Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: ZlWVuSIfgPVesE4DbL2EVmiKYd5h+SVpBW2mtlghmxY=
Subject key identifier: 6F:15:5B:2C:3C:87:CA:4D:20:88:58:99:44:71:BF:A7:05:25:6B:6A
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 019D28BB7F20F3083A50BFE82D096A1F57E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 161A
Signing time: Thu 26 Mar 2026 06:01:09 +0000
Manifest this update: Thu 26 Mar 2026 06:01:09 +0000
Manifest next update: Fri 27 Mar 2026 06:01:09 +0000
Files and hashes: 1: CXGVhKl7DsWirjDBB4d9lp0XVYo.roa (hash: vG2ULDUsBgokxLvpRChtUJL0gfvZ1Q8YEhzTpKweXsw=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: GzySvoFtA/sOuUruXb7e41uTaQyh9fltSBOXh8zRdG0=)
3: TXtG8gOe4ICQThOU5GVmNxWR1wY.roa (hash: 1oG8biV7yLA5eMcYQnufX6gNgX4sZUXdc41fFMpt6Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:7f:20:f3:08:3a:50:bf:e8:2d:09:6a:1f:57:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Mar 26 06:01:09 2026 GMT
Not After : Mar 27 06:01:09 2026 GMT
Subject: CN=6f155b2c3c87ca4d208858994471bfa705256b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:c1:11:25:71:0e:48:38:09:86:5b:91:02:
01:d0:90:73:1e:c4:88:e9:7e:8c:0e:82:fc:00:ae:
92:8a:39:2d:90:36:e5:6a:4d:c1:61:8e:84:b3:22:
4a:0b:13:34:66:d7:aa:c0:96:e5:73:10:f2:cd:8a:
d7:2b:eb:84:01:10:01:33:5f:2c:2f:de:e3:98:3f:
84:74:b7:8e:cd:ff:e7:06:fd:0b:04:24:ad:1b:05:
ed:1d:69:73:ad:3d:4b:56:0a:bb:6b:bc:b4:19:f7:
26:a1:87:ca:88:91:46:90:4d:0c:cc:c4:ae:c4:0d:
ce:42:b6:c2:c3:16:7a:9d:5d:d1:a9:c3:7b:1b:d5:
72:2c:60:c5:2c:0f:df:5e:6d:44:a9:d3:4b:21:0b:
03:99:3f:2f:7f:59:e0:8e:07:7c:36:55:57:a6:2a:
64:71:35:bd:6e:65:f7:f8:51:7f:11:97:9b:e7:ed:
90:13:30:c9:93:17:09:ed:ad:c8:9f:65:06:d6:6f:
3b:a2:05:07:55:71:fb:d1:a1:fa:09:43:ab:5a:24:
4d:4a:d9:40:84:93:2a:ba:04:35:5d:2f:5c:a9:33:
bb:83:25:d5:14:45:87:db:4a:94:e7:dd:17:ee:81:
7d:af:ec:19:3d:22:13:da:20:99:fd:47:d1:39:e1:
fb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:15:5B:2C:3C:87:CA:4D:20:88:58:99:44:71:BF:A7:05:25:6B:6A
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3d:89:fb:64:85:59:71:0d:b7:cd:f9:ad:ba:af:07:e7:f0:
05:c1:7d:bd:18:00:cf:0d:75:48:64:80:de:40:f6:08:03:27:
cf:c7:d5:be:45:15:dd:56:21:95:8f:e4:46:9b:db:d7:2b:b5:
e6:be:0e:f4:16:b8:4e:2f:06:16:4c:38:18:b5:4e:a8:d3:b4:
1f:95:cd:83:f2:a1:aa:da:c9:b7:b5:4f:e6:57:9b:2b:71:42:
9c:b7:a9:d9:40:8f:48:ea:88:c6:87:b3:a0:f4:7c:a1:2f:91:
94:bd:56:c5:8e:c3:b7:a5:4a:7c:b8:ec:6a:9e:73:17:cb:4d:
22:2f:d3:05:16:60:2a:f5:df:91:cc:46:cc:f4:e1:48:c6:9a:
f4:03:60:83:c9:0c:ab:27:53:9e:ed:2d:13:ed:1b:f2:76:8e:
48:54:89:b2:d7:ca:55:5f:70:85:1c:d1:f6:41:01:57:88:9e:
e5:12:46:14:a2:f3:35:aa:ff:33:ef:cc:13:24:1a:64:23:7e:
2f:8a:ef:13:14:a7:8b:1b:cc:d0:94:ef:0e:9e:b5:15:85:47:
7a:c4:04:79:a8:41:64:57:ec:c0:bf:92:fd:3a:81:cb:a1:8f:
5b:6e:70:e0:62:65:76:53:ad:d1:fd:53:08:f7:3e:bf:e0:25:
20:30:9d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:01 2026 by rpki-client