Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
File: SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft (raw, json)
Hash identifier: oXjoZnA/I8YRtys1aZpyO997ZMuugnDwEvT/4UIuMz4=
Subject key identifier: E3:86:40:CF:68:20:F7:80:18:E8:64:B7:23:F6:ED:55:E0:CB:B4:E0
Authority key identifier: 48:E6:B2:5B:F9:89:FC:37:04:BD:8E:84:E0:D5:D9:D6:8D:02:B4:EB
Certificate issuer: /CN=48e6b25bf989fc3704bd8e84e0d5d9d68d02b4eb
Certificate serial: 01A1DE7069D8E36AB83EC72F7F58CFA7DEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:01:11 +0000
Manifest this update: Sun 15 Nov 2026 09:01:11 +0000
Manifest next update: Mon 16 Nov 2026 09:01:11 +0000
Files and hashes: 1: NA4KUnaZ-7quWuidYkuLJ9qLJL8.roa (hash: WMFv5tO73TosL+xYHmLzwInHMA669D5/mO5dF7Lq1sg=)
2: SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl (hash: NY0D3ka3IBnJzKQCdVq8KHeUKgILNestqqgUUQprxsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:69:d8:e3:6a:b8:3e:c7:2f:7f:58:cf:a7:de:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e6b25bf989fc3704bd8e84e0d5d9d68d02b4eb
Validity
Not Before: Nov 15 09:01:11 2026 GMT
Not After : Nov 16 09:01:11 2026 GMT
Subject: CN=e38640cf6820f78018e864b723f6ed55e0cbb4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:fb:3d:cf:82:b2:fe:73:62:ea:96:86:bd:
de:75:04:c9:df:33:e4:f7:d0:ff:74:42:95:bc:46:
bb:26:b3:29:d8:3a:2b:17:8a:5d:8b:27:40:fc:1e:
b4:45:16:af:15:bc:68:f3:53:3a:f6:7d:67:e8:71:
c2:0d:66:ae:12:05:9b:46:70:ab:29:79:c1:54:f3:
9f:06:b5:dd:5a:38:52:3e:f2:a9:fa:51:72:2a:a6:
b6:0e:a9:cf:e4:13:1f:e4:5d:ae:5c:dc:b7:3c:85:
ca:8f:bf:ef:01:20:d7:71:02:18:85:d3:52:87:24:
44:8a:1f:92:85:c6:88:86:6c:1f:28:69:e5:ee:64:
9e:6e:7b:fe:86:87:33:28:a1:e5:40:17:66:63:a3:
e5:12:46:4d:8b:e4:ae:6d:e1:1c:11:e6:cf:ce:1a:
a6:04:74:6c:9e:a2:d1:cd:7f:04:59:e7:01:5c:20:
e1:02:8b:1b:7c:79:2b:5c:d5:4a:de:c9:57:67:45:
67:6e:d6:20:a5:65:b1:17:65:60:d1:fd:d5:d2:b6:
fb:bc:6d:2a:20:e8:28:cb:f7:ed:b8:e9:e6:32:c0:
b2:d9:04:d7:83:40:76:b1:29:e2:94:62:d7:4c:cf:
c9:8b:22:b1:9c:84:2f:0d:e4:77:8e:da:66:a0:59:
23:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:86:40:CF:68:20:F7:80:18:E8:64:B7:23:F6:ED:55:E0:CB:B4:E0
X509v3 Authority Key Identifier:
keyid:48:E6:B2:5B:F9:89:FC:37:04:BD:8E:84:E0:D5:D9:D6:8D:02:B4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:69:cf:b4:44:8b:08:89:b5:9d:b1:01:15:96:28:ac:63:35:
a6:b4:77:65:81:5d:f1:bd:93:67:f0:83:1a:cf:ed:f8:62:63:
9d:6e:09:45:62:69:38:74:8b:13:7b:b0:96:1c:43:87:42:0e:
d3:06:ad:0b:ff:5a:c9:99:0e:a8:eb:5b:d0:e9:f0:ab:d1:bc:
65:84:4f:19:7f:f8:f0:1c:a1:f7:d7:99:5a:b4:7d:f2:56:d2:
e5:f9:2f:f0:59:ab:37:a8:69:51:53:e5:40:e8:04:82:fe:af:
af:23:de:36:cb:31:ee:a1:be:3f:f8:68:49:d2:90:18:c1:b9:
3b:70:5e:ce:f0:20:8f:d5:d3:a3:74:31:fb:40:2d:e5:71:23:
88:c1:6c:7f:7b:d1:b8:4e:c4:9b:4f:c8:c7:12:be:d4:8d:80:
72:67:d5:88:bc:b3:e6:d8:f9:68:bc:e2:c2:72:ee:06:62:94:
0f:b6:18:e2:21:4d:52:d8:04:a7:24:48:74:22:cc:22:46:90:
9a:b3:02:9c:0d:79:98:ed:69:e0:e9:80:c7:60:f4:4f:31:be:
9f:0d:a0:be:54:2b:09:7c:51:88:fc:dc:12:a1:2b:c0:82:76:
07:1c:e0:e0:ee:24:1f:f1:a9:f9:ed:9c:56:5b:a7:45:08:7f:
40:6d:88:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:26:16 2026 by rpki-client