Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: s99g/FRs24jRMAripDMbtUd2sDaqIA8EqPPyYYyQQfo=
Subject key identifier: A9:4A:13:4A:E0:CB:0E:E3:86:B4:34:A6:53:7F:05:AB:89:7E:52:1E
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 019F94A445106D13E84897DBD8408C51EC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 175B
Signing time: Fri 24 Jul 2026 15:00:21 +0000
Manifest this update: Fri 24 Jul 2026 15:00:21 +0000
Manifest next update: Sat 25 Jul 2026 15:00:21 +0000
Files and hashes: 1: CXGVhKl7DsWirjDBB4d9lp0XVYo.roa (hash: vG2ULDUsBgokxLvpRChtUJL0gfvZ1Q8YEhzTpKweXsw=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: T+OWEg+SYNT0BAOINH/IHz31onDGOwORqcAOWu3RsdI=)
3: TXtG8gOe4ICQThOU5GVmNxWR1wY.roa (hash: 1oG8biV7yLA5eMcYQnufX6gNgX4sZUXdc41fFMpt6Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:45:10:6d:13:e8:48:97:db:d8:40:8c:51:ec:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Jul 24 15:00:21 2026 GMT
Not After : Jul 25 15:00:21 2026 GMT
Subject: CN=a94a134ae0cb0ee386b434a6537f05ab897e521e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:56:d6:b4:af:b6:4c:60:89:7e:e1:8d:c2:
e4:48:9c:e1:63:b6:ab:80:74:f2:b0:3f:0f:f7:c3:
ed:b5:4e:be:6d:6f:6e:c6:44:44:9f:09:23:db:34:
4c:ee:67:25:c0:03:93:42:9f:f6:49:5d:48:bf:a0:
d5:2e:64:b5:77:5e:e8:42:ea:21:0c:4b:60:77:51:
73:17:85:7c:80:2f:0f:a4:55:37:f9:6f:45:d6:94:
d2:01:61:c3:86:29:29:e8:6c:0c:a4:71:79:ca:d8:
5c:d5:5e:f9:82:78:3c:84:82:0a:da:a9:8c:81:79:
95:46:fd:17:55:6e:85:b7:a2:a5:32:9d:95:ac:8c:
16:4d:b3:e9:e1:cc:f5:6d:37:f3:de:2d:67:0e:bc:
de:9c:9d:70:d5:48:91:28:ca:5c:dc:ad:cf:3b:aa:
af:6c:90:35:ad:6e:ab:b2:11:39:93:71:42:51:13:
f4:63:fc:55:2a:a7:09:30:9f:3a:3b:bf:b8:c4:f9:
86:ea:cb:b1:35:04:c1:30:b0:53:59:1c:6e:2f:f7:
6c:84:8c:48:a8:2e:3c:75:e5:85:40:6e:b0:d4:aa:
62:d9:cb:14:9a:97:99:4e:94:e3:2d:33:af:74:7d:
de:7f:16:58:16:3b:60:3e:a6:62:47:4e:23:a2:a2:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4A:13:4A:E0:CB:0E:E3:86:B4:34:A6:53:7F:05:AB:89:7E:52:1E
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:81:fc:45:99:ab:55:82:de:25:d4:0c:b7:3c:02:98:92:78:
da:96:77:85:07:87:c1:73:c0:c4:6d:aa:0e:5b:37:7e:27:d4:
59:d2:01:05:32:bf:84:43:27:49:0d:f4:a8:30:64:6d:a6:44:
1b:07:cc:ba:a3:84:81:58:b2:a9:73:f6:8b:e7:ea:c2:a3:76:
25:99:ab:e9:61:52:d1:2b:3a:23:1e:8f:04:2a:65:19:12:85:
81:59:a7:3b:b4:39:e5:99:cf:48:99:91:a8:85:fd:9a:61:ca:
26:e2:c3:11:16:41:64:b8:01:09:a6:04:ba:2e:6f:4c:dc:18:
9a:48:b2:4f:3e:41:0b:64:62:3a:70:f2:fe:8e:1a:39:6b:b0:
9c:86:8c:70:f7:b7:80:54:9d:bf:c9:24:9e:36:3f:ba:35:c0:
07:b8:fc:f3:6f:94:c2:be:12:58:ff:4c:46:7d:0e:f9:d4:9e:
d3:72:21:bd:c0:a6:cc:25:07:2f:a8:4f:72:b8:47:a8:65:58:
86:82:ef:71:05:3c:bd:b8:8f:0f:6d:da:73:b7:5a:bd:63:f6:
ae:0b:23:e1:e9:77:18:43:fd:37:cb:7a:f1:b7:dd:63:a1:79:
2e:37:da:19:de:75:cf:89:5c:52:56:39:f0:57:2a:17:0e:42:
30:ee:d7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:57 2026 by rpki-client