Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: Q6GkE+R0AgsMMykbbeJ7o0F1JEGfnYjMe4DiWwuhshI=
Subject key identifier: 97:45:3A:B2:5D:FD:DB:62:FF:F5:F8:DE:79:0C:A1:0E:D0:86:F4:E2
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 019D26CD500FAD7332C880DAE2C918499C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 21:01:22 +0000
Manifest this update: Wed 25 Mar 2026 21:01:22 +0000
Manifest next update: Thu 26 Mar 2026 21:01:22 +0000
Files and hashes: 1: _oMe5r1pVk1eWmBM0xQjlQQMYoA.roa (hash: vP6cRMyhx+tL5mecHizDEMHQb47lEApjkAoW42mWOaI=)
2: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: AHio8HtyKpyG0nMNPNevoJLIc2A9Nnv7OQn0eyKn0oU=)
3: uECQUsjfaqrlYL383G6Bm7t8I4M.roa (hash: fiYRp6eJInd1HBPu5f1buVFXTSVD/xHqEtnjRPebiMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:50:0f:ad:73:32:c8:80:da:e2:c9:18:49:9c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Mar 25 21:01:22 2026 GMT
Not After : Mar 26 21:01:22 2026 GMT
Subject: CN=97453ab25dfddb62fff5f8de790ca10ed086f4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:b3:8a:87:55:c0:fa:2d:80:8a:ad:b4:b3:
9d:88:98:aa:02:5e:ac:bc:9c:47:4f:4f:1f:48:df:
06:4f:5f:94:f6:8b:ec:27:f2:81:b4:0b:f8:f8:b5:
51:e7:9d:3c:67:4c:0d:53:67:3f:5f:a2:00:86:19:
e5:89:d1:de:ec:58:ab:35:b7:bb:32:43:9b:42:fe:
2b:1c:60:a8:89:fe:12:67:3f:e7:fd:f0:1b:df:76:
4b:1c:ae:5d:6d:8c:34:cc:42:90:2b:2b:6f:fb:dd:
3e:6d:95:f1:52:61:be:19:c0:95:ed:a0:64:b4:a6:
6c:f9:2f:fd:77:fb:f0:5a:b5:bd:8d:c8:7c:56:1c:
c1:4c:c0:45:34:95:ea:13:74:09:6f:a4:72:fa:b9:
42:ae:0f:f1:61:db:07:46:44:cb:4a:c8:3c:ad:81:
37:af:02:11:96:f6:19:ae:fc:39:5c:cc:36:5c:28:
9c:d5:35:32:83:bd:74:e8:26:e9:98:e6:a2:bd:d6:
cb:58:7e:49:6c:fa:45:68:cf:c2:70:19:d8:e4:3f:
e6:d1:97:16:45:8c:4d:d5:1a:67:d4:9b:80:e4:c2:
e7:bd:39:ec:05:d7:ad:c5:01:66:c2:d3:e2:7e:51:
ed:dd:f5:70:bf:a9:c3:80:4e:50:cb:43:20:a3:48:
67:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:45:3A:B2:5D:FD:DB:62:FF:F5:F8:DE:79:0C:A1:0E:D0:86:F4:E2
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e4:74:62:aa:dd:18:47:48:40:66:49:e9:de:0c:47:c3:28:
03:5c:ab:d6:22:13:c9:56:7d:3a:1c:38:d6:d5:2a:b7:68:37:
84:76:39:a5:1d:1d:3f:b2:d4:69:23:a9:c9:98:86:cf:31:d9:
43:2b:90:a6:c6:c6:17:e6:7d:6b:97:77:25:7b:83:7c:a9:66:
59:4f:f4:96:09:43:6d:4b:4b:4f:56:3b:89:9c:c0:22:49:c4:
9d:cb:c9:7c:a3:10:f7:56:9c:8b:c5:cf:9c:08:c8:90:e0:12:
39:e6:51:f5:2e:eb:eb:c5:7a:bf:f7:40:01:3a:e9:ec:48:d0:
2c:40:d7:33:ff:61:80:a7:e5:e6:0d:fe:0f:c8:30:65:15:59:
9b:83:8b:78:36:f4:3f:95:64:b1:6e:e0:71:98:e5:4c:a9:e0:
29:7a:7c:fd:82:a7:e0:09:ca:c9:75:25:89:08:f7:87:39:dd:
03:47:16:5e:32:72:71:c8:2d:98:1a:67:15:aa:e9:1d:bd:1d:
a1:cd:77:90:53:bc:c2:9b:bd:4d:00:6a:dd:6a:17:04:b3:55:
ad:99:5c:0b:1e:f9:14:f4:6f:5c:19:1c:c1:86:09:8b:a2:f4:
7c:f9:d2:57:8f:09:01:32:65:c4:00:58:30:98:52:b3:64:8d:
18:6c:72:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:28 2026 by rpki-client