Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: 8fX2mwkz3EScg2LI+8vMXJECUZV7NCbf+hfNBq4NYYM=
Subject key identifier: 90:83:53:E2:71:D8:65:BB:75:9F:11:10:E3:75:1A:AC:7C:2C:CC:EA
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 01A0DC17590629C53DFB415F475E82D59574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 1A7A
Signing time: Sat 26 Sep 2026 05:01:52 +0000
Manifest this update: Sat 26 Sep 2026 05:01:52 +0000
Manifest next update: Sun 27 Sep 2026 05:01:52 +0000
Files and hashes: 1: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: b+rl6sW8WMVJIP5mR3k4nnKV+8SbbXKTkeBk3YLXO4Q=)
2: uECQUsjfaqrlYL383G6Bm7t8I4M.roa (hash: fiYRp6eJInd1HBPu5f1buVFXTSVD/xHqEtnjRPebiMg=)
3: zkuzAY2enYrtLGkFM8ERODYZLKA.roa (hash: PvdIqB+Fh9fTeVDgdqOpL7fRPe7DtvHIS5ulz/6oVFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:59:06:29:c5:3d:fb:41:5f:47:5e:82:d5:95:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Sep 26 05:01:52 2026 GMT
Not After : Sep 27 05:01:52 2026 GMT
Subject: CN=908353e271d865bb759f1110e3751aac7c2cccea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:ba:ee:48:f3:de:38:06:d9:ed:8f:a3:6d:
60:cc:2e:54:34:d7:a3:eb:e4:c2:a0:b9:17:bb:93:
04:5d:57:40:0b:d2:ef:83:0d:e0:26:f2:b1:70:1e:
80:9b:e4:08:1a:3d:55:bb:26:7f:a1:f5:30:7d:29:
2b:70:26:dc:5d:8a:5e:4e:80:79:ae:c4:46:7c:2f:
a1:18:e2:0f:68:f0:31:77:74:1c:29:b4:ea:e1:51:
b7:3d:36:3e:8c:f6:de:82:ad:01:93:87:00:53:e0:
a8:19:ed:99:50:74:b3:07:55:72:3d:bf:d4:94:e5:
bf:40:db:0c:dd:ad:0a:2a:70:ee:76:58:7a:7e:c4:
4e:61:d7:43:93:46:97:4d:d8:70:26:ef:c3:73:5c:
f0:3b:20:c6:79:5f:f7:41:a3:49:1a:7d:43:5d:f5:
e7:97:90:04:3c:f6:77:ac:11:b7:2f:fe:50:07:9c:
b5:93:a8:2e:12:9c:4e:c3:44:2d:d5:65:a1:5e:cd:
9d:76:23:fd:32:74:9a:e1:f5:6b:ac:50:d5:38:da:
a5:e0:89:33:84:b5:0f:44:ca:29:27:1d:a6:1a:f5:
f4:4c:c9:19:07:c0:08:46:7a:1b:43:90:74:d6:91:
9f:0d:56:94:f4:11:8b:6f:2e:e4:a1:44:c6:10:d8:
f1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:83:53:E2:71:D8:65:BB:75:9F:11:10:E3:75:1A:AC:7C:2C:CC:EA
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:b7:30:3a:41:35:40:89:1e:d6:bf:d9:29:5a:7b:a1:4a:d7:
c6:d7:9d:7c:14:68:57:a9:c9:22:b0:c4:96:7f:b5:be:aa:6e:
cd:34:1f:86:b9:f9:eb:df:e9:d7:23:91:76:18:77:3e:95:29:
06:cd:1d:47:4e:21:a2:4a:1a:68:28:8e:6e:62:ef:b0:b6:66:
e0:45:27:04:ff:b0:e5:e0:0d:62:20:a3:bc:60:a2:9d:eb:97:
33:6f:bd:74:f6:91:90:d8:08:08:a7:f0:12:a0:63:8f:53:56:
7f:63:20:72:22:e3:8a:b4:de:ec:d0:33:68:13:bf:9f:f4:c7:
18:04:d9:f3:1f:2c:f8:b2:a1:f4:86:7b:62:49:28:a7:22:78:
c0:9a:aa:b3:4a:be:fa:fa:10:f9:c2:00:9b:02:f1:23:a4:be:
05:e1:c8:09:d1:11:77:5d:1a:87:00:e1:ac:d0:16:fa:61:72:
a8:0d:88:f0:6d:d5:51:f8:65:9b:5e:41:93:80:99:6c:ff:49:
c9:27:9b:54:db:63:de:36:33:23:56:3f:2f:12:a2:57:13:a8:
71:03:f5:d4:71:90:39:b6:52:5f:16:9c:79:34:c6:79:0b:5c:
2e:b5:65:55:90:25:69:ce:52:2a:a2:37:bd:cd:11:57:2e:54:
97:10:88:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcF1kGKcU9+0FfR16C1ZV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODUzYWExZWIzMmJmZWUwZmViMTQ4M2MxNDkzNmQxMDFm
MTZlZGYwHhcNMjYwOTI2MDUwMTUyWhcNMjYwOTI3MDUwMTUyWjAzMTEwLwYDVQQD
Eyg5MDgzNTNlMjcxZDg2NWJiNzU5ZjExMTBlMzc1MWFhYzdjMmNjY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBq67kjz3jgG2e2Po21gzC5UNNej
6+TCoLkXu5MEXVdAC9Lvgw3gJvKxcB6Am+QIGj1VuyZ/ofUwfSkrcCbcXYpeToB5
rsRGfC+hGOIPaPAxd3QcKbTq4VG3PTY+jPbegq0Bk4cAU+CoGe2ZUHSzB1VyPb/U
lOW/QNsM3a0KKnDudlh6fsROYddDk0aXTdhwJu/Dc1zwOyDGeV/3QaNJGn1DXfXn
l5AEPPZ3rBG3L/5QB5y1k6guEpxOw0Qt1WWhXs2ddiP9MnSa4fVrrFDVONql4Ikz
hLUPRMopJx2mGvX0TMkZB8AIRnobQ5B01pGfDVaU9BGLby7koUTGENjx1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCDU+Jx2GW7dZ8REON1Gqx8LMzqMB8GA1UdIwQY
MBaAFLKFOqHrMr/uD+sUg8FJNtEB8W7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2Yt
ZjJiODEwNzliNzQ2LzEvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2YtZjJiODEwNzliNzQ2
LzEvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxrcwOkE1
QIke1r/ZKVp7oUrXxtedfBRoV6nJIrDEln+1vqpuzTQfhrn569/p1yORdhh3PpUp
Bs0dR04hokoaaCiObmLvsLZm4EUnBP+w5eANYiCjvGCineuXM2+9dPaRkNgICKfw
EqBjj1NWf2MgciLjirTe7NAzaBO/n/THGATZ8x8s+LKh9IZ7YkkopyJ4wJqqs0q+
+voQ+cIAmwLxI6S+BeHICdERd10ahwDhrNAW+mFyqA2I8G3VUfhlm15Bk4CZbP9J
ySebVNtj3jYzI1Y/LxKiVxOocQP11HGQObZSXxaceTTGeQtcLrVlVZAlac5SKqI3
vc0RVy5UlxCIPA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:32:58 2026 by rpki-client