Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: 4d0oXvp702D26inTC5zzzPrq5V4onb30ukHZLr4vl7s=
Subject key identifier: 5C:09:76:1E:FB:86:42:35:63:09:57:18:AC:AA:BE:32:04:AD:32:1A
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 01A11E9B383209A4155C6BDF05CB5AC23752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 1827
Signing time: Fri 09 Oct 2026 03:00:51 +0000
Manifest this update: Fri 09 Oct 2026 03:00:51 +0000
Manifest next update: Sat 10 Oct 2026 03:00:51 +0000
Files and hashes: 1: CXGVhKl7DsWirjDBB4d9lp0XVYo.roa (hash: vG2ULDUsBgokxLvpRChtUJL0gfvZ1Q8YEhzTpKweXsw=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: 5nGFg/px/02sYo9Z/f9MN+c+Z2IRGkGAyB+m4un0uR4=)
3: TXtG8gOe4ICQThOU5GVmNxWR1wY.roa (hash: 1oG8biV7yLA5eMcYQnufX6gNgX4sZUXdc41fFMpt6Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:9b:38:32:09:a4:15:5c:6b:df:05:cb:5a:c2:37:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Oct 9 03:00:51 2026 GMT
Not After : Oct 10 03:00:51 2026 GMT
Subject: CN=5c09761efb86423563095718acaabe3204ad321a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:55:bb:e0:a5:82:28:06:3b:36:48:c6:d7:
14:d2:50:45:88:42:44:6b:96:55:a3:74:bb:91:ea:
51:cd:fe:0e:65:a2:21:b9:f4:11:b7:6b:71:a1:f4:
0b:fd:8d:a6:34:a0:8a:77:3b:24:cc:5f:fb:fc:a9:
e2:79:a7:f9:b0:18:e4:f5:fb:84:03:96:46:a1:a6:
44:7d:20:15:de:e0:55:88:ee:1c:b4:ae:47:9a:5f:
0d:84:38:38:75:e1:b7:68:52:e5:34:9f:7d:0a:9a:
c0:d6:9c:f8:75:0a:7a:74:dd:90:37:bb:91:20:13:
1c:74:3f:0a:68:77:ee:aa:0f:44:55:f5:c9:b1:40:
37:52:c8:f4:6d:2e:e5:d6:7b:9f:0b:3e:10:bf:41:
1e:04:94:1f:cc:ff:0f:16:3f:3c:16:90:4f:6a:19:
21:3b:d7:5a:0e:7f:47:81:e7:1f:46:1e:ee:5d:71:
77:c3:41:16:d8:39:91:5a:e2:19:79:93:3c:9c:f3:
33:7b:36:e5:5e:70:36:ba:fa:19:1d:39:f8:f5:a6:
9f:eb:27:78:e0:d2:b3:c0:3b:a0:15:90:ba:79:fd:
02:20:8a:bf:b0:af:6f:65:9a:bb:ae:ca:0d:a5:ca:
04:35:27:e9:93:f2:c6:eb:5d:7b:a7:10:d5:c6:80:
d7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:76:1E:FB:86:42:35:63:09:57:18:AC:AA:BE:32:04:AD:32:1A
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:99:71:d8:9e:1b:dd:ff:d4:a2:c7:c5:64:97:dc:5b:64:62:
fd:52:02:ed:71:82:76:34:4b:31:ac:4f:88:82:89:9d:55:1e:
e5:89:fe:c6:5d:b2:b9:20:38:05:83:72:c9:68:2d:ae:62:29:
2b:35:3f:20:0b:3f:57:0c:3a:de:7e:f8:84:43:42:f4:d6:b9:
78:af:83:0c:05:06:19:c4:1e:1d:c2:3d:7a:7a:76:dc:23:fd:
eb:bc:13:ad:fa:92:e0:57:e9:ae:aa:97:eb:44:2a:53:fb:26:
56:a2:7c:40:35:eb:ed:9a:38:51:8e:e0:65:86:18:5d:73:a0:
c1:6a:74:ba:c6:7e:f9:a6:9d:a4:70:68:2b:a4:fe:b9:af:a6:
71:27:85:2b:1f:2b:f1:fb:74:17:0b:d8:f0:59:23:51:14:4d:
fa:c9:c0:44:64:c2:c7:ca:a0:2d:04:09:71:38:e2:77:e6:4b:
d9:f4:b7:b4:5b:15:19:be:51:f6:30:85:a3:27:a7:56:11:57:
3a:48:ab:2c:d3:4f:e6:70:96:c8:92:a6:c0:38:cd:ac:8a:1f:
ea:48:22:89:02:1b:62:05:f5:2f:1c:c9:8b:73:70:5f:9a:e1:
54:f6:69:8b:91:08:c4:f6:8f:1c:6d:e6:71:3b:f2:ae:66:c1:
4d:a8:99:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:41:14 2026 by rpki-client