Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: UutKZ925Ds2hSdg1V2Splwsj+vj+wboxmIUXuWWtg/4=
Subject key identifier: EA:31:B5:7E:13:2D:87:0A:F2:17:96:8F:DF:33:98:B5:A5:2F:8E:39
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 019F91DA88B9297703613B79E767939EE821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 02:00:45 +0000
Manifest this update: Fri 24 Jul 2026 02:00:45 +0000
Manifest next update: Sat 25 Jul 2026 02:00:45 +0000
Files and hashes: 1: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: T2TBORwGCSIXQAsXI6eflvZgm7LZeHxCszeXiHG5pyA=)
2: uECQUsjfaqrlYL383G6Bm7t8I4M.roa (hash: fiYRp6eJInd1HBPu5f1buVFXTSVD/xHqEtnjRPebiMg=)
3: zkuzAY2enYrtLGkFM8ERODYZLKA.roa (hash: PvdIqB+Fh9fTeVDgdqOpL7fRPe7DtvHIS5ulz/6oVFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:88:b9:29:77:03:61:3b:79:e7:67:93:9e:e8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Jul 24 02:00:45 2026 GMT
Not After : Jul 25 02:00:45 2026 GMT
Subject: CN=ea31b57e132d870af217968fdf3398b5a52f8e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:88:e4:25:7d:95:57:a9:32:8a:b2:2d:93:f8:
24:30:7f:2c:bf:87:c0:b2:02:17:50:34:fe:7f:47:
e3:6a:27:bd:2f:ad:5b:1c:7e:e6:f6:24:14:32:12:
af:e8:bc:a6:c1:2a:2e:ae:b9:6a:8c:21:2c:7e:62:
3b:e0:26:2c:96:b1:c5:95:c6:40:ea:81:64:97:af:
8f:ca:99:c4:83:af:75:77:a2:4b:d8:47:f8:cc:67:
26:e2:26:eb:ab:fa:25:af:a3:77:54:1d:70:49:26:
c2:e9:ab:c3:0c:15:97:2b:9c:88:61:67:08:4f:11:
e6:17:a7:3c:c7:73:a4:72:8d:83:eb:23:f6:ab:16:
41:74:31:e2:83:14:27:db:75:82:33:09:b0:da:af:
df:4e:ca:b3:46:58:69:44:70:66:a8:f1:a4:85:dc:
79:68:5a:ee:6e:e7:52:46:d7:b8:1b:44:0b:e3:70:
9d:48:be:8b:2d:0a:2d:15:ca:2d:38:18:92:2b:e5:
f6:f5:1a:56:49:ff:ac:75:d0:36:90:04:51:0d:d8:
69:1f:28:59:c5:33:94:3c:5a:e1:f7:5d:d6:1c:76:
c4:9f:da:7b:40:0a:5f:7a:a1:90:93:a7:20:6b:ea:
e1:b1:6a:88:69:47:3f:eb:53:59:46:88:d9:ab:5c:
42:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:31:B5:7E:13:2D:87:0A:F2:17:96:8F:DF:33:98:B5:A5:2F:8E:39
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ae:df:ca:98:38:08:99:72:a3:2d:d3:3a:6f:39:b3:00:6c:
20:e6:33:c0:ad:a5:4a:26:4c:a8:d1:9d:f4:b6:45:05:a0:69:
84:62:0e:92:28:92:be:be:07:90:91:52:69:ab:6f:21:07:85:
bf:f4:3e:3d:8e:19:49:13:b1:fd:94:0d:09:2c:49:0f:ec:a6:
a9:c7:30:7b:84:05:23:88:45:57:b2:41:c5:b1:72:25:7e:c5:
e9:b2:0f:6a:86:5c:9a:f4:e1:12:a2:48:8d:86:d6:8f:e5:8d:
56:e2:4c:19:ca:90:33:ec:14:3e:76:24:35:6f:1c:26:a9:32:
46:ac:68:66:5b:c1:49:70:8c:3a:16:88:63:7d:63:1e:ba:86:
e5:25:6b:3a:0c:be:a9:1d:9d:46:e1:fd:f2:ba:62:dd:94:8d:
e4:07:05:07:78:fd:37:4e:ef:67:d4:02:2a:64:1b:b2:df:e0:
33:9e:fa:fa:cb:c8:5f:27:be:ab:45:61:41:e5:5f:d4:3c:22:
4b:75:c8:ba:da:00:76:b0:d4:3f:46:60:ff:33:61:74:52:8b:
c9:b8:c8:8c:27:de:4a:94:ea:02:89:9c:d3:f9:a9:8b:e2:95:
a7:e6:25:53:36:f8:d7:d1:1b:78:55:b4:d5:17:b1:dd:29:e9:
23:72:d8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:12:53 2026 by rpki-client