Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
File: SOowwPKOAiacV2W_SgRWd8onlKU.mft (raw, json)
Hash identifier: F1qjY0GlJ3rfgbWBpC0UKTkCy5sqcE/ws0egPE+uJxI=
Subject key identifier: 73:22:5B:CD:87:7D:0F:CC:61:A0:19:CA:1B:A1:91:24:39:5D:C0:3B
Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
Certificate issuer: /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Certificate serial: 019D29612E81331DE7AFAF61703F27284FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
Manifest number: 148F
Signing time: Thu 26 Mar 2026 09:02:07 +0000
Manifest this update: Thu 26 Mar 2026 09:02:07 +0000
Manifest next update: Fri 27 Mar 2026 09:02:07 +0000
Files and hashes: 1: QUGDzQXyufF4cTbxCFKpDXDDu0Y.roa (hash: 8BFiaRg39psluNeIpVd2PWr39z5J747/91yNbr4CXuY=)
2: SOowwPKOAiacV2W_SgRWd8onlKU.crl (hash: sfNZGzqr67CPVZCFpyjvPUJstbx3DlNxbW1vTL9rAmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:2e:81:33:1d:e7:af:af:61:70:3f:27:28:4f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Validity
Not Before: Mar 26 09:02:07 2026 GMT
Not After : Mar 27 09:02:07 2026 GMT
Subject: CN=73225bcd877d0fcc61a019ca1ba19124395dc03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c8:82:4b:8b:be:ad:33:bc:6d:af:c1:ba:a7:
7f:de:f3:3d:c0:ad:b0:4b:2c:06:c1:82:6b:69:72:
ed:28:c3:66:7f:b8:63:04:28:3b:78:6a:10:30:0b:
46:0a:f4:3d:4c:c4:ea:79:ec:f7:a9:d4:92:20:07:
02:83:c2:22:09:16:76:90:d7:2b:df:b3:ca:33:78:
31:d7:ab:35:2b:62:2a:91:78:b3:e1:c8:d3:ca:29:
3a:48:22:f4:ce:a8:8a:1c:fa:69:e4:02:2c:fd:2e:
83:f2:b4:51:a9:59:4d:e2:2a:7f:e4:1d:ff:0f:f5:
a8:7b:c3:36:cf:d1:6d:75:ff:43:c6:dd:f1:0a:e8:
0d:50:fa:46:a1:5d:78:8f:d8:50:bc:72:b0:8d:e9:
89:0c:a9:cd:10:63:e8:a6:4c:d0:9a:d9:03:74:5b:
2f:8e:33:73:f6:50:5b:02:0d:e7:7d:95:be:f3:79:
33:cb:ba:fd:bc:4d:82:d1:e1:7f:bc:31:95:26:e1:
5e:1d:b2:e7:41:e4:f2:92:9a:dc:e6:56:4a:8e:7a:
10:af:c8:60:42:0f:d1:31:5e:96:be:35:3d:4f:ba:
f0:bf:78:34:53:05:c6:24:1e:dd:3c:78:87:87:6a:
08:d2:00:2b:e1:ac:ba:e2:43:1d:96:21:d6:36:e8:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:22:5B:CD:87:7D:0F:CC:61:A0:19:CA:1B:A1:91:24:39:5D:C0:3B
X509v3 Authority Key Identifier:
keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f3:6a:06:b0:bb:55:b6:85:de:af:ee:38:93:e4:68:d9:84:
15:0f:f2:68:fa:a9:ed:e5:c4:9c:53:93:e8:0d:bd:9b:e1:55:
67:ea:10:20:14:d0:d2:90:b1:e0:0f:92:ae:e4:ee:e7:c7:9f:
9a:68:61:26:74:35:3b:c0:cb:43:e9:8e:99:a4:72:36:1d:d8:
ab:c8:4d:e5:e8:00:8a:57:0b:85:f9:a9:b0:8e:2f:bd:47:1f:
6e:36:04:4b:90:3d:41:2b:69:4c:cf:f5:78:24:9f:a5:75:86:
cf:7d:95:c7:8c:13:dd:2c:fe:e8:a6:be:36:93:aa:0d:c4:f1:
18:22:75:c1:08:a2:40:a3:82:87:40:3a:c6:06:e0:91:6b:89:
75:7b:a5:b0:a3:ec:7d:2e:62:3a:b5:63:68:a4:9f:8a:ac:0e:
57:4a:65:d3:2d:dc:ce:90:fc:12:14:9d:3b:2c:c7:20:b9:fb:
e9:1e:9c:7b:4a:28:ff:f7:14:68:e7:5e:fa:a9:53:4e:a8:5c:
f3:9d:84:9d:39:32:70:1e:34:91:99:fb:73:3b:21:0b:15:c2:
29:c3:9e:b6:6f:3b:1e:19:f0:75:cc:31:31:75:f6:8a:05:6d:
39:01:08:01:7a:6d:45:5e:87:0e:f5:14:ac:33:b3:27:1f:86:
53:f0:cb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:37 2026 by rpki-client