Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json)
Hash identifier: DdR8B21kYzBPGOsrHMwHGNO+Upe5yfOL5eXuExpOnxw=
Subject key identifier: 84:F7:25:69:39:01:BA:9D:54:60:39:2B:E9:CF:9E:6C:C9:47:39:73
Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Certificate serial: 019D2771D92832F89F1F2CCE55CCB1446AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
Manifest number: 1894
Signing time: Thu 26 Mar 2026 00:01:05 +0000
Manifest this update: Thu 26 Mar 2026 00:01:05 +0000
Manifest next update: Fri 27 Mar 2026 00:01:05 +0000
Files and hashes: 1: 1WFTVE_laDxR2551YD9-IDIhOK4.roa (hash: 1U7XfEnUkzCJgaorLVPneDn26hSAWBbm2FCXShHT0iY=)
2: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: qWeHqK1PpiWfVajUolwPXKio+VW/KnWcBw4G9CXbaNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d9:28:32:f8:9f:1f:2c:ce:55:cc:b1:44:6a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Validity
Not Before: Mar 26 00:01:05 2026 GMT
Not After : Mar 27 00:01:05 2026 GMT
Subject: CN=84f725693901ba9d5460392be9cf9e6cc9473973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:c3:c9:4b:6f:f5:c0:8d:36:31:50:28:2d:
96:2b:81:da:07:e8:0b:ed:b0:ee:c8:8f:0d:a4:c1:
be:98:d9:86:95:9e:78:8c:97:b0:18:1c:97:87:ad:
86:4a:03:f6:9b:92:b5:30:43:97:60:3d:e7:ec:82:
01:f3:9b:d2:26:cc:96:5e:a4:3d:36:27:56:ec:f2:
ee:4e:97:85:a3:ad:3f:e9:eb:17:6a:08:a8:f9:1e:
c9:7a:d4:9d:44:65:81:de:36:16:92:11:7b:c3:ed:
2b:3e:cf:5b:c7:cd:6d:bc:40:79:90:60:8f:89:4c:
4f:10:7d:f8:41:ac:36:f8:fa:85:fb:55:8e:9b:87:
e9:0f:93:13:84:bf:7c:a5:36:d9:d0:67:33:12:57:
c4:fa:7d:0d:10:36:a8:50:dd:71:e9:b6:1d:36:83:
50:f4:c0:c2:e4:87:69:c2:43:27:66:16:7b:61:0b:
5d:bf:19:ca:10:55:13:3a:0e:7f:d4:41:0f:49:8f:
a0:b2:f7:f6:dc:f6:5a:5c:3c:f8:97:9a:b2:81:df:
34:cd:a3:04:db:87:e2:56:0d:a6:6f:23:a2:51:47:
cb:9e:57:2b:7a:46:95:da:d7:fd:a9:55:cc:9a:f8:
77:7e:1e:14:4f:91:3b:0a:cf:9b:47:73:7d:b1:59:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F7:25:69:39:01:BA:9D:54:60:39:2B:E9:CF:9E:6C:C9:47:39:73
X509v3 Authority Key Identifier:
keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c1:a3:bf:16:67:ef:f8:18:d1:35:97:d9:84:e4:fc:e6:6a:
d4:a4:60:77:4b:69:2a:4c:fb:e9:07:a5:80:5a:7b:81:12:60:
79:75:97:c2:21:31:b4:76:ef:75:4a:fb:a7:f5:37:f9:f8:63:
44:d7:df:82:5c:39:db:e5:83:ed:d1:24:25:3e:50:d7:63:6b:
5a:75:db:4f:4d:6e:24:62:bc:f5:21:bf:7b:3d:21:40:97:0d:
99:ae:41:89:8e:55:cd:54:26:bc:03:c5:6f:3e:a5:4d:14:c3:
a0:72:53:c0:d9:36:ea:2a:80:48:57:31:8c:9f:fb:dc:b5:25:
b5:07:88:d3:9e:5f:fb:57:be:bf:ae:35:f8:cb:9a:38:99:a1:
e7:12:5d:7f:50:49:54:49:89:c9:3a:39:43:f1:c8:14:23:14:
2c:c5:c7:33:87:e6:8b:24:0b:bc:04:17:5e:37:0d:1f:b0:9f:
8b:57:b7:b8:d6:60:0e:a8:70:d1:2c:b9:af:e8:23:38:10:02:
89:22:d4:20:b0:d1:41:9d:8d:2e:b5:2c:c2:b0:ce:a8:d1:1b:
34:7f:c8:99:f0:65:b1:39:39:69:d0:03:0b:2d:3e:9c:2f:67:
70:40:50:a7:4c:a4:ee:40:26:db:7e:46:b9:2e:3c:7b:57:23:
9f:1d:86:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:28 2026 by rpki-client