 +0000
Manifest next update: Thu 26 Mar 2026 22:01:30 +0000
Files and hashes: 1: Eid3d62YnxHe5Y2-V0Bh36ut8zk.roa (hash: INOU1pQ7jEMWCkd6rFZSFopLqyhhp2Ctyc6t0sEfFdA=)
2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: XaLPaDpFQ/RW7fzGif0u2G7bf5BmLunylBt240hkpWc=)
3: nnLnTcVXO544vHFcYVwBAQxMeQo.roa (hash: SFOznpvXz/JoSjUg8z9TzNGJVZ8Y7Eg8GWV4zl8aNrY=)
4: v980U-h91dgOwXDSBh4k-i7QAt0.roa (hash: C5VY2sj93F7Cq2/ofd1slgZ2bbIgYdzNTiYM2XjNUXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:5d:c6:5e:04:0b:d5:f0:92:a6:3b:ed:38:52:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Mar 25 22:01:30 2026 GMT
Not After : Mar 26 22:01:30 2026 GMT
Subject: CN=d99fcef18a66791ce0ea5853822070adb428ca01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:25:db:ae:7b:da:ce:65:ad:ef:34:33:a2:
08:38:25:98:ed:fe:13:8e:07:c1:a5:d6:8c:a1:be:
95:57:2a:23:e1:34:9d:fc:41:3e:82:79:f7:f8:de:
c7:0b:ea:c7:3b:1d:39:09:5a:48:39:b7:76:1b:15:
b9:98:c1:05:0f:f6:25:e0:52:b3:46:ca:fe:90:9a:
82:3e:5f:a3:87:9e:a6:2b:db:69:fa:71:a6:79:ff:
2f:77:6b:a7:f9:6f:3b:de:4d:ca:29:e9:d0:0b:5d:
b7:8b:fb:f3:39:73:e7:e0:bc:11:5b:33:fb:89:60:
ae:06:63:4a:e6:30:2d:43:54:bc:72:c7:87:31:23:
e7:c6:67:ae:0f:c0:a6:9e:a7:53:50:dc:12:0b:99:
88:50:bf:f6:f2:e2:43:54:b1:c9:42:15:4d:cc:da:
4f:ff:91:95:44:dd:0b:f9:a1:2a:ac:14:6e:d1:3e:
69:a8:8c:9b:6d:d0:0c:35:6f:29:8d:bc:9d:43:95:
40:3d:ed:6d:34:98:dd:6c:e6:21:4b:37:6e:da:9e:
1a:9c:b3:b7:c0:ca:d7:b2:c6:16:1f:5e:b9:e4:cd:
f7:84:ed:bf:36:5f:f9:7d:cb:e8:7f:f6:30:f8:91:
b0:e9:2a:f3:ba:19:4f:85:61:1f:9c:68:6e:73:09:
27:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9F:CE:F1:8A:66:79:1C:E0:EA:58:53:82:20:70:AD:B4:28:CA:01
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b8:5b:ea:db:57:9b:a8:c1:d2:57:f7:8b:89:36:b3:ab:0e:
ea:eb:c0:96:bf:59:26:45:f0:13:84:e6:58:57:4a:08:1a:e6:
6c:8c:ce:39:41:f9:23:d7:43:33:fe:65:3d:e2:c1:7b:6e:6d:
f5:9d:29:9d:c3:0d:1a:61:14:8e:34:40:09:a1:5c:60:93:01:
68:68:1a:e2:fd:84:51:83:8a:e3:e7:fb:2e:42:29:d1:b4:86:
02:3e:ec:c3:91:a4:89:a0:29:f4:e3:40:60:e2:9a:14:c5:27:
a5:be:29:6d:ee:88:d8:a7:64:ad:d0:54:a7:cb:16:13:d6:2c:
72:d0:ad:3e:5d:0f:75:44:ad:22:1f:db:28:02:4e:35:48:11:
dd:9f:d7:68:98:63:a3:3c:c0:ce:c3:d7:f9:cf:fa:06:6d:f7:
77:58:53:7e:e8:11:81:fa:f8:14:cd:ff:17:ae:c3:af:30:85:
1e:f1:6e:a3:92:5d:56:e7:9d:40:f7:5a:8e:75:30:0c:8f:e8:
92:dd:ed:40:bd:07:d0:74:b4:bb:81:66:cd:e4:5f:b9:cf:07:
66:4f:0f:65:1a:f1:d0:80:2a:fb:34:cc:e2:6e:34:d6:e2:78:
5f:f8:95:6d:4f:38:6a:c4:81:c3:2f:c1:3b:c0:74:87:69:87:
98:85:90:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBF3GXgQL1fCSpjvtOFLMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZTA2YTM1MWE1MTg5YmNkYzQ0ODQwOTQ4ZGJmYjQwYWJm
NThiZTUwHhcNMjYwMzI1MjIwMTMwWhcNMjYwMzI2MjIwMTMwWjAzMTEwLwYDVQQD
EyhkOTlmY2VmMThhNjY3OTFjZTBlYTU4NTM4MjIwNzBhZGI0MjhjYTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIcl26572s5lre80M6IIOCWY7f4T
jgfBpdaMob6VVyoj4TSd/EE+gnn3+N7HC+rHOx05CVpIObd2GxW5mMEFD/Yl4FKz
Rsr+kJqCPl+jh56mK9tp+nGmef8vd2un+W873k3KKenQC123i/vzOXPn4LwRWzP7
iWCuBmNK5jAtQ1S8cseHMSPnxmeuD8CmnqdTUNwSC5mIUL/28uJDVLHJQhVNzNpP
/5GVRN0L+aEqrBRu0T5pqIybbdAMNW8pjbydQ5VAPe1tNJjdbOYhSzdu2p4anLO3
wMrXssYWH1655M33hO2/Nl/5fcvof/Yw+JGw6SrzuhlPhWEfnGhucwknxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmfzvGKZnkc4OpYU4IgcK20KMoBMB8GA1UdIwQY
MBaAFEjgajUaUYm83ESECUjb+0Cr9YvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDIt
YWIxYTg3ZWNkZjFiLzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDItYWIxYTg3ZWNkZjFi
LzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7hb6ttX
m6jB0lf3i4k2s6sO6uvAlr9ZJkXwE4TmWFdKCBrmbIzOOUH5I9dDM/5lPeLBe25t
9Z0pncMNGmEUjjRACaFcYJMBaGga4v2EUYOK4+f7LkIp0bSGAj7sw5GkiaAp9ONA
YOKaFMUnpb4pbe6I2KdkrdBUp8sWE9YsctCtPl0PdUStIh/bKAJONUgR3Z/XaJhj
ozzAzsPX+c/6Bm33d1hTfugRgfr4FM3/F67DrzCFHvFuo5JdVuedQPdajnUwDI/o
kt3tQL0H0HS0u4FmzeRfuc8HZk8PZRrx0IAq+zTM4m401uJ4X/iVbU84asSBwy/B
O8B0h2mHmIWQMA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:23 2026 by rpki-client