Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: kZ3TQkt2lr5ecg46GQHFb70i2GXYRCaKMMh+Xepiobk=
Subject key identifier: DE:C9:C2:7A:77:9E:37:8D:B4:E6:5D:E0:3F:5E:85:B9:EB:38:2B:56
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 019E1FECE315E786DC9CB5853D0553A99F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 169A
Signing time: Wed 13 May 2026 06:01:18 +0000
Manifest this update: Wed 13 May 2026 06:01:18 +0000
Manifest next update: Thu 14 May 2026 06:01:18 +0000
Files and hashes: 1: CXGVhKl7DsWirjDBB4d9lp0XVYo.roa (hash: vG2ULDUsBgokxLvpRChtUJL0gfvZ1Q8YEhzTpKweXsw=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: 291HQxljFuODJ+e9LcxmW0UJwwzjiKYc2rZffpvanr0=)
3: TXtG8gOe4ICQThOU5GVmNxWR1wY.roa (hash: 1oG8biV7yLA5eMcYQnufX6gNgX4sZUXdc41fFMpt6Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:e3:15:e7:86:dc:9c:b5:85:3d:05:53:a9:9f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: May 13 06:01:18 2026 GMT
Not After : May 14 06:01:18 2026 GMT
Subject: CN=dec9c27a779e378db4e65de03f5e85b9eb382b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e9:0b:9c:e3:a9:ad:1a:36:3a:5e:da:c3:b4:
b6:30:2f:41:af:2f:ad:50:0a:bd:da:6b:17:3d:1c:
d7:ee:03:3e:6b:77:58:4c:fd:d5:2b:13:33:47:79:
0a:8d:31:34:96:0c:64:0e:d8:e7:b0:e5:12:16:5a:
d0:f5:b8:e0:72:66:79:e2:8b:8e:9f:47:59:00:d7:
ef:59:3f:a7:5d:bf:4c:a7:ed:88:3d:56:1f:5a:ae:
ae:da:39:92:bf:60:4b:2e:5d:5d:97:23:76:67:28:
ec:d5:1b:2b:a7:31:4d:1a:a8:f4:da:62:1c:5a:26:
96:0e:1d:bb:36:0e:c1:74:71:94:c3:a3:fc:c5:db:
61:57:13:c7:59:d6:ed:ed:ce:2b:54:6a:fe:62:3a:
cf:ba:42:7b:2b:6e:e3:5b:b8:54:76:ca:49:20:d5:
ff:e5:17:bb:15:7a:6b:34:aa:d2:59:56:f8:20:ca:
9c:14:28:9c:b4:30:8f:10:10:22:e2:77:26:0b:5d:
89:58:ae:8b:e4:cd:00:ed:a4:e5:00:14:b1:5d:d3:
44:1c:12:35:1e:4b:a6:7e:45:01:0a:d7:f6:ec:8b:
d3:d6:82:be:62:a0:b4:f4:5c:6f:38:30:f8:bb:3e:
56:5c:e3:c1:a5:43:ce:a6:c5:97:c6:06:1f:6b:6f:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C9:C2:7A:77:9E:37:8D:B4:E6:5D:E0:3F:5E:85:B9:EB:38:2B:56
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9a:54:9d:79:97:bf:30:ef:fa:55:19:d7:20:be:5c:ca:49:
fa:74:07:be:99:4f:77:17:7a:03:33:47:e0:cf:b8:09:86:64:
10:f6:75:d6:be:e4:61:09:67:93:54:16:9f:4f:f2:9f:59:9c:
d0:cc:46:89:38:49:fa:39:c1:99:2d:2e:7a:22:3c:f0:cc:9e:
98:72:d6:95:07:cb:60:f5:48:7e:9f:48:4e:a2:0c:02:51:34:
46:df:51:91:3d:a6:c1:73:f1:18:b5:96:de:bd:e3:72:24:a7:
5e:7a:aa:b9:f5:fc:13:f2:c5:6f:50:29:6c:85:19:45:a4:4f:
8a:1f:6d:82:ed:84:6b:3f:01:50:1e:04:2e:70:12:e1:c6:72:
5e:33:fd:ad:0f:e7:18:b3:88:18:98:73:85:4b:ad:0e:75:f1:
ec:d0:da:d0:8c:34:f4:2a:3d:52:d5:65:c3:e3:7f:ef:48:c5:
91:44:14:0a:03:15:c8:cb:28:46:fd:b1:12:7d:43:79:5b:7c:
4d:ae:01:96:80:ae:04:c9:7a:60:1a:4d:98:3a:94:a1:0d:dc:
7c:af:d8:5c:50:d0:7a:0e:09:d2:59:03:2b:c0:4f:f6:a1:14:
f1:95:0f:e3:34:69:c1:30:a7:af:e7:81:91:52:81:37:a5:f6:
2c:82:64:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7OMV54bcnLWFPQVTqZ9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOGFlNzg3MTUyNWJlMmVhNGQwZGZmZGFlNGYzYThiZmYz
NzI0OTYwHhcNMjYwNTEzMDYwMTE4WhcNMjYwNTE0MDYwMTE4WjAzMTEwLwYDVQQD
EyhkZWM5YzI3YTc3OWUzNzhkYjRlNjVkZTAzZjVlODViOWViMzgyYjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnukLnOOprRo2Ol7aw7S2MC9Bry+t
UAq92msXPRzX7gM+a3dYTP3VKxMzR3kKjTE0lgxkDtjnsOUSFlrQ9bjgcmZ54ouO
n0dZANfvWT+nXb9Mp+2IPVYfWq6u2jmSv2BLLl1dlyN2Zyjs1RsrpzFNGqj02mIc
WiaWDh27Ng7BdHGUw6P8xdthVxPHWdbt7c4rVGr+YjrPukJ7K27jW7hUdspJINX/
5Re7FXprNKrSWVb4IMqcFCictDCPEBAi4ncmC12JWK6L5M0A7aTlABSxXdNEHBI1
HkumfkUBCtf27IvT1oK+YqC09FxvODD4uz5WXOPBpUPOpsWXxgYfa2/0PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7Jwnp3njeNtOZd4D9ehbnrOCtWMB8GA1UdIwQY
MBaAFEqK54cVJb4upNDf/a5POov/NySWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQt
OThmNzQ1NGJhNmNlLzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQtOThmNzQ1NGJhNmNl
LzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZpUnXmX
vzDv+lUZ1yC+XMpJ+nQHvplPdxd6AzNH4M+4CYZkEPZ11r7kYQlnk1QWn0/yn1mc
0MxGiThJ+jnBmS0ueiI88MyemHLWlQfLYPVIfp9ITqIMAlE0Rt9RkT2mwXPxGLWW
3r3jciSnXnqqufX8E/LFb1ApbIUZRaRPih9tgu2Eaz8BUB4ELnAS4cZyXjP9rQ/n
GLOIGJhzhUutDnXx7NDa0Iw09Co9UtVlw+N/70jFkUQUCgMVyMsoRv2xEn1DeVt8
Ta4BloCuBMl6YBpNmDqUoQ3cfK/YXFDQeg4J0lkDK8BP9qEU8ZUP4zRpwTCnr+eB
kVKBN6X2LIJkCA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:15:28 2026 by rpki-client